Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UjqMd_ch8WZWUwu4H5-L4G_ZsQU.roa
File: UjqMd_ch8WZWUwu4H5-L4G_ZsQU.roa (raw, json)
Hash identifier: 5mSKhN9r33WV+5Ys/7FRgaKiWtVVPhR4RLwj6vDZbvE=
Subject key identifier: 52:3A:8C:77:F7:21:F1:66:56:53:0B:B8:1F:9F:8B:E0:6F:D9:B1:05
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A0B454F2C3AE8EB19B0107182DE3191A2C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UjqMd_ch8WZWUwu4H5-L4G_ZsQU.roa
Signing time: Fri 18 Sep 2026 11:44:21 +0000
ROA not before: Fri 18 Sep 2026 11:44:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.72.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
212.68.58.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:54:f2:c3:ae:8e:b1:9b:01:07:18:2d:e3:19:1a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 18 11:44:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=523a8c77f721f16656530bb81f9f8be06fd9b105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:e7:b3:b0:31:9d:05:31:95:a0:4e:52:27:
6d:c9:18:fd:a8:11:e6:24:95:c1:26:1e:10:94:c2:
78:df:15:41:d2:cc:d5:29:89:43:e1:34:3a:70:87:
d7:89:ec:6f:54:29:02:e9:4c:42:9c:d1:3f:3c:90:
44:8c:91:d5:85:d9:3c:e7:a3:6f:d6:45:3e:e1:66:
45:66:53:cd:7c:bc:1e:c8:3e:29:d5:cb:72:5a:35:
1d:57:ad:16:87:45:73:ea:11:27:9d:94:bf:5a:a5:
45:d8:f4:3c:5e:3b:ca:d0:d8:a7:33:92:0e:07:0c:
be:8f:ca:53:49:9c:9a:0b:54:e5:a0:2e:00:c8:b8:
15:27:96:bf:6d:d6:d9:b9:b1:5d:f4:ce:d3:ee:e1:
c8:5f:a2:2c:59:c4:3b:d1:0a:88:c2:85:68:d7:68:
8d:fb:5f:fd:bc:aa:65:9d:ce:b5:70:d5:57:61:e3:
a5:e6:83:5e:7c:5e:90:b5:d1:49:90:84:55:35:b9:
85:fe:a2:66:80:d6:ce:34:a3:45:30:a8:fd:18:fa:
9e:82:95:9d:2e:e0:cc:c4:2f:f0:56:62:32:ab:0e:
74:ce:d2:a4:ba:59:a2:96:db:60:ae:97:22:b7:ea:
6d:46:a4:de:ab:6a:57:36:e2:ee:4d:b5:6a:40:69:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3A:8C:77:F7:21:F1:66:56:53:0B:B8:1F:9F:8B:E0:6F:D9:B1:05
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UjqMd_ch8WZWUwu4H5-L4G_ZsQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.72.0/24
78.135.93.0/24
78.135.100.0/24
78.135.104.0/24
185.17.139.0/24
188.132.129.0-188.132.130.255
188.132.152.0/23
188.132.165.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.189.0/24
188.132.199.0/24
188.132.201.0-188.132.202.255
188.132.209.0/24
188.132.212.0/23
188.132.234.0/23
212.68.58.0/24
212.68.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ea:ce:a4:01:ac:1d:d0:f2:15:c0:90:db:4e:34:4c:00:e3:
83:04:e4:cc:a7:80:1a:f8:01:0e:11:e6:b1:8a:9a:95:bb:bd:
40:29:5c:17:fb:94:37:4e:a7:9b:4b:d4:ea:2d:d5:58:3b:ea:
fe:d6:95:5b:ae:68:da:ce:c2:ad:3f:16:29:36:f4:9c:80:62:
fa:19:86:81:bc:5d:e5:61:be:c8:93:b7:72:f2:2c:7e:13:01:
11:c5:18:77:87:a5:75:4c:3b:bd:9d:99:ba:cc:61:ff:0e:41:
94:96:91:bb:7d:db:98:2d:83:1c:07:2d:ad:d8:7a:5d:0b:98:
5e:6d:38:60:46:0e:c2:59:35:14:28:fa:82:86:2b:41:e0:ff:
0e:6e:9b:2f:12:66:21:b7:14:d0:68:ea:b9:26:2a:30:e9:8a:
f2:46:c5:33:b3:7a:51:80:f3:cb:93:5e:93:dc:91:76:98:ff:
d0:28:21:a4:1a:6d:9f:16:c6:08:88:04:f0:eb:41:b3:98:13:
07:cf:6a:48:85:0c:77:11:e2:fb:db:7a:b0:e0:3b:d8:61:3e:
19:d7:c1:02:1f:02:a0:61:1b:36:f5:ca:4c:27:3a:2c:a5:9c:
78:76:d1:17:33:3d:c4:a5:90:d7:31:b4:15:7b:ce:73:34:25:
35:f4:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:06:42 2026 by rpki-client