Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/R4nwBrKG7x9uOWCG8K_so7mVRUo.roa
File: R4nwBrKG7x9uOWCG8K_so7mVRUo.roa (raw, json)
Hash identifier: R6vN21QkHPK5A6K5j3qcFOHwB6bVk1zcZeUr2+mwrXk=
Subject key identifier: 47:89:F0:06:B2:86:EF:1F:6E:39:60:86:F0:AF:EC:A3:B9:95:45:4A
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019E3B589D68639B3D60C87C33027BF47D79
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/R4nwBrKG7x9uOWCG8K_so7mVRUo.roa
Signing time: Mon 18 May 2026 13:48:43 +0000
ROA not before: Mon 18 May 2026 13:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.71.0.0/16 maxlen: 16
31.72.0.0/14 maxlen: 14
31.78.0.0/15 maxlen: 15
31.99.153.0/24 maxlen: 24
31.99.154.0/23 maxlen: 23
31.99.156.0/22 maxlen: 22
31.99.160.0/19 maxlen: 19
31.99.208.0/20 maxlen: 20
31.99.224.0/19 maxlen: 19
178.99.0.0/16 maxlen: 16
178.107.48.0/20 maxlen: 20
178.107.64.0/18 maxlen: 18
185.102.192.0/22 maxlen: 22
185.102.196.0/22 maxlen: 22
185.102.200.0/22 maxlen: 22
194.36.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 16:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:58:9d:68:63:9b:3d:60:c8:7c:33:02:7b:f4:7d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: May 18 13:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4789f006b286ef1f6e396086f0afeca3b995454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2c:d9:bc:c1:9d:b3:0e:6c:59:9a:86:81:48:
c4:0c:69:f6:36:f5:c4:a6:bb:84:1d:0c:7f:ec:7a:
72:e1:88:dd:e8:68:70:4c:6e:eb:ec:af:e3:5b:2c:
6d:06:80:b6:39:b3:d8:06:59:67:72:3d:09:e9:4b:
69:81:8e:8e:ba:41:0c:53:e3:19:ed:e9:f7:46:81:
e1:2a:a6:e3:e6:a0:21:7e:d2:23:21:a0:06:82:e3:
a9:00:20:91:f1:ca:72:9c:81:b8:26:23:8a:cb:16:
ec:88:e0:eb:41:36:28:87:70:88:5d:3f:4c:7a:d9:
e5:8f:01:ab:7c:8b:8c:c6:f0:13:60:3f:b6:c1:9b:
e9:e0:33:fc:00:58:ee:2b:83:d0:1f:de:bb:f3:89:
d8:b8:d4:41:da:73:1c:3b:c3:0e:4a:d5:a7:67:6e:
88:41:dd:18:c9:c9:5d:d1:92:57:08:cf:12:57:01:
3a:f3:76:4a:68:90:eb:96:cd:24:37:fc:90:33:75:
47:0f:21:e5:1e:ae:fb:84:93:7e:e5:e2:9a:90:de:
43:55:89:f5:60:7e:d2:da:d2:45:f4:d1:46:66:ef:
66:35:b5:ed:6f:34:f4:f7:aa:d1:50:f4:21:26:e7:
ea:0d:ea:11:3e:b3:89:96:76:1b:ac:e2:df:89:9a:
63:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:89:F0:06:B2:86:EF:1F:6E:39:60:86:F0:AF:EC:A3:B9:95:45:4A
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/R4nwBrKG7x9uOWCG8K_so7mVRUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.71.0.0-31.75.255.255
31.78.0.0/15
31.99.153.0-31.99.191.255
31.99.208.0-31.99.255.255
178.99.0.0/16
178.107.48.0-178.107.127.255
185.102.192.0-185.102.203.255
194.36.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:c3:7d:31:d3:c5:9c:97:19:f1:8d:9e:32:77:d0:82:b3:7d:
ae:bf:2c:eb:26:66:f9:08:68:82:ea:88:22:f9:a9:9e:b4:72:
41:d0:90:b2:8e:fb:d1:f5:43:bc:13:ed:b7:03:af:12:6f:dc:
c4:e9:95:64:5b:04:83:f4:49:44:6c:27:02:25:db:0b:ee:a5:
48:47:a8:64:ad:ce:57:d9:ef:4b:33:22:cf:f4:6b:0b:29:ec:
e9:0b:93:93:55:ff:6e:95:42:6b:84:51:6a:e4:93:b3:75:4f:
97:fc:70:d7:08:8a:39:d0:be:aa:69:af:82:aa:2f:3f:6c:f0:
10:f1:bb:bc:2f:95:d8:43:ad:05:80:83:2b:d0:24:9d:91:71:
66:dc:6d:85:e8:31:aa:e1:4f:75:d7:c8:3f:01:d7:a2:7f:7c:
91:61:67:dd:4b:a5:cc:13:92:8b:73:90:78:28:b7:98:88:1a:
a5:1b:a3:18:d4:b6:5e:e5:73:33:8a:35:56:e0:f4:e9:5e:ed:
d4:36:ad:43:ed:21:07:e7:ef:69:53:55:27:43:d8:6b:c2:96:
1f:5a:73:79:d3:36:73:ba:4a:e3:8b:bb:9f:e2:86:88:4c:c8:
7a:f1:92:46:5c:72:b9:20:fa:c0:22:e8:f3:95:11:c2:96:ea:
4a:30:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:04:05 2026 by rpki-client