Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VD5jDvBIA2h40JcIc-67zVLpF-0.roa
File: VD5jDvBIA2h40JcIc-67zVLpF-0.roa (raw, json)
Hash identifier: MW/xbvFRwG03lENaSmrJaY0xW0BapIIln5TkQuLKv7k=
Subject key identifier: 54:3E:63:0E:F0:48:03:68:78:D0:97:08:73:EE:BB:CD:52:E9:17:ED
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019904483F02F30553F705A5C1B21265F63F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VD5jDvBIA2h40JcIc-67zVLpF-0.roa
Signing time: Mon 01 Sep 2025 07:57:47 +0000
ROA not before: Mon 01 Sep 2025 07:57:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.46.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:48:3f:02:f3:05:53:f7:05:a5:c1:b2:12:65:f6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 1 07:57:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=543e630ef048036878d0970873eebbcd52e917ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:21:42:46:28:7c:b4:e6:bd:06:91:c1:3f:
57:ed:a0:1a:af:1c:7f:ad:aa:a0:77:da:e3:45:62:
e2:9b:6e:86:a1:17:69:97:52:15:4d:20:38:a4:e1:
5d:3f:12:45:64:11:da:20:9e:cd:a9:59:4a:de:13:
cf:c8:a2:67:57:58:fb:99:5d:fa:af:b7:87:fe:08:
32:9c:76:e8:bc:73:fe:06:a8:9f:b8:20:f0:b1:e5:
e3:23:bf:de:e6:a5:59:c4:6b:cd:14:5d:18:98:f2:
7f:48:7f:2f:c3:cf:f9:bd:d9:5e:a8:65:39:40:7f:
15:0b:f3:18:47:b9:05:5b:a4:75:e2:9e:d3:00:05:
a1:c1:be:d2:ff:dc:5a:97:e8:0a:ae:bd:e5:e4:f8:
ca:b1:73:60:37:dc:c9:96:22:d2:2e:83:11:a2:aa:
6e:b6:96:9e:fc:e7:12:c3:c1:e5:c1:50:7e:d5:d6:
b3:e6:17:69:fe:6c:f9:65:7a:6c:b7:5a:0e:fe:22:
12:0e:21:25:07:db:e8:b5:27:f1:2e:2f:d5:2b:61:
43:66:79:2a:96:03:24:91:c0:6e:22:e9:75:5f:e7:
72:9f:90:b4:1c:3c:ff:dc:cb:bb:e9:45:eb:f5:65:
5b:c2:ce:ac:67:93:34:fd:2c:9a:d2:48:11:98:67:
6d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3E:63:0E:F0:48:03:68:78:D0:97:08:73:EE:BB:CD:52:E9:17:ED
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VD5jDvBIA2h40JcIc-67zVLpF-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.46.0/24
31.210.50.0/23
31.210.54.0/24
77.92.148.0/24
188.132.170.0/24
188.132.191.0/24
188.132.227.0/24
212.68.36.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:46:07:1c:e9:7e:d0:43:45:f5:95:80:b9:a1:97:57:28:8c:
a8:8f:9c:8e:48:fd:5c:f5:46:78:49:c2:a3:d1:c4:0a:8b:01:
dd:6e:92:fe:78:f1:b1:9c:6e:04:cb:f1:6c:70:2f:37:a6:1e:
81:14:63:89:0a:03:76:04:8e:a7:d1:45:70:3a:a7:b2:28:45:
fc:7d:9d:d5:8c:b4:07:6d:38:74:01:4c:a8:93:7f:25:f2:bb:
3f:cc:c9:fe:9b:de:c2:3c:75:ed:f0:eb:21:fd:8b:16:db:12:
de:65:68:b6:04:71:2a:87:28:60:7c:f3:20:35:51:e1:2d:c5:
07:19:be:39:a8:cc:52:0c:8b:70:70:d5:d4:b3:c6:7a:1b:44:
6b:e7:dd:0b:33:bf:04:65:2c:60:95:9d:58:0f:fb:25:38:de:
86:46:56:fb:d4:fb:52:6f:23:1d:a8:82:6f:5f:6c:aa:d2:3f:
1c:8a:b7:92:d9:39:51:b2:11:40:ef:fc:7e:af:ac:65:0f:c5:
2d:db:92:f8:e9:e2:36:ae:d0:cf:6a:d2:af:2d:e2:36:a7:27:
6b:d4:1f:ce:93:1e:b7:0b:30:ad:ae:99:87:61:d5:57:8c:21:
9f:ac:34:37:51:68:a3:fd:bd:76:e8:8c:81:cd:cb:b0:46:88:
88:63:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:05:28 2025 by rpki-client