Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RIzziu4UsVweps2CvtPMR7GVqXs.roa
File: RIzziu4UsVweps2CvtPMR7GVqXs.roa (raw, json)
Hash identifier: BGvLRvYbdEGDfpzE7AV/gXhbhagE71m8FIKEV0r24PM=
Subject key identifier: 44:8C:F3:8A:EE:14:B1:5C:1E:A6:CD:82:BE:D3:CC:47:B1:95:A9:7B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A163035DCBBA7F290661B6CDE1BADCBACB
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RIzziu4UsVweps2CvtPMR7GVqXs.roa
Signing time: Thu 22 Oct 2026 09:48:47 +0000
ROA not before: Thu 22 Oct 2026 09:48:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51540
IP address blocks: 31.210.39.0/24 maxlen: 24
78.135.84.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
78.135.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:03:5d:cb:ba:7f:29:06:61:b6:cd:e1:ba:dc:ba:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 22 09:48:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=448cf38aee14b15c1ea6cd82bed3cc47b195a97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8e:3f:8e:68:6a:ee:14:9e:16:94:c2:38:29:
bd:56:fc:55:d5:e4:31:6b:08:07:12:2c:25:2e:24:
6f:2c:90:85:e3:f8:19:e5:4e:6c:c7:a4:f7:9d:a5:
5b:ad:97:2c:12:f9:a5:e1:de:97:17:fb:f2:d8:d0:
06:1e:11:b0:42:1e:0d:30:10:e8:e7:2c:8c:65:39:
68:11:d6:18:58:c2:06:fa:2d:66:25:51:2a:15:ca:
54:b7:83:cf:77:11:69:94:f9:c7:55:df:89:85:7f:
fd:d1:23:97:3e:ad:f1:d1:fe:5f:3a:95:f4:ae:d3:
24:26:42:d9:5a:a9:fd:49:f5:b3:49:28:59:68:2d:
fd:64:28:ca:26:8b:9e:bb:43:3a:17:0b:30:38:a6:
0d:d0:78:c3:3e:87:61:f1:cb:4a:75:9a:96:e1:b3:
ea:cd:51:24:e0:95:da:de:32:88:f8:c4:c8:ec:94:
80:ef:26:76:63:33:8f:2e:d0:48:fc:59:1b:88:3a:
1c:e8:6a:cf:e7:99:f9:f9:38:64:ac:b5:16:a5:c7:
6d:2c:6e:e5:21:e3:9b:67:f7:75:e8:56:fc:25:a6:
09:4b:6b:8c:16:f9:dd:b9:88:88:5f:3f:d3:4b:15:
e5:cf:4a:72:25:3b:38:67:b9:00:a2:7c:5b:0a:e0:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8C:F3:8A:EE:14:B1:5C:1E:A6:CD:82:BE:D3:CC:47:B1:95:A9:7B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RIzziu4UsVweps2CvtPMR7GVqXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.39.0/24
78.135.84.0/24
78.135.98.0/23
Signature Algorithm: sha256WithRSAEncryption
28:b4:fc:92:00:b7:1c:5b:2e:39:32:ab:09:bf:77:e9:77:33:
4e:46:96:e2:bf:d3:d2:b2:c9:2c:9b:d9:e1:76:89:07:7a:1d:
d2:57:1e:62:3e:29:8d:47:8f:8f:49:b4:bf:45:3f:1b:ee:06:
f1:f0:1e:7d:47:de:7e:78:b4:48:a5:6b:3d:75:c5:09:21:2a:
e3:a7:95:81:47:8c:aa:f6:31:40:69:9f:6f:73:e1:d9:ea:50:
42:bc:e3:08:20:34:02:9b:40:70:58:06:8a:50:e7:7e:08:a0:
fd:a8:4f:d8:16:29:02:eb:af:98:35:a1:c6:45:44:e5:a0:b0:
0d:58:5c:60:05:95:93:57:6e:51:50:99:99:0d:ee:0e:ce:3f:
ab:0c:02:c2:5c:22:b3:2e:f2:12:ec:92:38:79:c2:1b:cb:20:
48:5b:ef:60:d1:e5:18:4f:43:e6:86:33:f6:f1:7b:80:0b:6d:
62:bf:d7:5c:fe:1a:b4:86:7a:8d:5e:ae:31:94:a2:1e:01:56:
35:ef:5e:ed:a3:b1:5b:20:ef:e3:a5:c0:b4:53:2b:0d:3f:fc:
1f:67:36:f2:58:78:55:2c:78:f2:a3:69:8c:6f:1d:f1:bf:9a:
ca:c0:7c:a5:15:49:bc:06:69:44:f5:3b:95:17:76:02:33:8a:
c8:ca:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:22 2026 by rpki-client