Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/mN4_7znmhWi-7I9qZMAr9ui1cgU.roa
File: mN4_7znmhWi-7I9qZMAr9ui1cgU.roa (raw, json)
Hash identifier: wXKg1WZNGUjZDLkEp6R81wVKgQ5zsURw3VtNW0RMihk=
Subject key identifier: 98:DE:3F:EF:39:E6:85:68:BE:EC:8F:6A:64:C0:2B:F6:E8:B5:72:05
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019D9C3C7466EA567DD9703E1FB8A684BD87
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/mN4_7znmhWi-7I9qZMAr9ui1cgU.roa
Signing time: Fri 17 Apr 2026 16:18:20 +0000
ROA not before: Fri 17 Apr 2026 16:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.64.0.0/14 maxlen: 14
31.68.0.0/15 maxlen: 15
31.71.0.0/16 maxlen: 16
31.72.0.0/14 maxlen: 14
31.78.0.0/15 maxlen: 15
31.99.64.0/18 maxlen: 18
31.99.128.0/18 maxlen: 18
31.99.208.0/20 maxlen: 20
31.99.224.0/19 maxlen: 19
178.99.0.0/16 maxlen: 16
178.107.48.0/20 maxlen: 20
178.107.64.0/18 maxlen: 18
185.102.192.0/22 maxlen: 22
185.102.196.0/22 maxlen: 22
185.102.200.0/22 maxlen: 22
194.36.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:3c:74:66:ea:56:7d:d9:70:3e:1f:b8:a6:84:bd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Apr 17 16:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98de3fef39e68568beec8f6a64c02bf6e8b57205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:27:92:0d:d2:3f:8f:d8:5b:6d:27:b0:0d:
8a:2b:b8:c9:f5:8f:a5:36:53:e7:f7:9d:c3:a9:63:
77:67:82:c4:6a:c9:71:08:55:b5:dc:8c:00:c4:c5:
4c:7f:96:69:db:b9:c8:ce:81:9e:c5:27:bb:5b:43:
1c:a2:15:29:5a:96:3e:79:75:9d:56:06:9c:ee:4a:
07:20:17:3c:0d:20:41:87:76:49:68:19:95:e9:cb:
96:9d:8c:63:de:ad:9a:ec:c6:c2:e3:41:c3:e0:a3:
99:ba:3b:ef:0b:0a:b7:0e:ee:3c:01:a9:fe:08:2a:
fc:3c:1e:9d:d9:1c:4b:a1:46:19:7b:bb:e7:1c:4c:
bf:d9:73:4a:0d:ba:47:0e:cf:b2:9b:f4:fa:a4:b0:
cd:3f:23:1e:1a:1e:f3:cc:9a:f3:fd:2a:5b:02:d1:
f2:93:ec:e9:85:6f:39:bf:24:01:1f:34:c5:05:2b:
e1:a6:b0:16:c8:80:c7:a6:75:9c:b0:ff:24:35:5a:
96:23:e4:e4:4e:8e:b7:7a:ed:bb:29:bd:ae:d0:95:
cb:69:fd:8f:cd:01:6e:3f:0f:9d:f7:9e:9f:e8:53:
71:fa:09:ba:c0:34:f5:6b:0c:c6:df:78:66:f6:bd:
72:13:1f:f1:7e:09:79:04:59:d2:3f:42:b9:58:25:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DE:3F:EF:39:E6:85:68:BE:EC:8F:6A:64:C0:2B:F6:E8:B5:72:05
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/mN4_7znmhWi-7I9qZMAr9ui1cgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.64.0.0-31.69.255.255
31.71.0.0-31.75.255.255
31.78.0.0/15
31.99.64.0-31.99.191.255
31.99.208.0-31.99.255.255
178.99.0.0/16
178.107.48.0-178.107.127.255
185.102.192.0-185.102.203.255
194.36.212.0/22
Signature Algorithm: sha256WithRSAEncryption
77:0b:03:e2:27:48:83:e8:e1:61:10:7c:c9:ba:09:2a:20:ef:
0a:a7:d6:64:4f:8e:cf:2f:e1:54:4f:d3:56:72:f0:35:e6:a9:
f2:93:2d:58:65:76:a8:ec:48:ce:7d:b4:87:d1:22:52:1a:75:
d9:80:99:7d:bf:76:01:bc:24:9a:0b:ee:55:db:03:d1:51:f5:
7c:0e:c1:d3:0a:f8:3d:9a:ca:3d:b9:a9:71:5c:2a:b1:42:42:
f2:39:ef:02:a1:74:3b:5c:c9:c5:83:d2:45:04:17:ee:a8:78:
f1:69:20:ba:52:bc:24:7b:3d:eb:79:ec:e3:99:5e:37:97:2b:
e2:aa:6e:38:37:39:ee:71:6f:04:00:c4:23:69:07:be:01:dc:
51:a5:24:0d:cd:bf:5d:74:6c:96:98:c2:70:68:67:d8:59:5b:
c4:f6:6f:83:11:ee:dc:bb:93:ca:c6:35:58:7f:8a:13:92:12:
27:18:79:5e:72:90:27:06:ba:87:1e:9f:b6:c7:35:98:5b:d6:
c9:8f:21:af:ef:f4:06:67:28:93:74:6d:85:4c:ea:ea:5c:c9:
71:3a:29:95:81:33:36:79:31:b3:44:17:1f:7c:b7:a0:62:28:
74:62:e7:9d:bd:53:90:2c:ea:39:78:44:36:85:fe:f5:8d:18:
4d:82:1c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:23:53 2026 by rpki-client