Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nFW0bI8Bkop4d9gafWwZQMDjd1w.roa
File: nFW0bI8Bkop4d9gafWwZQMDjd1w.roa (raw, json)
Hash identifier: 5Ry5IXoHN0ofv/K2qZFBvN7zptIPdMJpfzy/b95P/T0=
Subject key identifier: 9C:55:B4:6C:8F:01:92:8A:78:77:D8:1A:7D:6C:19:40:C0:E3:77:5C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019E3F96A9F610BD181A402032A6AB15E0A7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nFW0bI8Bkop4d9gafWwZQMDjd1w.roa
Signing time: Tue 19 May 2026 09:34:58 +0000
ROA not before: Tue 19 May 2026 09:34:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56361
IP address blocks: 31.148.40.0/21 maxlen: 24
31.148.52.0/22 maxlen: 24
31.148.56.0/21 maxlen: 24
31.148.104.0/21 maxlen: 24
31.148.112.0/21 maxlen: 24
31.148.192.0/22 maxlen: 24
92.38.56.0/21 maxlen: 24
92.38.80.0/22 maxlen: 24
93.170.166.0/23 maxlen: 24
93.170.192.0/21 maxlen: 24
93.171.34.0/23 maxlen: 24
93.171.36.0/22 maxlen: 24
95.46.128.0/21 maxlen: 24
95.46.166.0/23 maxlen: 24
95.46.168.0/22 maxlen: 24
95.46.172.0/22 maxlen: 24
146.158.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:96:a9:f6:10:bd:18:1a:40:20:32:a6:ab:15:e0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 19 09:34:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c55b46c8f01928a7877d81a7d6c1940c0e3775c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:33:b3:8b:7d:3d:1b:4d:c2:de:91:8d:4a:
9b:f3:6a:40:ae:f3:1c:4f:70:c8:4e:c0:d6:9f:87:
24:60:7d:10:b8:cf:b9:d2:7a:bc:d0:06:8f:0c:2b:
e1:70:19:56:7e:f9:15:65:71:f7:fc:4f:f2:90:12:
4d:2c:07:53:21:56:57:8d:ce:89:51:19:42:cb:4c:
fa:66:85:1f:63:65:dc:27:58:b8:69:83:76:c5:58:
1a:49:ab:bf:99:c0:87:5e:93:f9:ea:06:b1:c3:e6:
82:4f:b5:61:3c:db:9b:02:b8:27:50:ed:03:2b:39:
59:24:92:5f:51:14:92:b1:73:3d:b3:ff:1d:2e:93:
01:98:e6:c2:31:2f:c6:6b:48:44:40:25:86:11:d6:
84:60:40:5d:89:5b:fd:73:23:f2:84:17:4f:3a:68:
4e:ac:c6:ba:7c:b3:e1:1a:5e:1e:35:72:47:19:71:
16:33:b5:26:e2:53:92:bf:67:e7:19:6e:dc:b0:16:
1d:86:b8:84:b1:92:71:db:b3:fb:03:25:07:6c:e3:
46:4f:34:10:3d:ee:11:eb:27:99:8e:18:f3:10:1d:
60:b3:18:d8:8b:56:12:f5:67:ba:db:a4:f0:8a:03:
12:5e:55:57:81:50:35:d2:16:cd:f2:a7:cb:8f:6e:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:55:B4:6C:8F:01:92:8A:78:77:D8:1A:7D:6C:19:40:C0:E3:77:5C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nFW0bI8Bkop4d9gafWwZQMDjd1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.40.0/21
31.148.52.0-31.148.63.255
31.148.104.0-31.148.119.255
31.148.192.0/22
92.38.56.0/21
92.38.80.0/22
93.170.166.0/23
93.170.192.0/21
93.171.34.0-93.171.39.255
95.46.128.0/21
95.46.166.0-95.46.175.255
146.158.48.0/21
Signature Algorithm: sha256WithRSAEncryption
55:2d:96:28:8a:dd:32:21:a4:5c:e0:ce:fd:8c:4c:e5:80:b8:
b7:40:16:24:a4:d4:29:a5:54:85:43:f4:1e:b3:cd:06:4e:2f:
69:e0:74:70:f8:7a:96:d7:9e:bb:83:7f:fe:44:5c:7c:a2:88:
1a:b8:54:df:b2:8c:df:fc:48:d5:a6:82:03:d4:be:8c:67:2a:
60:83:23:39:dc:cb:b3:71:88:b1:61:33:c3:74:10:9e:b3:a9:
78:ef:8c:ae:dd:00:6e:f1:40:e2:d9:64:ae:a3:b0:25:9d:32:
71:12:7e:73:c2:74:9d:88:bb:c9:be:4e:aa:35:c4:77:a1:1e:
5d:b9:df:e6:51:7f:5b:f6:19:5c:d3:82:c5:8e:10:f0:c4:d2:
b8:a0:2c:ca:a7:28:ca:55:06:c9:36:b9:af:cd:6f:d4:5e:ef:
92:ac:ff:68:9a:ba:70:59:54:8a:3e:fe:68:0c:4c:94:e5:4d:
1d:5a:4f:02:ae:e5:65:44:49:50:1a:4d:3c:29:ce:08:d8:d1:
1d:ff:72:6c:e1:f0:df:a1:52:66:2a:6b:2d:56:7c:73:49:fe:
a3:07:88:26:af:50:d2:be:91:89:6e:03:8d:f0:2d:45:d6:f7:
ab:f9:d9:71:46:9d:61:75:f4:04:89:49:a6:67:c1:a7:0f:5b:
e0:02:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:20 2026 by rpki-client