Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SQn0wxnqLIYPadbgouHfXJiiAEA.roa
File: SQn0wxnqLIYPadbgouHfXJiiAEA.roa (raw, json)
Hash identifier: HKGc2CpHPWnYiQQFUqX8iuSj5s9gkJ3PY2LFjVteaGw=
Subject key identifier: 49:09:F4:C3:19:EA:2C:86:0F:69:D6:E0:A2:E1:DF:5C:98:A2:00:40
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019EAD5FFD683736C5371D70899CD92875CB
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SQn0wxnqLIYPadbgouHfXJiiAEA.roa
Signing time: Tue 09 Jun 2026 17:13:29 +0000
ROA not before: Tue 09 Jun 2026 17:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.51.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
78.135.111.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.174.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:5f:fd:68:37:36:c5:37:1d:70:89:9c:d9:28:75:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 9 17:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4909f4c319ea2c860f69d6e0a2e1df5c98a20040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:42:ae:7b:b4:40:ff:c6:ea:3d:d1:39:57:
15:c4:5c:60:ed:88:47:dd:6e:9b:1a:9e:02:a0:73:
31:fa:cb:25:7e:59:f0:e6:f0:08:a7:12:d1:91:d4:
61:62:86:67:c8:a7:72:2f:df:4e:2f:8c:b3:b8:3b:
10:82:35:62:65:16:3a:c6:32:b6:c7:06:04:50:ac:
0a:01:34:df:e4:16:25:67:34:d8:8f:6d:37:69:9f:
86:18:e9:86:8a:ae:4d:3b:5b:15:a8:81:8e:4f:17:
8d:d0:c7:15:f8:4f:96:91:63:c9:6f:d8:f0:3f:6d:
34:24:fd:c6:d8:3e:bc:c8:53:3f:a5:06:df:cd:55:
97:9c:3c:99:55:83:04:c0:58:c6:72:3a:e8:65:43:
26:22:9e:a0:40:00:13:d4:6b:a1:0e:9a:4b:60:6f:
26:5d:7f:97:24:87:f3:72:d2:7f:83:5b:28:da:df:
81:15:a7:37:26:21:f7:a4:5e:7f:80:73:49:cf:89:
4c:d4:19:f9:73:1e:02:e6:51:e6:dc:d3:be:52:ba:
77:45:f9:34:87:25:74:0f:2b:65:10:98:ed:d8:5a:
51:56:26:bc:86:b8:0c:73:e0:58:d0:7e:a9:9a:bc:
17:49:88:7d:8a:b7:ea:b8:cd:4b:dd:43:73:5c:33:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:09:F4:C3:19:EA:2C:86:0F:69:D6:E0:A2:E1:DF:5C:98:A2:00:40
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SQn0wxnqLIYPadbgouHfXJiiAEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.51.0/24
77.92.148.0/24
78.135.111.0/24
188.132.170.0/24
188.132.174.0/24
188.132.191.0/24
188.132.227.0/24
212.68.36.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
10:bb:08:ee:3b:22:d9:31:0e:9f:ff:b2:c8:5a:82:c1:01:65:
2d:f1:85:d7:98:57:09:a9:dd:77:18:76:a3:aa:fd:e5:ae:5c:
63:71:ae:21:7a:27:74:6c:f2:e9:86:22:5d:2f:3f:a4:23:0c:
32:9b:c1:cf:6a:88:af:36:03:58:6b:c4:70:e3:7a:4b:bc:23:
4c:bb:0a:1f:0f:18:f6:e3:65:fd:8c:76:de:9f:05:68:06:66:
5c:01:2e:5d:be:bd:43:93:bf:f0:4a:59:db:cb:ef:17:f3:2f:
96:28:c5:b7:98:36:f4:6d:5e:a4:55:d5:c8:02:8f:41:47:da:
da:02:af:c6:21:37:56:77:de:b8:d4:17:58:11:15:05:6f:f2:
b4:e5:a4:39:75:f6:94:f4:18:57:28:ae:8a:24:a5:d2:80:8d:
5e:c8:b9:c1:03:01:01:91:c0:5f:cf:8f:c5:99:15:88:52:dc:
52:c2:c9:a8:15:74:1a:d4:c9:d9:84:ba:27:59:c1:66:17:b6:
1c:1b:5e:22:36:4a:2b:2b:86:62:3d:54:de:26:8e:ba:e5:37:
c4:b1:e2:0c:d9:3c:e5:7c:aa:9f:e2:d3:0a:e0:14:af:04:ae:
65:0f:02:ea:3d:b0:14:6c:d7:10:a1:1d:1a:2e:b7:fb:0f:80:
b3:b3:7a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:01:08 2026 by rpki-client