Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ZG4QzzTV1d4oZmttf6QnBFL3Nsg.roa
File: ZG4QzzTV1d4oZmttf6QnBFL3Nsg.roa (raw, json)
Hash identifier: cGbjokQIG7aCkJtsiwEWxcMAZzphewiUF+ice6zCStM=
Subject key identifier: 64:6E:10:CF:34:D5:D5:DE:28:66:6B:6D:7F:A4:27:04:52:F7:36:C8
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A085A9AFBF7A003FEA9853E2BE270FDFBC
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ZG4QzzTV1d4oZmttf6QnBFL3Nsg.roa
Signing time: Wed 09 Sep 2026 10:14:44 +0000
ROA not before: Wed 09 Sep 2026 10:14:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.131.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
78.135.67.0/24 maxlen: 24
78.135.70.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.89.0/24 maxlen: 24
78.135.97.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
78.135.101.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.193.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:a9:af:bf:7a:00:3f:ea:98:53:e2:be:27:0f:df:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 9 10:14:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=646e10cf34d5d5de28666b6d7fa4270452f736c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cd:f2:07:d8:fe:e7:b0:03:44:90:9f:5b:25:
16:b9:d2:bd:90:7b:12:03:01:b5:d3:2c:4b:1d:65:
43:64:73:24:48:e0:18:09:f0:7c:93:fd:3d:31:b1:
22:6d:e4:e6:f8:e4:34:ca:45:1a:3b:71:2c:4e:7f:
6b:db:37:db:50:a7:88:ec:a7:6f:e1:f5:7f:f5:8a:
51:8e:0b:9e:17:7f:d9:8d:03:a2:7b:e9:93:6f:2d:
0d:11:8c:42:ee:e0:ef:59:75:5e:0a:c0:6d:ad:c8:
2f:8d:1d:f8:b3:42:3c:c4:79:78:b9:20:af:10:08:
94:15:df:4a:b0:8a:2f:6f:6d:81:d6:28:14:23:8e:
76:80:fc:e3:a3:57:ae:0d:f1:50:0c:d1:03:6a:ea:
bf:df:13:d5:4b:2a:e3:a6:fd:7b:4f:aa:54:46:14:
ec:5a:64:ce:a0:72:dc:d8:e1:d8:21:5d:20:f4:12:
82:a5:b2:c2:db:0f:18:2d:ed:45:ab:b3:06:c7:1e:
08:b9:c5:51:77:cf:40:e0:b3:7f:8a:fa:17:6f:01:
68:ae:d8:1a:0e:0d:2b:64:f4:0d:14:58:9d:98:82:
fd:a2:80:66:26:01:92:37:6a:da:35:e2:19:9c:db:
87:4a:ad:db:5a:b6:b4:b2:e0:69:ac:45:f9:cf:ec:
39:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6E:10:CF:34:D5:D5:DE:28:66:6B:6D:7F:A4:27:04:52:F7:36:C8
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ZG4QzzTV1d4oZmttf6QnBFL3Nsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.131.0/24
77.92.142.0/24
77.92.152.0/23
78.135.67.0/24
78.135.70.0/24
78.135.74.0/24
78.135.86.0/24
78.135.89.0/24
78.135.97.0-78.135.98.255
78.135.101.0/24
185.17.136.0/24
188.132.193.0/24
188.132.214.0/24
188.132.228.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
06:a4:12:7a:7f:ff:ca:5d:5f:7d:b0:8c:93:74:7a:10:2b:4e:
c3:63:1a:62:44:e4:35:7a:18:64:db:a6:3e:d2:83:8e:8d:7d:
1d:eb:e0:f7:aa:34:f9:18:e3:c2:3e:d7:6a:a4:5b:d6:ef:53:
6b:8c:3b:3d:92:18:4e:b4:13:6b:74:2c:b1:a2:ab:5f:49:f0:
77:78:47:75:0c:f2:9c:89:e9:c7:dd:ad:0a:07:17:df:0d:40:
70:a8:93:2d:f1:8a:4a:03:bd:f1:e9:b9:6a:32:21:0b:96:2d:
8b:92:e8:50:63:75:d6:cb:34:ac:f6:b5:db:57:62:3a:b0:52:
75:be:d2:54:42:83:92:9d:19:ef:f7:f1:1f:34:e6:0c:f0:1a:
13:43:69:46:3c:54:ba:f4:f2:01:d1:33:50:99:61:90:73:df:
27:81:d1:93:b4:8c:3b:4a:3b:b7:9e:6a:94:89:20:e8:da:dc:
77:f0:74:9f:f8:f5:79:26:ed:a8:0b:ca:14:38:f7:a1:90:16:
85:32:de:ff:1c:b5:23:13:91:f5:52:67:1e:9b:e7:54:24:2b:
ac:e0:c7:3f:aa:b0:91:24:1a:88:46:18:2a:1a:36:62:03:2a:
f1:1c:96:09:c1:ab:ac:a1:27:4f:b1:db:68:d9:d5:42:75:57:
f3:0c:f0:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:02:14 2026 by rpki-client