Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HcTHsp-a34Y3jPr9dLrQSeUgItw.roa
File: HcTHsp-a34Y3jPr9dLrQSeUgItw.roa (raw, json)
Hash identifier: Am2bMXm0vovUjtmwsrNRXdo/oF+Oxwoe+OfZIH6rE4I=
Subject key identifier: 1D:C4:C7:B2:9F:9A:DF:86:37:8C:FA:FD:74:BA:D0:49:E5:20:22:DC
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A0245E7FB3787489D658D3D6B93B960133
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HcTHsp-a34Y3jPr9dLrQSeUgItw.roa
Signing time: Fri 21 Aug 2026 12:49:27 +0000
ROA not before: Fri 21 Aug 2026 12:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.72.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.146.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
212.68.58.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:5e:7f:b3:78:74:89:d6:58:d3:d6:b9:3b:96:01:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 21 12:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dc4c7b29f9adf86378cfafd74bad049e52022dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e7:df:03:82:a2:cd:22:56:a6:06:05:4e:c6:
d2:c8:a9:2e:f9:3a:95:aa:21:f4:b4:b5:aa:3b:4f:
0a:75:f2:ac:aa:f3:73:9b:02:9b:24:0d:d1:29:34:
55:7c:99:31:93:5b:c3:62:4c:70:0a:f5:4b:c7:fa:
76:0f:d2:0a:b6:5e:79:17:43:53:11:01:3b:ca:84:
1e:52:c4:c8:b5:75:39:e6:66:84:8c:84:c1:11:54:
ed:fd:42:ab:95:2b:82:9a:24:56:5c:22:0c:f7:11:
cf:60:41:1b:e6:b5:f0:73:81:60:27:a3:d3:b4:ab:
a9:5a:77:ef:fc:af:05:46:8e:28:16:81:79:8a:05:
7f:b0:27:6d:73:21:78:fd:24:b3:9a:bf:1c:b1:ed:
b4:02:56:00:98:08:53:28:43:25:4f:78:2f:83:ed:
b6:d6:95:52:18:65:1a:2d:87:be:c1:7a:33:98:b5:
1b:8b:e4:06:ed:6d:8b:d6:91:fa:ca:e1:1a:da:cf:
6a:ed:62:af:98:65:b1:74:11:b1:39:9d:d4:ea:be:
77:a5:04:05:74:37:e7:24:22:c8:06:5c:7f:6d:3c:
bd:92:83:9c:55:ac:1f:84:7a:bd:a1:7e:90:86:b7:
ce:0f:26:e7:78:87:f2:87:15:32:2c:b4:d5:76:75:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C4:C7:B2:9F:9A:DF:86:37:8C:FA:FD:74:BA:D0:49:E5:20:22:DC
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HcTHsp-a34Y3jPr9dLrQSeUgItw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.72.0/24
78.135.93.0/24
78.135.100.0/24
78.135.104.0/24
185.17.139.0/24
188.132.129.0-188.132.130.255
188.132.146.0/24
188.132.152.0/23
188.132.165.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.189.0/24
188.132.199.0/24
188.132.201.0-188.132.202.255
188.132.209.0/24
188.132.212.0/23
188.132.234.0/23
212.68.58.0/24
212.68.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4f:32:91:75:8c:2f:22:29:06:6b:27:41:65:29:15:14:8e:
54:86:67:00:d0:a5:6f:63:7a:fc:b4:6e:96:fa:37:0a:54:e8:
5c:87:66:f1:5b:1b:b0:b6:db:61:18:c8:bb:75:05:c3:86:5f:
1d:8d:71:ac:48:89:e3:a5:59:df:9f:c2:58:b1:0e:20:50:ce:
e5:a6:de:c9:f1:71:56:ff:5e:9c:03:d2:b2:f1:35:ac:62:41:
5c:90:d5:1d:08:b6:44:a9:86:a3:64:18:e1:82:fd:ce:45:88:
51:1e:b3:06:e0:06:c6:3f:d7:90:78:48:25:a2:5f:45:c7:49:
e1:2a:2a:22:b4:1c:c2:98:e0:b6:21:d1:fd:f7:2c:6e:ed:ce:
87:3d:d6:b2:1a:3c:3c:ba:3d:51:9f:18:9f:1c:35:a6:d3:da:
0d:3d:ad:c7:11:c8:90:1e:1a:3f:66:f0:8e:d6:01:a3:67:61:
76:8d:b9:5d:51:dc:c7:97:24:06:9d:86:30:94:b3:46:56:93:
7e:79:b7:45:c1:85:e7:a1:0d:1b:d4:a2:64:24:e7:4f:bd:3a:
f2:53:12:b9:a3:22:73:12:e1:80:b9:26:d5:24:1f:22:88:e9:
a2:07:e0:5f:20:c9:b1:e4:a8:d5:bc:4f:5e:3c:e2:3a:7d:66:
cf:aa:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:44 2026 by rpki-client