Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CMjA0ffS04Kf8QOTd4-8t_i_tTs.roa
File: CMjA0ffS04Kf8QOTd4-8t_i_tTs.roa (raw, json)
Hash identifier: mipoMho8SkI8EjSzCVEFYqzdoXBTFCtYjzhDsGdut6Y=
Subject key identifier: 08:C8:C0:D1:F7:D2:D3:82:9F:F1:03:93:77:8F:BC:B7:F8:BF:B5:3B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019E8294C1FADBEAF346E87250BBDAF2CB1F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CMjA0ffS04Kf8QOTd4-8t_i_tTs.roa
Signing time: Mon 01 Jun 2026 09:47:27 +0000
ROA not before: Mon 01 Jun 2026 09:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.131.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
78.135.67.0/24 maxlen: 24
78.135.70.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.89.0/24 maxlen: 24
78.135.97.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
78.135.101.0/24 maxlen: 24
78.135.106.0/24 maxlen: 24
78.135.107.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.159.0/24 maxlen: 24
188.132.193.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
188.132.251.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:94:c1:fa:db:ea:f3:46:e8:72:50:bb:da:f2:cb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 1 09:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08c8c0d1f7d2d3829ff10393778fbcb7f8bfb53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:d0:5e:92:c1:c5:08:c6:27:dd:ed:e7:91:
1b:ee:47:a7:f7:15:a6:62:d5:69:ab:e3:a9:e4:bf:
5c:54:6c:a0:2f:cf:db:93:c7:f6:de:18:ac:95:32:
78:e5:9e:d8:b2:cd:90:2d:24:59:68:fe:e6:6a:5f:
69:26:97:be:c8:c1:48:2d:42:11:16:34:f7:7f:fe:
cd:b7:4b:d6:27:48:81:47:1f:60:aa:a6:23:b7:b0:
1b:ff:69:63:67:e1:49:1f:d9:16:06:82:9a:aa:02:
93:bc:c4:4d:d9:e4:da:c9:a5:2a:9c:30:b4:4f:23:
2a:0b:d4:e0:61:56:62:40:9b:0c:eb:fa:02:df:a8:
2d:87:69:4e:a3:da:9a:0f:aa:6f:82:8e:17:9c:2e:
89:ab:93:34:56:9a:37:9a:66:8f:09:da:d1:f5:8d:
7d:23:d5:45:57:4f:dd:cd:51:cc:87:b7:9b:c8:93:
1f:7f:70:2f:62:b7:df:cc:57:be:7f:2c:20:c0:da:
34:3a:5a:75:ab:fd:fd:87:62:b6:44:52:65:f4:60:
01:e3:32:8f:21:51:3a:b3:8a:49:73:bb:78:12:69:
7d:51:2a:ad:29:f6:1c:50:89:46:6c:e8:2c:33:5f:
3f:49:19:15:32:db:76:fa:19:7e:c4:dd:6e:fb:54:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:C0:D1:F7:D2:D3:82:9F:F1:03:93:77:8F:BC:B7:F8:BF:B5:3B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CMjA0ffS04Kf8QOTd4-8t_i_tTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.131.0/24
77.92.142.0/24
77.92.152.0/23
78.135.67.0/24
78.135.70.0/24
78.135.74.0/24
78.135.86.0/24
78.135.89.0/24
78.135.97.0-78.135.98.255
78.135.101.0/24
78.135.106.0/23
185.17.136.0/24
188.132.159.0/24
188.132.193.0/24
188.132.214.0/24
188.132.228.0/24
188.132.251.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
52:29:e7:af:82:9e:86:c1:1c:73:a6:49:07:26:b7:f9:e9:fc:
c3:bb:6f:44:1d:05:df:ae:8f:ab:2f:e7:ce:ab:64:eb:e7:93:
e0:75:7c:b4:cb:c9:a5:c0:17:23:f7:0e:c1:35:c8:d5:84:46:
d5:f4:d4:a4:4e:22:40:09:92:d6:24:68:d5:ac:a5:7a:40:3b:
af:f2:24:01:03:56:4f:87:49:9a:54:90:27:4b:b5:7e:9e:25:
ed:9b:20:d7:2b:08:93:ea:2e:dd:f8:8c:ec:d1:26:db:64:07:
b8:a9:20:3a:7a:37:31:e4:ad:0e:d2:ef:53:9b:c3:59:62:7f:
06:d6:e2:0d:2d:a5:8b:d2:b6:46:62:5e:65:e3:b4:82:8c:b9:
c2:85:88:6a:25:66:48:a1:1a:36:61:dd:7c:fc:fe:c8:de:5a:
62:49:03:bd:5d:a6:db:7b:76:70:af:7d:3c:5a:b0:63:0d:0c:
9d:31:cc:dd:03:05:65:c2:c4:29:e3:46:06:90:0e:1b:67:eb:
bc:d2:b1:8f:dc:c5:df:fa:d7:9b:fa:48:eb:59:10:89:f1:38:
e4:c5:0c:90:bf:5d:e7:64:27:56:19:49:82:94:d7:b1:be:66:
06:4c:6c:5d:d0:35:3e:64:96:38:4b:8f:28:de:0a:13:4c:d9:
c6:c7:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:16:46 2026 by rpki-client