Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JVBrVQVuumnumJ7ds3GhcxwK6k8.roa
File: JVBrVQVuumnumJ7ds3GhcxwK6k8.roa (raw, json)
Hash identifier: jAZ5MXKknTgExj+CJ3XLAYKCq6oF5C0Qtz1peZa493Q=
Subject key identifier: 25:50:6B:55:05:6E:BA:69:EE:98:9E:DD:B3:71:A1:73:1C:0A:EA:4F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0199773BAD62C0257BA792AA5A4338C018D0
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JVBrVQVuumnumJ7ds3GhcxwK6k8.roa
Signing time: Tue 23 Sep 2025 15:40:23 +0000
ROA not before: Tue 23 Sep 2025 15:40:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.72.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.146.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
212.68.58.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:77:3b:ad:62:c0:25:7b:a7:92:aa:5a:43:38:c0:18:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 23 15:40:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25506b55056eba69ee989eddb371a1731c0aea4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:e3:4a:cb:d0:da:e6:f3:f9:06:70:22:60:
be:c1:8e:4f:a7:d4:41:be:92:f8:6a:6d:8e:d7:49:
a5:3b:a1:9e:1b:36:54:1b:88:1f:dc:25:bd:8b:f2:
36:e8:99:4a:ac:91:2c:0f:1c:65:38:d1:5e:48:75:
4a:6a:49:d5:42:b0:25:f9:db:9f:56:59:5b:fa:db:
33:65:56:76:d2:32:a2:1d:97:0d:e3:d4:7c:52:41:
95:57:78:be:0e:cf:c1:c1:04:5b:28:41:c5:b6:0e:
f1:95:ef:bf:45:83:9c:cc:f1:bd:29:65:d3:bf:86:
4a:b5:d5:d4:5e:a2:5e:40:6a:f7:47:56:ec:f1:3e:
33:34:90:16:07:8f:77:ba:f3:6c:9e:5b:a0:00:f6:
80:d5:5f:16:db:23:37:68:1b:ac:d3:21:94:25:1b:
3f:b8:89:06:e8:af:28:33:ec:9c:90:15:e8:57:66:
ed:ab:d9:9a:1c:c8:a2:c9:93:dc:7e:82:36:eb:c5:
c4:44:5e:4e:e9:6a:6e:de:fb:f7:5d:fd:e0:b3:4d:
15:1f:62:18:61:16:40:15:4b:5a:00:9a:33:3b:6b:
da:7c:12:05:93:a1:73:41:a9:f7:e0:48:a8:d8:50:
d3:3a:90:cb:0a:1c:6f:57:fd:de:07:38:75:c1:6c:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:50:6B:55:05:6E:BA:69:EE:98:9E:DD:B3:71:A1:73:1C:0A:EA:4F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JVBrVQVuumnumJ7ds3GhcxwK6k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.143.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.72.0/24
78.135.81.0/24
78.135.92.0/23
78.135.100.0/24
78.135.104.0/24
185.17.139.0/24
188.132.129.0-188.132.130.255
188.132.146.0/24
188.132.152.0/23
188.132.165.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.189.0/24
188.132.199.0/24
188.132.201.0-188.132.202.255
188.132.209.0/24
188.132.212.0/23
188.132.234.0/23
212.68.58.0/24
212.68.60.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8c:73:88:73:54:2e:80:dc:60:cb:55:b7:d0:52:e5:2d:24:
9b:a2:e7:58:5e:df:1f:af:b8:c1:7f:6e:e6:36:c7:00:b4:59:
25:fa:61:c0:a0:1b:18:6a:e6:f5:b6:42:2a:b4:85:a0:c8:a0:
f4:88:b0:74:1d:e8:e2:bc:03:09:18:6c:02:fa:cd:ff:aa:b9:
7b:5e:b5:d5:36:1a:39:52:20:0c:8a:99:b4:7e:07:85:89:8b:
26:40:44:b6:7e:e2:5e:2f:90:8a:c4:24:51:cf:dd:a9:aa:69:
d8:61:e5:ba:1f:1e:55:e2:70:f7:b7:a3:b2:85:65:a8:a6:d7:
4d:67:da:ab:b8:41:47:b0:f4:ae:bb:2d:a6:cf:0a:eb:c5:c5:
1e:27:a9:e9:41:47:8b:ea:44:d8:a2:f3:d3:49:41:6b:34:a4:
95:57:9d:c4:4e:2e:3c:26:1c:b3:cf:0c:60:b3:24:72:59:84:
5f:95:20:2e:74:b9:47:c7:fa:ed:a3:16:df:b3:1a:e3:a7:ef:
8a:89:f9:aa:8c:ef:df:ce:c4:d8:f4:f2:73:d2:cd:ab:c5:06:
6a:1c:db:21:0c:49:e3:05:e2:f8:6f:ef:9e:aa:fa:d7:fe:f9:
29:4a:6f:89:dd:f1:e8:60:f3:fa:6c:84:5b:8d:8b:43:03:0e:
13:70:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:17 2025 by rpki-client