Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hvFY_znncQmZbwQiEEhOQvuYSVI.roa
File: hvFY_znncQmZbwQiEEhOQvuYSVI.roa (raw, json)
Hash identifier: w9rzETg6zGfEzFmMfIi6TfLkDZQnYSsEvO6Yc9pKjDU=
Subject key identifier: 86:F1:58:FF:39:E7:71:09:99:6F:04:22:10:48:4E:42:FB:98:49:52
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A162AB78DCB751A9B7688E46B07DD8308D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hvFY_znncQmZbwQiEEhOQvuYSVI.roa
Signing time: Thu 22 Oct 2026 08:12:47 +0000
ROA not before: Thu 22 Oct 2026 08:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.131.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
78.135.67.0/24 maxlen: 24
78.135.70.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.89.0/24 maxlen: 24
78.135.97.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.193.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:ab:78:dc:b7:51:a9:b7:68:8e:46:b0:7d:d8:30:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 22 08:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86f158ff39e77109996f042210484e42fb984952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:4b:66:0b:5d:32:40:e4:a8:a7:e6:2d:c8:
fa:a0:c5:8b:fb:8f:15:8c:9d:0d:5c:c1:7d:bc:1e:
60:d9:bc:21:4f:56:d1:7a:d9:26:2d:1c:25:f4:58:
a1:f1:24:b5:d1:85:e8:6b:b7:3f:b4:95:10:49:14:
1e:0f:bf:13:5d:6f:d1:07:7d:af:99:93:61:a1:05:
1e:b3:62:84:56:ce:27:12:c8:6d:d9:8b:8f:c5:a4:
6e:eb:4f:6e:f9:f1:0a:74:87:0a:03:80:47:88:c5:
1b:22:2a:fb:bd:da:f3:c2:7c:eb:21:b0:6b:d3:1f:
1c:56:01:04:dd:06:9b:d4:66:b2:e8:9a:83:f8:33:
e9:23:c7:0c:d7:73:87:e1:16:36:5f:7f:8f:b6:bd:
35:8f:e3:b0:16:b8:18:40:c8:96:33:b5:b7:e7:ea:
7b:9c:26:87:03:04:fa:06:b8:0a:31:79:64:dc:43:
ff:d8:b7:10:31:d3:40:13:52:b0:90:27:14:f0:68:
fc:7e:cb:50:cf:7d:54:96:71:30:91:3e:48:e4:02:
bf:19:27:75:4a:2d:6f:b2:8d:07:f8:7f:f2:9e:6f:
68:6b:aa:cc:bf:86:4f:71:fe:b0:2e:ff:d9:a4:5f:
03:02:07:a0:42:60:18:fb:f5:f6:62:6e:e1:07:9f:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F1:58:FF:39:E7:71:09:99:6F:04:22:10:48:4E:42:FB:98:49:52
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hvFY_znncQmZbwQiEEhOQvuYSVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.131.0/24
77.92.142.0/24
77.92.152.0/23
78.135.67.0/24
78.135.70.0/24
78.135.74.0/24
78.135.86.0/24
78.135.89.0/24
78.135.97.0-78.135.98.255
185.17.136.0/24
188.132.193.0/24
188.132.214.0/24
188.132.228.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
82:46:02:26:c3:70:d8:a7:df:3a:bd:50:2e:8d:ff:93:ae:71:
3a:f0:73:51:b6:de:23:b2:0a:95:76:8a:18:dd:72:47:72:e9:
f4:94:d9:a5:cb:9f:0c:40:04:42:b8:3a:1a:2c:8c:6b:8b:96:
af:3b:a8:f4:f9:63:65:cb:45:64:bc:82:7d:14:0d:eb:bd:53:
de:53:03:f8:0d:61:b4:17:38:9c:f3:49:f3:07:dd:a2:fc:89:
24:27:d1:a8:a1:52:c4:d5:74:98:fc:93:04:b3:6a:c5:58:ae:
95:38:c6:bc:8d:52:19:b0:5e:2d:af:4b:3b:9e:e7:a8:d5:7c:
3d:56:af:66:26:b9:6c:8b:57:0f:6f:e1:a9:7f:70:ff:6f:3e:
cc:2d:09:07:61:01:99:fe:d0:9d:55:69:e1:e7:9c:37:52:f5:
05:aa:b0:9f:fe:91:ad:89:57:72:88:dc:05:8a:f8:65:0d:f4:
04:12:f1:6d:13:92:53:04:e4:1d:19:ce:8b:bc:d0:f7:9d:4f:
ec:24:51:0d:0c:03:2f:41:4d:67:28:a0:55:92:8f:24:94:d8:
a7:65:0a:d1:6b:4b:14:85:ed:af:c6:3d:69:44:6d:24:fe:8c:
e9:fe:67:18:fa:35:64:80:45:1f:04:3c:36:f1:fc:ad:31:f0:
34:32:67:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:30 2026 by rpki-client