Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8wDjg_AO23f8f4uNfdrcPAHsDMk.roa
File: 8wDjg_AO23f8f4uNfdrcPAHsDMk.roa (raw, json)
Hash identifier: ulYMCQEhruUaRDS58avLxZkZ8vWRh0qYJ/3BFtI8OSg=
Subject key identifier: F3:00:E3:83:F0:0E:DB:77:FC:7F:8B:8D:7D:DA:DC:3C:01:EC:0C:C9
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019EF8CBA3E511C85A8434C1786AF52FCE05
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8wDjg_AO23f8f4uNfdrcPAHsDMk.roa
Signing time: Wed 24 Jun 2026 08:42:35 +0000
ROA not before: Wed 24 Jun 2026 08:42:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.72.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.146.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
212.68.58.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:cb:a3:e5:11:c8:5a:84:34:c1:78:6a:f5:2f:ce:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 24 08:42:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f300e383f00edb77fc7f8b8d7ddadc3c01ec0cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:be:25:a5:4e:3f:5d:a8:ed:aa:d2:a4:29:
4f:06:d4:9c:7a:1e:1d:10:06:79:cf:e5:ff:3b:46:
c2:ce:9b:d9:17:e1:a6:f3:67:1b:d3:be:72:3c:76:
14:c4:25:64:6a:65:0f:9f:5f:5f:36:2f:0b:3a:89:
be:7f:aa:26:4e:3f:ee:25:ab:7d:5c:7d:83:35:0b:
19:c7:bd:44:d5:73:30:da:0d:bd:7c:09:81:62:86:
61:dc:75:b6:73:7d:2b:e1:7a:12:d9:f8:e2:64:b1:
7b:05:36:68:c3:b1:57:02:35:67:3b:23:0b:0a:37:
c2:2e:c2:49:dc:5a:f1:4f:e3:f8:27:9a:f9:ff:be:
ed:2b:19:9d:35:0f:9a:5d:08:ba:5c:ae:62:4b:c5:
2d:36:3c:15:12:2d:2f:8f:be:b7:e5:db:85:d8:9a:
27:a0:fe:e4:e1:8e:b5:f4:62:3c:c7:92:34:6f:92:
a6:36:23:bf:dc:be:fd:8f:40:c9:bc:c8:25:9b:02:
18:d2:b0:1a:d9:91:a3:ae:68:ec:47:27:87:e8:47:
e7:19:50:3c:b9:e7:84:dc:71:14:a5:20:1c:72:a5:
ca:36:80:6f:75:27:a7:3b:cb:e6:14:6c:d2:6a:53:
2e:65:be:0f:06:32:02:b8:00:9c:f3:a2:56:49:d9:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:00:E3:83:F0:0E:DB:77:FC:7F:8B:8D:7D:DA:DC:3C:01:EC:0C:C9
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8wDjg_AO23f8f4uNfdrcPAHsDMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.72.0/24
78.135.81.0/24
78.135.92.0/23
78.135.100.0/24
78.135.104.0/24
185.17.139.0/24
188.132.129.0-188.132.130.255
188.132.146.0/24
188.132.152.0/23
188.132.165.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.189.0/24
188.132.199.0/24
188.132.201.0-188.132.202.255
188.132.209.0/24
188.132.212.0/23
188.132.234.0/23
212.68.58.0/24
212.68.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:77:36:ea:b8:0a:00:10:56:6e:7d:6f:88:ae:9f:43:13:11:
f1:fa:7c:a9:43:64:90:cb:db:28:6d:bb:c3:2d:53:77:fa:49:
1c:8b:91:0d:f5:4a:92:59:2b:ff:17:13:71:8b:b7:9e:93:14:
41:09:f9:24:2e:c4:35:5a:40:7c:81:70:35:42:6d:b1:78:ef:
00:2a:3e:c0:a1:e3:3b:75:92:64:bd:c7:ba:82:59:85:6c:83:
11:45:43:fb:42:06:0c:9f:e1:78:70:04:bb:aa:ca:4e:6b:6f:
1f:56:2c:71:4d:e9:2f:89:05:4f:8b:28:3c:8c:a2:22:68:b8:
0b:77:56:82:7e:52:20:a8:57:96:8f:57:3c:73:15:4f:60:05:
36:81:c3:bf:c4:1f:9e:a4:40:31:63:fd:08:c9:6a:34:41:37:
eb:04:0c:ce:89:19:6d:01:b7:ef:ed:ae:33:eb:8c:8d:99:b7:
ba:67:2c:47:61:8d:17:79:35:8d:d2:43:f2:20:de:41:53:ce:
02:a8:ef:6d:6b:a5:6a:5f:ad:54:88:f6:be:ef:c5:28:ae:f6:
54:5b:d7:a5:05:57:3f:69:3e:43:e1:55:89:25:a5:2a:c7:a2:
d8:27:04:6e:06:c4:5a:43:a6:99:e8:dc:43:e5:ac:91:26:b2:
81:3d:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:31:05 2026 by rpki-client