Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/THGUJ-ookyKD6QQsfN93tDdPJng.roa
File: THGUJ-ookyKD6QQsfN93tDdPJng.roa (raw, json)
Hash identifier: NGWe6rcHOQqdnzK0FiC9DN4h6VO9nxTYks7WofFJR04=
Subject key identifier: 4C:71:94:27:EA:28:93:22:83:E9:04:2C:7C:DF:77:B4:37:4F:26:78
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019C4E7E68DF95AE8AFAF96CFDB81EEA9DF4
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/THGUJ-ookyKD6QQsfN93tDdPJng.roa
Signing time: Wed 11 Feb 2026 20:57:13 +0000
ROA not before: Wed 11 Feb 2026 20:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 31.210.42.0/24 maxlen: 24
31.210.55.0/24 maxlen: 24
78.135.82.0/24 maxlen: 24
78.135.83.0/24 maxlen: 24
78.135.111.0/24 maxlen: 24
188.132.128.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4e:7e:68:df:95:ae:8a:fa:f9:6c:fd:b8:1e:ea:9d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 11 20:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c719427ea28932283e9042c7cdf77b4374f2678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:a3:84:d9:8b:3c:0e:89:4e:48:a5:ae:70:
6a:71:70:03:1c:3a:42:fd:db:56:f4:18:f2:58:fb:
2d:ac:28:5e:a4:ff:24:01:e6:04:47:44:db:13:27:
76:10:30:ae:fc:b7:12:54:6f:46:e9:35:23:dc:cb:
b9:fc:a5:1c:8f:21:49:03:39:e2:fa:17:25:26:a8:
84:85:82:de:e0:28:4b:cd:d2:7a:58:0a:7c:f0:88:
75:8a:5b:8f:6e:bc:1d:dd:5f:4c:be:fe:ff:f8:ef:
10:78:74:0b:16:15:20:b9:a8:52:4b:79:41:95:fa:
3e:89:a1:e4:83:2d:79:b4:be:34:3e:7c:a7:60:d9:
0b:72:f6:de:af:b3:fb:87:21:6c:11:f9:54:36:d8:
95:ce:b6:0f:d4:3b:72:32:6e:37:80:9e:90:85:4f:
39:09:b0:f2:33:97:54:05:34:7d:b5:d6:c1:ff:14:
29:5e:76:5b:26:b6:3c:41:bb:18:66:43:d8:4a:0b:
c7:ce:55:0a:25:b0:3c:c5:5b:00:0e:f4:1f:21:e2:
b1:c4:82:86:42:81:dc:a3:45:5b:b3:60:aa:eb:18:
db:5d:6b:41:57:c6:98:59:74:f7:0c:66:4a:e3:58:
f3:e0:df:08:45:ac:4e:41:69:0e:d6:7f:8f:8e:4b:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:71:94:27:EA:28:93:22:83:E9:04:2C:7C:DF:77:B4:37:4F:26:78
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/THGUJ-ookyKD6QQsfN93tDdPJng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.42.0/24
31.210.55.0/24
78.135.82.0/23
78.135.111.0/24
188.132.128.0/24
188.132.168.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e2:7d:71:3c:a0:f0:cd:87:c7:ea:cc:6f:8f:63:db:33:3b:
c1:6c:02:fa:86:8e:64:08:a7:d4:0d:61:e3:0c:f7:ef:ab:0b:
ca:16:dd:e7:7d:0d:00:f4:c0:07:ad:03:a4:77:e6:85:ec:d5:
c5:e0:e0:37:a7:47:60:5e:9c:8a:76:07:94:aa:d3:07:e5:fe:
f9:bc:c3:bc:4d:45:28:1b:a3:ab:7a:0c:31:ce:d8:dd:4d:86:
cb:fc:a2:23:4d:62:c0:f4:95:c7:ee:b4:db:25:6e:9c:5f:d4:
02:3a:a3:7a:ee:7e:32:e1:5c:0c:03:d3:c9:c2:62:b5:36:34:
19:25:a7:be:2e:93:fb:57:0c:a8:e2:d5:b3:62:50:6b:ad:9a:
c0:33:91:9d:b6:69:74:87:ca:d2:91:81:26:c6:77:e0:e9:63:
a8:ba:89:3b:bd:c8:d2:66:e4:54:ac:9f:7c:09:60:e1:a4:65:
66:e3:ab:74:3f:de:bb:10:7f:87:76:57:84:3d:05:f9:37:6c:
b1:8a:2e:eb:8a:43:24:94:33:1f:04:b1:20:f9:c8:a9:85:fc:
c2:8b:7c:0a:d3:ed:3e:9e:0b:ff:1f:5e:76:86:87:12:5b:a4:
3f:a8:2e:f5:22:31:15:45:26:f0:c7:66:ae:6c:f7:b3:60:71:
6f:2c:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:49 2026 by rpki-client