Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Nncr-WR1lq_RrHandcH9rw2uLhg.roa
File: Nncr-WR1lq_RrHandcH9rw2uLhg.roa (raw, json)
Hash identifier: VX7fQcly4s5Sr8dj8sRoL8d7Hk+4F/ofTf72HmHjiaY=
Subject key identifier: 36:77:2B:F9:64:75:96:AF:D1:AC:76:A7:75:C1:FD:AF:0D:AE:2E:18
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019ED712691964AF9065B9D6D288CBEB9588
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Nncr-WR1lq_RrHandcH9rw2uLhg.roa
Signing time: Wed 17 Jun 2026 19:32:48 +0000
ROA not before: Wed 17 Jun 2026 19:32:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 31.222.248.0/24 maxlen: 24
45.142.39.0/24 maxlen: 24
94.158.189.0/24 maxlen: 24
157.22.0.0/24 maxlen: 24
157.22.1.0/24 maxlen: 24
157.22.2.0/24 maxlen: 24
157.22.3.0/24 maxlen: 24
157.22.4.0/24 maxlen: 24
157.22.5.0/24 maxlen: 24
157.22.6.0/24 maxlen: 24
157.22.7.0/24 maxlen: 24
157.22.8.0/24 maxlen: 24
157.22.9.0/24 maxlen: 24
157.22.10.0/24 maxlen: 24
157.22.11.0/24 maxlen: 24
157.22.12.0/24 maxlen: 24
157.22.13.0/24 maxlen: 24
157.22.14.0/24 maxlen: 24
157.22.15.0/24 maxlen: 24
157.22.20.0/24 maxlen: 24
157.22.21.0/24 maxlen: 24
157.22.22.0/24 maxlen: 24
157.22.23.0/24 maxlen: 24
157.22.24.0/24 maxlen: 24
157.22.25.0/24 maxlen: 24
157.22.26.0/24 maxlen: 24
157.22.27.0/24 maxlen: 24
157.22.28.0/24 maxlen: 24
157.22.29.0/24 maxlen: 24
157.22.30.0/24 maxlen: 24
157.22.31.0/24 maxlen: 24
157.22.32.0/24 maxlen: 24
157.22.33.0/24 maxlen: 24
157.22.34.0/24 maxlen: 24
157.22.35.0/24 maxlen: 24
157.22.36.0/24 maxlen: 24
157.22.37.0/24 maxlen: 24
157.22.38.0/24 maxlen: 24
157.22.39.0/24 maxlen: 24
157.22.40.0/24 maxlen: 24
157.22.41.0/24 maxlen: 24
157.22.42.0/24 maxlen: 24
157.22.43.0/24 maxlen: 24
157.22.48.0/24 maxlen: 24
157.22.49.0/24 maxlen: 24
157.22.50.0/24 maxlen: 24
157.22.51.0/24 maxlen: 24
157.22.52.0/24 maxlen: 24
157.22.53.0/24 maxlen: 24
157.22.54.0/24 maxlen: 24
157.22.55.0/24 maxlen: 24
157.22.56.0/24 maxlen: 24
157.22.57.0/24 maxlen: 24
157.22.58.0/24 maxlen: 24
157.22.59.0/24 maxlen: 24
157.22.60.0/24 maxlen: 24
157.22.61.0/24 maxlen: 24
157.22.62.0/24 maxlen: 24
157.22.63.0/24 maxlen: 24
157.22.64.0/24 maxlen: 24
157.22.65.0/24 maxlen: 24
157.22.66.0/24 maxlen: 24
157.22.67.0/24 maxlen: 24
157.22.68.0/24 maxlen: 24
157.22.70.0/24 maxlen: 24
157.22.71.0/24 maxlen: 24
157.22.76.0/24 maxlen: 24
157.22.77.0/24 maxlen: 24
157.22.78.0/24 maxlen: 24
157.22.79.0/24 maxlen: 24
157.22.80.0/24 maxlen: 24
157.22.81.0/24 maxlen: 24
157.22.82.0/24 maxlen: 24
157.22.83.0/24 maxlen: 24
157.22.84.0/24 maxlen: 24
157.22.85.0/24 maxlen: 24
157.22.86.0/24 maxlen: 24
157.22.87.0/24 maxlen: 24
157.22.88.0/24 maxlen: 24
157.22.89.0/24 maxlen: 24
157.22.90.0/24 maxlen: 24
157.22.91.0/24 maxlen: 24
157.22.92.0/24 maxlen: 24
157.22.93.0/24 maxlen: 24
157.22.94.0/24 maxlen: 24
157.22.95.0/24 maxlen: 24
157.22.96.0/24 maxlen: 24
157.22.97.0/24 maxlen: 24
157.22.98.0/24 maxlen: 24
157.22.99.0/24 maxlen: 24
157.22.104.0/24 maxlen: 24
157.22.105.0/24 maxlen: 24
157.22.106.0/24 maxlen: 24
157.22.107.0/24 maxlen: 24
157.22.108.0/24 maxlen: 24
157.22.109.0/24 maxlen: 24
157.22.110.0/24 maxlen: 24
157.22.111.0/24 maxlen: 24
157.22.112.0/24 maxlen: 24
157.22.113.0/24 maxlen: 24
157.22.114.0/24 maxlen: 24
157.22.115.0/24 maxlen: 24
157.22.116.0/24 maxlen: 24
157.22.117.0/24 maxlen: 24
157.22.118.0/24 maxlen: 24
157.22.120.0/24 maxlen: 24
157.22.121.0/24 maxlen: 24
157.22.122.0/24 maxlen: 24
157.22.123.0/24 maxlen: 24
176.56.37.0/24 maxlen: 24
178.212.143.0/24 maxlen: 24
185.46.175.0/24 maxlen: 24
185.92.211.0/24 maxlen: 24
185.161.79.0/24 maxlen: 24
193.33.66.0/24 maxlen: 24
193.56.29.0/24 maxlen: 24
194.32.238.0/24 maxlen: 24
194.32.239.0/24 maxlen: 24
194.56.180.0/24 maxlen: 24
195.64.110.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
212.18.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d7:12:69:19:64:af:90:65:b9:d6:d2:88:cb:eb:95:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 17 19:32:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36772bf9647596afd1ac76a775c1fdaf0dae2e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:d3:f1:ca:40:78:46:98:0f:b3:1b:09:2b:
0e:c5:99:d6:2b:0b:76:ef:be:9d:a8:45:39:98:d2:
a4:0b:f1:46:d1:6b:24:51:d4:d9:87:e5:42:a7:ed:
56:33:c6:25:28:76:e3:d1:af:4d:36:f4:65:56:c4:
ae:b4:3e:27:cf:a2:2b:09:8b:74:80:5d:8a:98:d4:
b1:74:a1:5a:18:61:c9:5a:91:0f:92:01:ba:90:21:
1b:1f:2f:6d:89:6d:68:ac:2e:4a:f0:be:1c:5c:ef:
72:1f:42:ed:7d:ec:37:8f:1b:90:cb:e6:e5:ee:25:
e5:64:e3:df:61:12:22:42:70:4c:d8:d1:1d:3b:76:
4d:db:84:c1:6c:27:02:38:1f:c7:1d:18:da:00:a6:
1c:ef:63:4a:bc:06:86:9f:8b:16:97:61:c4:9c:68:
f3:88:4c:a9:25:ad:66:ea:25:6b:19:35:1c:9e:9c:
3b:00:47:d2:91:7d:24:9d:d8:e1:f7:70:89:70:4a:
bb:6a:b0:83:fc:76:1d:1d:fb:44:31:89:29:c9:21:
6f:4f:97:aa:9a:7a:8d:a8:b6:15:f8:79:49:d4:23:
c3:d8:5a:81:63:d3:1c:c2:93:d5:53:89:0c:e6:b3:
2f:fe:15:1b:dd:e3:61:8a:1e:5a:66:a9:9e:cb:ba:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:77:2B:F9:64:75:96:AF:D1:AC:76:A7:75:C1:FD:AF:0D:AE:2E:18
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Nncr-WR1lq_RrHandcH9rw2uLhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.248.0/24
45.142.39.0/24
94.158.189.0/24
157.22.0.0/20
157.22.20.0-157.22.43.255
157.22.48.0-157.22.68.255
157.22.70.0/23
157.22.76.0-157.22.99.255
157.22.104.0-157.22.118.255
157.22.120.0/22
176.56.37.0/24
178.212.143.0/24
185.46.175.0/24
185.92.211.0/24
185.161.79.0/24
193.33.66.0/24
193.56.29.0/24
194.32.238.0/23
194.56.180.0/24
195.64.110.0/24
195.96.146.0/24
212.18.103.0/24
Signature Algorithm: sha256WithRSAEncryption
72:bb:fe:06:97:84:2c:3d:e1:2e:dc:01:b7:5c:c2:a9:23:59:
f1:bd:89:e7:5f:87:90:ba:5d:c2:91:78:2e:12:ee:55:b5:83:
f8:e0:61:51:4a:b3:9a:a5:0f:48:3c:3f:9b:50:10:8b:92:db:
cf:35:cc:7f:b9:76:84:9e:a3:52:f1:be:cf:0c:85:1b:e1:a9:
c2:50:8b:d1:e7:70:7a:1a:86:61:8b:ad:6b:40:2d:d3:61:0b:
b6:22:89:df:42:5e:c8:04:c1:52:40:29:ba:24:77:38:77:7a:
79:8c:c1:3c:09:49:2d:00:78:13:35:0f:5d:01:c9:e9:50:a2:
a3:1e:1f:3b:de:02:42:eb:c1:18:12:56:73:a0:50:ba:18:21:
02:51:47:61:f8:29:79:18:8a:b6:c5:f9:a9:8f:19:8b:7e:56:
3f:3b:e1:55:83:c4:c8:91:34:10:5a:02:bf:02:03:56:27:76:
5a:0e:6b:49:ed:8b:d5:81:a3:a0:8d:28:cc:b6:16:0e:ee:6e:
11:0d:64:4b:f3:f9:24:4f:b2:98:fc:df:96:d6:05:79:fd:48:
95:13:08:9b:06:1a:0f:a3:21:f2:0e:43:18:7a:0a:66:77:9b:
11:a6:ed:aa:17:2d:38:20:64:9c:41:0e:ee:f5:0b:0c:8a:8b:
34:fa:99:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 23:34:57 2026 by rpki-client