Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/XGTcz8CX6z-jqzG5SXzSV28VyZg.roa
File: XGTcz8CX6z-jqzG5SXzSV28VyZg.roa (raw, json)
Hash identifier: 1H6SQy5a/op3rHpqJagxFigCb2q98ItGA+yDs7IC7g0=
Subject key identifier: 5C:64:DC:CF:C0:97:EB:3F:A3:AB:31:B9:49:7C:D2:57:6F:15:C9:98
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019F4780B04887C62E6338701CEE068BB9C6
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/XGTcz8CX6z-jqzG5SXzSV28VyZg.roa
Signing time: Thu 09 Jul 2026 15:30:43 +0000
ROA not before: Thu 09 Jul 2026 15:30:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.51.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
78.135.111.0/24 maxlen: 24
188.132.166.0/24 maxlen: 24
188.132.167.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:80:b0:48:87:c6:2e:63:38:70:1c:ee:06:8b:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 9 15:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c64dccfc097eb3fa3ab31b9497cd2576f15c998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:d0:db:7c:53:38:aa:71:25:43:ed:a6:69:
91:06:f8:3b:3d:39:dc:c2:21:8c:5b:dd:2c:1c:59:
e8:41:42:a7:5a:b0:d2:d3:c3:74:d8:8c:85:69:ac:
50:9f:bd:fb:93:2d:95:91:8c:bd:a0:2c:9e:0b:8a:
6d:66:02:76:1b:0e:03:76:f2:db:98:a0:4b:fe:46:
cd:76:27:d7:02:68:5a:38:05:97:bb:b3:4c:59:ac:
46:76:ee:e9:3c:71:20:2a:55:81:70:af:33:db:63:
bf:88:f7:25:ae:a0:a3:33:7d:91:56:28:5c:af:95:
4d:4d:30:ff:64:b4:51:17:7f:76:02:5b:ae:27:21:
e0:7a:50:a4:aa:b8:7e:24:2c:67:31:18:0c:19:45:
bc:c8:9e:af:41:e4:df:2d:05:59:ca:ef:20:b7:0e:
87:bc:ab:ac:85:dd:83:01:8b:41:c2:ac:a3:50:50:
98:f0:e3:3d:11:4a:e9:5f:75:df:92:fa:22:07:f8:
78:24:3c:03:dc:51:1f:42:ca:55:7e:b6:4a:6a:62:
f5:39:22:6a:36:4a:99:77:f7:ef:9d:fe:db:01:50:
74:84:5b:d1:2c:fa:9e:b3:f8:1d:33:6c:7b:b2:b2:
c1:20:b3:cb:82:0c:53:38:a3:1c:c1:79:e3:37:cc:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:64:DC:CF:C0:97:EB:3F:A3:AB:31:B9:49:7C:D2:57:6F:15:C9:98
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/XGTcz8CX6z-jqzG5SXzSV28VyZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.51.0/24
77.92.143.0/24
77.92.148.0/24
78.135.111.0/24
188.132.166.0/23
188.132.170.0/24
188.132.191.0/24
188.132.227.0/24
212.68.36.0/24
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
69:81:d2:06:54:d6:7f:5e:9d:44:b8:46:ad:6a:e1:1b:64:78:
e4:ae:96:1a:72:c7:e1:65:63:3b:02:41:67:1c:cf:55:45:a7:
37:be:ba:4b:e3:f2:41:6a:e9:a5:11:2b:56:56:4d:a6:19:28:
d0:34:38:e3:aa:3d:77:80:0e:1d:56:aa:2c:93:8a:cd:6f:15:
df:f5:3f:03:1b:c7:9d:e8:4b:4f:e8:ca:07:b0:3e:8f:49:78:
c7:ec:b1:e5:ba:c4:eb:b4:10:c7:14:09:46:ff:78:81:a9:cf:
d0:6a:9c:bb:55:96:2d:e8:a4:b6:cf:76:31:0d:c8:07:e6:93:
81:98:07:6d:25:4e:e5:1f:4b:ac:9d:3a:4f:70:50:2e:f3:40:
42:27:65:d4:93:cd:ad:9d:83:58:1a:70:23:94:fe:31:e8:22:
4f:c9:f7:6b:cb:a9:5b:70:df:5e:d0:d5:f5:52:70:4a:6a:63:
2f:e1:28:c1:7e:71:64:30:a9:1f:b2:83:e6:30:65:cc:cb:06:
6b:d1:7b:6f:be:e1:d0:c8:22:dd:20:78:fb:46:4c:13:ce:0c:
30:46:6d:de:61:cc:dc:8c:2e:62:ef:27:fd:17:51:97:8b:37:
e5:f5:fc:f6:ef:8b:2c:e0:6d:03:13:f3:f7:b8:a9:97:f6:81:
44:38:c1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:02:30 2026 by rpki-client