Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kGTKjMA0TleSKWqr8V4CwUAbUvg.roa
File: kGTKjMA0TleSKWqr8V4CwUAbUvg.roa (raw, json)
Hash identifier: SMZYFIgMSvhbXY91AjbuFrUXGXgwVFnlwurS6gnBgAA=
Subject key identifier: 90:64:CA:8C:C0:34:4E:57:92:29:6A:AB:F1:5E:02:C1:40:1B:52:F8
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A16302731BF47E8D6D863EBEAAA80B6BEE
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kGTKjMA0TleSKWqr8V4CwUAbUvg.roa
Signing time: Thu 22 Oct 2026 09:47:47 +0000
ROA not before: Thu 22 Oct 2026 09:47:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.44.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.111.0/24 maxlen: 24
185.17.138.0/24 maxlen: 24
188.132.166.0/24 maxlen: 24
188.132.167.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.37.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:02:73:1b:f4:7e:8d:6d:86:3e:be:aa:a8:0b:6b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 22 09:47:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9064ca8cc0344e5792296aabf15e02c1401b52f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:1e:11:ab:31:3b:db:d9:f5:63:96:cb:ef:
22:52:a2:55:56:52:73:5f:9d:ba:ea:d9:2e:64:8c:
a5:08:94:93:5a:cc:94:9a:d5:4e:38:21:1e:be:67:
6c:89:58:a3:65:4a:8b:d1:97:ee:53:63:11:a0:7c:
11:a7:ea:52:a7:76:b1:2c:c4:8c:2c:68:9a:16:a4:
28:1f:8e:b2:83:b6:d1:2c:a4:11:75:14:30:fc:1a:
10:c7:81:a0:46:a6:a9:e7:71:8d:b2:2c:0c:5d:85:
23:7c:47:52:96:50:5b:f9:a7:20:0c:9d:9b:b2:8d:
6a:1d:47:b8:44:b8:04:8a:7b:b2:4e:73:af:7c:c2:
30:26:07:00:6d:b2:04:6e:d4:67:71:27:01:ba:c7:
5d:c4:a8:d3:63:f5:c7:82:bc:e3:19:50:95:39:6a:
b8:6d:40:ff:ef:53:e6:a5:36:24:a3:ec:c5:3e:f3:
2e:de:15:e3:b8:e8:aa:62:41:68:1c:ad:f9:3a:8f:
e9:0c:82:88:05:45:df:fd:b3:6b:2f:32:c7:c4:1e:
d6:4a:f3:0f:11:ad:23:a9:19:47:f9:95:d0:99:12:
b3:cb:81:d8:88:67:09:a5:3d:c6:9a:60:14:cc:f3:
25:f2:b1:06:ac:80:f4:1d:65:98:04:cf:9e:0a:ef:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:CA:8C:C0:34:4E:57:92:29:6A:AB:F1:5E:02:C1:40:1B:52:F8
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kGTKjMA0TleSKWqr8V4CwUAbUvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.44.0/24
31.210.51.0/24
77.92.143.0/24
77.92.148.0/24
78.135.92.0/24
78.135.111.0/24
185.17.138.0/24
188.132.166.0/23
188.132.170.0/24
188.132.191.0/24
188.132.227.0/24
212.68.36.0/23
212.68.49.0/24
Signature Algorithm: sha256WithRSAEncryption
45:02:39:e7:d4:4e:43:02:84:56:35:0a:6f:61:28:14:4e:f5:
e7:5d:42:f1:bd:47:cd:ec:8d:95:09:fe:7a:f1:4b:ad:f9:b5:
fa:ff:e7:48:65:8f:9f:f3:20:c1:1e:6c:28:3c:6b:d6:6d:fb:
3c:9b:3c:53:2e:a2:f6:5c:96:84:1a:08:8b:b5:6b:65:28:58:
bb:11:31:52:e2:cf:d7:49:fc:42:57:4b:76:0e:38:0f:a8:c9:
48:04:da:71:b3:d3:99:ed:ca:56:df:40:c4:62:41:96:88:8c:
90:33:bd:3f:3e:10:62:01:48:17:06:7b:6d:88:a7:ca:b1:61:
0d:23:be:f4:da:d6:23:85:45:f1:b9:52:6e:f0:4a:62:2a:82:
57:57:48:48:ed:9c:0a:63:2e:bd:05:a0:35:2e:9a:93:8c:86:
b6:50:36:21:89:43:cd:20:2f:17:50:97:ad:bc:59:f4:a1:e8:
15:92:71:88:5c:45:bf:a2:b6:e6:f9:78:b0:b4:c7:e7:84:49:
79:f8:8d:ce:41:75:47:0c:90:8d:7e:5f:16:16:2b:0f:33:2f:
5b:4f:b1:39:8b:02:dc:cd:ac:1f:30:86:82:82:10:84:a0:4f:
22:9c:5d:60:94:6c:d6:85:d9:9e:7c:94:79:2b:61:ce:d8:2c:
15:03:d3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:29 2026 by rpki-client