Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rIoXpsdhH-uHg5RGFSSjlhffL4Q.roa
File: rIoXpsdhH-uHg5RGFSSjlhffL4Q.roa (raw, json)
Hash identifier: oniVxSKZCB7LgaoR0nLyfM0kGqNbgFDe+JmeQLScZCM=
Subject key identifier: AC:8A:17:A6:C7:61:1F:EB:87:83:94:46:15:24:A3:96:17:DF:2F:84
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01991044787C6270F1FC27802CF077EF34B9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rIoXpsdhH-uHg5RGFSSjlhffL4Q.roa
Signing time: Wed 03 Sep 2025 15:49:06 +0000
ROA not before: Wed 03 Sep 2025 15:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:44:78:7c:62:70:f1:fc:27:80:2c:f0:77:ef:34:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 3 15:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac8a17a6c7611feb878394461524a39617df2f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:8b:7a:47:72:2f:42:c8:ad:66:1d:f1:1b:
d7:85:e2:2c:70:01:11:f1:a3:08:85:ff:87:a5:37:
59:1a:fa:30:7e:5a:24:01:21:d1:42:5e:db:06:73:
f1:2c:b2:a5:35:6b:1a:e8:67:19:4a:d6:fb:da:cb:
9a:05:99:10:9f:8a:11:41:8b:2e:92:15:36:ed:c6:
05:4a:11:17:a3:1d:92:6b:42:80:cb:5f:12:40:11:
1e:da:f5:75:80:b7:66:d7:58:86:85:3c:52:19:95:
40:29:a8:7d:ad:27:da:a5:02:30:9b:49:fe:59:c9:
53:7d:99:58:b3:7a:8b:ac:6f:da:e7:5e:61:24:0c:
ab:48:bd:ba:47:7c:6e:83:aa:f8:84:9c:2e:65:f7:
02:b3:c2:bb:26:94:55:c7:fd:27:3a:f1:68:57:01:
a3:69:a2:47:d8:fe:63:d1:9e:d4:dc:a3:ab:ef:29:
4a:1a:77:06:74:02:ee:4d:ce:b1:48:c5:20:7a:05:
a3:f8:5f:35:1d:b0:ec:e1:d2:96:2b:4d:c0:09:66:
80:09:13:a5:92:fe:51:55:15:5a:f3:e1:31:d1:06:
55:1e:3a:fc:f7:c2:f1:db:d2:b7:56:d2:92:fb:c8:
17:f7:ac:bd:e4:31:4a:0a:4e:9e:18:d1:30:30:f3:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8A:17:A6:C7:61:1F:EB:87:83:94:46:15:24:A3:96:17:DF:2F:84
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rIoXpsdhH-uHg5RGFSSjlhffL4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.142.0/23
77.92.152.0/24
78.135.74.0/24
78.135.86.0/24
78.135.98.0/24
185.17.136.0/24
188.132.228.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
6e:cf:71:74:6a:01:17:19:b3:8e:af:46:8b:d4:cb:76:62:cb:
e9:72:5a:4c:aa:1e:a1:52:22:c2:4e:6a:ee:0f:f5:2c:88:a7:
6b:f0:33:34:0c:76:a9:6f:93:dc:d4:5a:0a:91:d9:9d:d4:99:
d6:00:22:a3:1b:27:17:69:2c:c8:15:11:8b:7e:18:d9:7e:1b:
cd:a5:f9:71:5e:b6:20:65:42:18:7b:f9:5f:58:e9:37:c2:42:
f6:08:2a:7c:85:77:80:54:bd:44:48:02:b9:d0:65:be:00:b4:
c4:57:4b:9c:fd:d7:7c:d0:96:66:d0:65:f5:a3:90:33:9f:df:
a4:1d:a0:43:63:9a:6b:2b:79:a9:49:32:21:ea:ef:f4:46:dc:
29:57:a5:a6:94:9f:94:bc:24:9a:7f:a9:f2:5a:f3:c5:6e:81:
74:a0:af:f5:ea:5e:51:2d:d1:93:53:f1:e1:6b:2c:07:88:5c:
4d:13:a1:0f:85:db:b4:a2:4d:db:06:f3:4b:27:f7:36:d4:6d:
30:d5:7d:4d:ae:f1:fa:77:95:f1:f3:ee:0b:4b:55:84:3f:bd:
73:b8:a3:5a:9a:c4:3b:5b:47:14:85:92:1c:96:f7:3a:58:7e:
97:89:ac:f3:a4:65:0f:2c:f4:52:47:b1:4b:f0:81:9e:12:c2:
6a:23:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:14:06 2025 by rpki-client