Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VXZPaTMQvYPTQofsBfWwd1qf-vY.roa
File: VXZPaTMQvYPTQofsBfWwd1qf-vY.roa (raw, json)
Hash identifier: XPuwA0fVWx3jmCSaBAmOE3zWZEGMfryWcfzTdxTbJzM=
Subject key identifier: 55:76:4F:69:33:10:BD:83:D3:42:87:EC:05:F5:B0:77:5A:9F:FA:F6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019A170F342081B08AC2893FF53AF1751A04
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VXZPaTMQvYPTQofsBfWwd1qf-vY.roa
Signing time: Fri 24 Oct 2025 16:31:03 +0000
ROA not before: Fri 24 Oct 2025 16:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:0f:34:20:81:b0:8a:c2:89:3f:f5:3a:f1:75:1a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 24 16:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55764f693310bd83d34287ec05f5b0775a9ffaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:29:79:8f:46:2d:f2:1b:d1:51:2f:37:c3:
4d:9a:44:dd:b8:3a:e1:b1:c7:ab:ac:00:8b:c8:8a:
1a:aa:cf:a1:a9:b5:cf:d9:30:7a:7d:a2:2d:e5:e7:
8d:9b:97:24:91:13:78:e5:1d:5e:4c:cf:75:05:a0:
09:ed:6d:3d:3a:c1:58:c6:67:ae:14:17:4f:aa:2d:
45:08:66:12:07:d9:9c:33:d8:0b:0b:0b:d2:8a:03:
e8:62:b0:bc:17:98:1a:ae:44:ca:47:7f:27:f6:c0:
6f:81:01:27:b5:cd:b7:7f:cc:b5:98:19:1f:4d:ff:
bf:03:26:ef:34:c5:82:c7:54:f8:8d:03:6b:e3:1e:
17:2f:2e:f0:e2:60:1c:f3:b5:9c:39:8e:47:ca:62:
e3:58:79:c5:c4:21:4d:2c:0f:e9:b9:b9:1d:1e:55:
f1:cc:32:91:49:d7:ed:f6:d9:af:02:06:e5:ee:a4:
92:08:15:e9:44:29:5f:32:af:dc:1e:09:8f:15:f6:
74:40:58:ec:bc:ed:07:09:4f:b5:97:23:7a:30:ee:
74:7e:a3:b1:29:f2:9f:81:3a:da:c2:bf:4b:18:08:
4e:98:87:03:f9:89:1e:4f:22:86:19:62:d5:d6:6d:
37:3b:ff:8e:4a:85:0d:e5:31:1c:c8:d8:fc:86:88:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:76:4F:69:33:10:BD:83:D3:42:87:EC:05:F5:B0:77:5A:9F:FA:F6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VXZPaTMQvYPTQofsBfWwd1qf-vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.142.0/23
77.92.152.0/24
78.135.74.0/24
78.135.86.0/24
78.135.98.0/24
185.17.136.0/24
188.132.228.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
3a:aa:d1:ba:f0:24:b1:5c:f6:00:0a:28:5a:d0:25:94:40:71:
c1:ac:fb:8e:c3:58:03:0e:96:42:07:dc:c0:ec:94:0a:cc:4d:
45:a2:11:9f:92:a3:c4:7f:17:30:9d:f7:4e:ef:46:2e:9a:44:
c9:23:b3:9d:fb:79:8d:c9:ba:b7:cd:68:90:68:5c:ef:45:08:
c7:aa:c1:cd:14:d6:2b:f0:ac:f1:ba:27:0a:e3:47:e0:0c:6c:
40:e7:da:be:11:e3:13:db:20:c7:8e:bd:75:44:f1:70:f9:89:
11:dc:d1:fc:10:e9:0d:20:de:c2:e7:c5:ca:2f:ee:f2:dd:4e:
b5:b7:25:af:5e:35:61:f7:22:59:bd:cb:ec:88:76:ce:d2:85:
e4:75:24:f9:6b:cc:96:6a:74:20:69:18:71:9d:01:ad:3c:c4:
b4:1d:71:5a:8a:cf:27:c8:ca:ad:04:83:c3:00:4c:ca:9e:49:
c1:0a:85:bf:33:ea:db:1e:dd:ba:e0:f2:a5:92:dd:53:fc:b2:
57:f1:e7:61:fd:37:1a:71:8d:d6:95:f9:ab:3c:c4:39:9c:91:
47:ff:2a:96:c0:c5:e4:3b:bf:84:45:12:bf:9c:f1:86:b5:c6:
0e:2f:b3:8f:a9:a2:93:f2:03:ba:4e:d4:f0:a1:fe:0b:99:db:
2e:d9:60:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:25:54 2025 by rpki-client