Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/riydXZ41zEEykuz6zkwsHOshtp4.roa
File: riydXZ41zEEykuz6zkwsHOshtp4.roa (raw, json)
Hash identifier: FFBHDyUsGdd0rvvsYbEH+lmDzkNAUBGUHuDBVG4rPhA=
Subject key identifier: AE:2C:9D:5D:9E:35:CC:41:32:92:EC:FA:CE:4C:2C:1C:EB:21:B6:9E
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019A6D8CD5F3DA61618524D8495AB22B378A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/riydXZ41zEEykuz6zkwsHOshtp4.roa
Signing time: Mon 10 Nov 2025 11:35:37 +0000
ROA not before: Mon 10 Nov 2025 11:35:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.67.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.89.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:8c:d5:f3:da:61:61:85:24:d8:49:5a:b2:2b:37:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 10 11:35:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae2c9d5d9e35cc413292ecface4c2c1ceb21b69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:42:d3:28:0b:a1:3b:e3:a6:35:31:67:97:fd:
56:2e:c8:bc:06:37:8b:41:f1:01:26:2d:c3:de:1f:
d9:41:70:10:d7:28:32:b7:0c:ff:04:ec:4b:21:ee:
f5:f0:a6:33:05:4e:fb:2f:79:20:84:74:44:dc:69:
4d:5d:53:60:3a:89:2f:ee:00:67:d1:fd:bc:ac:d6:
30:de:8b:5f:88:be:13:c2:e0:b5:66:8a:01:df:b6:
87:1c:e2:7b:11:8e:90:da:af:b8:0d:a1:75:22:3d:
fb:ae:dc:51:84:f0:43:74:a6:45:4c:da:02:4f:eb:
00:f5:fd:92:04:91:07:76:9a:58:46:b1:24:1e:3a:
4d:cf:58:11:10:23:15:ad:17:68:48:17:9c:20:43:
1e:d3:28:7a:74:c6:e4:61:10:9a:17:27:c6:f0:12:
0f:b4:c0:2f:f4:e2:f6:12:52:29:2f:38:4d:1d:f1:
ea:1b:d1:7a:63:4c:db:72:b3:0a:60:3d:01:01:f3:
f0:93:3c:df:e2:9b:27:b0:79:cc:78:92:85:c3:97:
02:9f:43:06:8c:9e:25:f3:76:26:55:9c:53:a7:bc:
75:8a:43:11:04:f7:46:66:c4:fd:4d:62:83:d4:4f:
46:b5:fa:25:12:96:a9:36:36:8b:58:de:88:37:e7:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2C:9D:5D:9E:35:CC:41:32:92:EC:FA:CE:4C:2C:1C:EB:21:B6:9E
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/riydXZ41zEEykuz6zkwsHOshtp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.142.0/23
77.92.152.0/24
78.135.67.0/24
78.135.74.0/24
78.135.86.0/24
78.135.89.0/24
78.135.98.0/24
185.17.136.0/24
188.132.228.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
33:c7:7a:47:1b:0b:a0:23:0e:1c:94:ab:21:3f:ab:9b:38:b4:
06:a3:01:bd:c3:b5:d6:8d:3e:9e:66:3d:01:c6:9c:ab:91:d8:
f4:a1:87:d5:47:93:0a:f6:ed:d8:c1:cc:ff:f7:02:b3:41:11:
66:98:38:5d:09:ff:2a:29:63:77:ff:87:72:d9:93:f1:83:99:
6f:8e:b2:05:23:84:1f:59:10:4b:15:e2:43:84:52:7f:56:49:
37:71:7b:ff:55:ba:3d:fd:ba:15:8a:6d:65:c2:fd:26:af:b4:
a9:36:17:83:5c:9d:f7:76:ee:ed:80:82:f7:63:b2:12:44:94:
e7:c4:6b:9d:de:4f:b6:b0:01:bf:27:d8:15:70:70:c3:ff:00:
f1:71:4a:ea:9e:6b:7c:04:91:f1:d4:e9:c6:8f:35:de:1e:f4:
95:00:05:98:d9:3c:0d:a0:c7:ff:45:6e:53:4b:e0:3c:e0:95:
4b:ab:e1:77:62:8d:4b:f8:ee:81:56:d6:58:25:25:ed:52:27:
74:59:25:f9:95:aa:d9:e0:21:ff:8d:4c:1d:04:0d:31:9e:9f:
54:75:a2:5b:d9:32:c5:c5:b1:70:8a:20:02:fb:5a:66:af:8a:
7b:d5:94:18:50:43:13:55:5b:f2:4b:29:b3:3f:43:17:cc:ea:
a5:fb:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:53:16 2025 by rpki-client