Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/baytU7QGvb7_BfZZgdnh1FJz5aw.roa
File: baytU7QGvb7_BfZZgdnh1FJz5aw.roa (raw, json)
Hash identifier: 55pVzYM6pQ2LBb6qPGX6KkT8klvyqRM4ltCx7QybCvo=
Subject key identifier: 6D:AC:AD:53:B4:06:BD:BE:FF:05:F6:59:81:D9:E1:D4:52:73:E5:AC
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0199F21F910D31303D9DE7D6AC66F74FE0D5
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/baytU7QGvb7_BfZZgdnh1FJz5aw.roa
Signing time: Fri 17 Oct 2025 12:22:58 +0000
ROA not before: Fri 17 Oct 2025 12:22:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.74.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
185.17.136.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:1f:91:0d:31:30:3d:9d:e7:d6:ac:66:f7:4f:e0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 17 12:22:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dacad53b406bdbeff05f65981d9e1d45273e5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:a9:4e:4b:61:c5:ca:20:b8:b5:53:77:af:
1d:97:54:d4:c7:e7:10:8f:51:5a:33:d4:ce:7d:3c:
99:e1:b2:5b:4f:b1:4a:b5:36:7b:3b:7a:28:20:7d:
24:39:f0:68:5b:b8:31:e1:c7:f1:c8:b9:89:d8:01:
ee:dc:12:ca:78:58:21:6a:b1:e5:94:cf:21:aa:72:
2c:f4:dc:52:1c:a4:67:74:1d:35:13:a8:02:2c:7a:
2c:a7:7c:7f:27:6d:57:11:fd:cf:e1:09:8d:ff:e9:
73:4e:54:9d:66:f9:0e:8b:3b:57:52:ce:1d:6c:e7:
71:59:b5:64:a9:f4:27:ea:b3:52:89:2e:39:45:a6:
6b:b7:22:2e:01:2b:18:20:43:e2:f9:45:1a:34:6c:
87:b9:f1:2e:c4:8a:d0:75:36:59:1b:08:e1:ae:08:
e2:de:b4:20:46:a2:08:b7:84:0a:6e:46:b3:be:73:
9f:19:8c:b8:ea:be:f7:5c:dd:36:ea:d9:c5:c5:9a:
4c:98:fe:45:1e:1b:eb:89:13:0c:a2:70:0d:d8:b2:
b4:91:6d:da:8b:79:8e:0f:8b:5b:b0:50:64:84:cd:
45:6a:ca:9c:2d:a5:a0:f7:4a:ec:b2:90:ec:dc:86:
15:34:eb:e3:ca:bc:95:ae:76:cf:82:66:33:84:93:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AC:AD:53:B4:06:BD:BE:FF:05:F6:59:81:D9:E1:D4:52:73:E5:AC
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/baytU7QGvb7_BfZZgdnh1FJz5aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.142.0/23
77.92.152.0/24
78.135.74.0/24
78.135.86.0/24
78.135.98.0/24
185.17.136.0/24
188.132.188.0/24
188.132.228.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
34:a5:d9:b3:38:be:e0:8a:d1:50:d8:1f:e4:06:65:11:b3:4d:
f3:74:db:8b:c8:7e:63:0c:a4:e9:da:5a:94:5a:92:f9:02:d3:
c0:45:f2:2f:76:d9:a5:19:41:6c:06:dc:ed:4a:65:e5:02:c8:
85:81:00:ea:07:03:cf:21:10:7a:74:12:b0:e2:54:5f:20:3a:
ea:4e:99:ff:28:c5:19:a8:69:c7:ca:e0:07:f1:b0:7f:71:e7:
82:f1:44:f6:c7:96:20:fb:95:e5:d2:38:74:60:b2:3a:45:b6:
f0:a7:60:e1:02:4c:4a:dd:8a:fc:47:ae:1c:d1:43:7f:10:0f:
6b:03:1c:7f:6a:65:e9:54:20:39:58:ea:96:8c:c9:77:c2:6c:
23:26:69:f6:6d:9c:41:5a:93:f0:5d:d4:24:44:5f:9f:bd:e0:
0b:1d:00:25:94:0c:d8:39:ca:ca:25:34:39:28:06:b2:d8:e7:
30:3b:63:2e:73:d5:86:95:fc:53:a7:43:e7:4a:3e:f2:28:7d:
f6:e1:8a:cd:a9:b2:cb:b4:20:72:93:c5:4b:95:2d:a3:a1:ae:
d4:67:7e:5e:be:44:8c:4f:5b:47:e6:dc:c0:e8:ee:aa:3f:6d:
0e:7e:e6:58:e7:c9:17:1b:86:c6:7b:bc:f6:d6:f0:d1:25:f0:
22:0e:47:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:16 2025 by rpki-client