Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jBI0ikqpTk2OMYfiRSi6X2miwT4.roa
File: jBI0ikqpTk2OMYfiRSi6X2miwT4.roa (raw, json)
Hash identifier: NY0FuG8G1JR0n5uR5hSFezP2r9r4DzmaZ4TIiDgF9uo=
Subject key identifier: 8C:12:34:8A:4A:A9:4E:4D:8E:31:87:E2:45:28:BA:5F:69:A2:C1:3E
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019FC69C8AAC4B7495D6D527AC87082C0053
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jBI0ikqpTk2OMYfiRSi6X2miwT4.roa
Signing time: Mon 03 Aug 2026 07:52:55 +0000
ROA not before: Mon 03 Aug 2026 07:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.131.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
78.135.67.0/24 maxlen: 24
78.135.70.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.89.0/24 maxlen: 24
78.135.97.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
78.135.101.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.159.0/24 maxlen: 24
188.132.193.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
188.132.251.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:9c:8a:ac:4b:74:95:d6:d5:27:ac:87:08:2c:00:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 3 07:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c12348a4aa94e4d8e3187e24528ba5f69a2c13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:4f:a4:92:64:b0:66:9a:10:1e:ce:43:13:
da:79:f1:b1:a8:d5:69:f3:fe:d0:b0:72:96:bb:15:
67:ad:d8:23:67:c3:e1:a1:dd:bc:c8:4b:69:ac:34:
9c:24:a4:03:a1:cd:c2:26:56:de:db:a2:10:c9:ae:
ef:a8:85:62:e9:6e:da:8c:04:d3:cc:a1:75:9d:83:
5a:b5:17:27:38:9b:90:f6:a5:05:c9:b9:7f:92:9f:
f8:82:02:51:4f:bd:05:0a:a2:5f:a1:17:3b:f8:c1:
8e:52:86:f5:a2:99:e9:41:41:9b:ac:b0:c7:45:ee:
0d:91:26:84:02:fc:51:36:c7:a8:7b:2b:06:63:f0:
02:0e:18:c1:8a:c8:e8:0a:b2:c1:15:b6:41:2f:62:
cc:27:9c:95:27:67:d7:88:26:8c:d8:1b:14:c6:7b:
72:2e:f7:27:35:39:05:2f:28:e2:dd:b3:03:74:05:
e5:57:a5:41:c3:3c:ac:20:44:85:9d:2a:a0:ba:5c:
f8:f2:78:f7:3c:05:ce:5c:c5:ff:c2:96:99:bc:d9:
96:f3:90:a2:ab:f7:7c:5d:16:58:1d:d2:82:17:f5:
9b:3e:8a:45:f2:db:c0:6e:e7:38:5b:6f:f0:c2:a7:
63:9e:93:8c:7d:ba:c6:e3:53:8a:fd:f3:73:11:f4:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:12:34:8A:4A:A9:4E:4D:8E:31:87:E2:45:28:BA:5F:69:A2:C1:3E
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/jBI0ikqpTk2OMYfiRSi6X2miwT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.131.0/24
77.92.142.0/24
77.92.152.0/23
78.135.67.0/24
78.135.70.0/24
78.135.74.0/24
78.135.86.0/24
78.135.89.0/24
78.135.97.0-78.135.98.255
78.135.101.0/24
185.17.136.0/24
188.132.159.0/24
188.132.193.0/24
188.132.214.0/24
188.132.228.0/24
188.132.251.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
66:ca:88:b0:0e:38:5d:98:9e:b0:60:9a:28:5a:94:ef:39:4e:
71:da:ec:20:d6:50:88:95:cc:f5:0a:31:e0:24:51:56:d6:a2:
04:c0:13:41:e0:31:db:e6:f3:b6:42:45:3d:9b:ab:af:d5:4a:
ac:7c:ce:14:a0:c2:00:7b:d5:f2:cb:4a:c3:dc:38:13:3c:39:
34:15:81:9c:59:f6:74:5e:b2:ca:1b:5e:b6:86:1f:62:0d:01:
6f:f3:44:75:49:ed:a4:93:31:fe:0a:9a:a7:df:af:da:ef:19:
12:21:d3:35:ae:1d:6d:55:21:cf:96:55:34:a4:13:4d:22:90:
51:30:9e:28:ba:bc:e8:2a:f5:65:35:12:ef:68:1e:f4:e2:0a:
73:05:17:45:fe:7c:6c:85:ee:1b:23:2c:b2:62:ef:a1:3d:be:
a8:7a:ce:14:82:23:30:18:24:d8:bd:63:f9:0e:cf:db:44:0a:
cf:0c:6e:a0:4f:3f:ad:de:1d:30:fd:6b:61:a0:79:76:38:6f:
5b:0c:e3:00:bc:c5:ea:3b:00:55:52:ff:52:6d:7b:aa:e4:7f:
7e:07:fd:40:34:5b:0f:48:3a:ea:22:65:0d:4f:c8:19:3d:b3:
58:d3:f9:41:d2:cb:b1:cc:7d:3a:be:b2:bf:bf:99:86:75:1d:
c1:d7:08:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:12:02 2026 by rpki-client