Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/VSTvJd5h1fJUpFcDkpWehBmerWU.roa
File: VSTvJd5h1fJUpFcDkpWehBmerWU.roa (raw, json)
Hash identifier: BJSxFJdEem4H8rI+w02tkL0g2q81qbgek0uq2F+I4QE=
Subject key identifier: 55:24:EF:25:DE:61:D5:F2:54:A4:57:03:92:95:9E:84:19:9E:AD:65
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019D083B7E10385F4ED366BECCCB8DAC774D
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/VSTvJd5h1fJUpFcDkpWehBmerWU.roa
Signing time: Thu 19 Mar 2026 22:33:29 +0000
ROA not before: Thu 19 Mar 2026 22:33:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 135.106.1.0/24 maxlen: 24
135.106.27.0/24 maxlen: 24
135.106.36.0/24 maxlen: 24
135.106.45.0/24 maxlen: 24
135.106.64.0/24 maxlen: 24
135.106.65.0/24 maxlen: 24
135.106.83.0/24 maxlen: 24
135.106.84.0/24 maxlen: 24
135.106.100.0/24 maxlen: 24
136.234.149.0/24 maxlen: 24
136.234.220.0/24 maxlen: 24
136.234.233.0/24 maxlen: 24
136.234.247.0/24 maxlen: 24
141.133.12.0/24 maxlen: 24
141.133.13.0/24 maxlen: 24
141.133.14.0/24 maxlen: 24
141.133.15.0/24 maxlen: 24
141.133.16.0/24 maxlen: 24
141.133.17.0/24 maxlen: 24
141.133.18.0/24 maxlen: 24
141.133.19.0/24 maxlen: 24
141.133.111.0/24 maxlen: 24
141.133.112.0/24 maxlen: 24
141.133.113.0/24 maxlen: 24
141.133.114.0/24 maxlen: 24
141.133.115.0/24 maxlen: 24
141.133.116.0/24 maxlen: 24
141.133.117.0/24 maxlen: 24
153.80.1.0/24 maxlen: 24
153.80.5.0/24 maxlen: 24
153.80.10.0/24 maxlen: 24
153.80.32.0/24 maxlen: 24
153.80.33.0/24 maxlen: 24
153.80.45.0/24 maxlen: 24
153.80.46.0/24 maxlen: 24
153.80.74.0/24 maxlen: 24
153.80.95.0/24 maxlen: 24
153.80.96.0/24 maxlen: 24
153.80.110.0/24 maxlen: 24
153.80.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:3b:7e:10:38:5f:4e:d3:66:be:cc:cb:8d:ac:77:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Mar 19 22:33:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5524ef25de61d5f254a4570392959e84199ead65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:ac:cc:6d:c4:76:76:9f:69:07:33:8a:17:
90:db:b3:5f:c0:bb:37:1e:54:fe:8a:09:e4:5e:57:
fa:a7:de:a2:76:1a:bd:9b:e1:9a:a1:51:d6:65:ff:
50:51:d3:f3:80:50:53:a0:79:53:be:dd:92:86:f2:
e0:24:99:57:5e:9c:c3:f0:57:f3:2c:b4:1e:60:db:
8e:4e:d8:47:bd:76:8c:d8:c2:d4:46:f8:c9:5c:90:
ee:46:c4:31:5f:8c:e7:66:6b:ad:ae:78:0f:14:33:
c4:d9:d8:68:e1:7a:7d:2a:b9:7a:20:ba:2c:7c:34:
4e:4f:f8:ac:32:ba:73:dc:37:de:a3:ef:66:78:28:
8c:51:9d:e9:1a:2e:cb:8f:06:85:d2:e7:51:57:b4:
47:84:32:61:b2:6d:c7:29:f6:c8:19:a8:45:d7:65:
9b:f1:dc:f5:22:7f:0f:db:16:7d:6a:0c:bb:b6:53:
d2:58:9d:d2:92:76:d8:e5:da:d5:96:a8:96:5b:25:
9a:1f:24:9d:c9:c0:3d:7a:bf:25:e6:ff:97:f4:c2:
6c:8c:42:69:aa:fa:f4:37:55:ce:70:57:e4:7b:bc:
45:bd:8d:5e:07:7f:f1:e3:81:c8:b0:98:e4:24:90:
c1:54:b3:6e:83:1f:8e:fa:50:80:69:31:37:31:02:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:24:EF:25:DE:61:D5:F2:54:A4:57:03:92:95:9E:84:19:9E:AD:65
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/VSTvJd5h1fJUpFcDkpWehBmerWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.1.0/24
135.106.27.0/24
135.106.36.0/24
135.106.45.0/24
135.106.64.0/23
135.106.83.0-135.106.84.255
135.106.100.0/24
136.234.149.0/24
136.234.220.0/24
136.234.233.0/24
136.234.247.0/24
141.133.12.0-141.133.19.255
141.133.111.0-141.133.117.255
153.80.1.0/24
153.80.5.0/24
153.80.10.0/24
153.80.32.0/23
153.80.45.0-153.80.46.255
153.80.74.0/24
153.80.95.0-153.80.96.255
153.80.110.0/24
153.80.137.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e3:67:cd:ed:8d:a3:17:b8:0e:bc:74:9e:16:d3:59:62:d0:
09:62:a1:bc:59:10:8d:16:a9:b2:fb:7d:14:0b:d1:f2:8d:a6:
9e:38:e3:82:47:2d:fc:45:2b:25:6b:ee:0e:a4:c2:a1:70:da:
e2:d7:25:9d:d2:09:a8:68:51:cb:d5:3c:76:42:0e:ee:99:b0:
80:e0:29:9b:79:63:5f:e8:94:38:29:b6:62:9c:9e:7b:14:79:
9a:af:7c:e1:90:9f:05:8f:6d:f5:de:f8:48:65:fc:ca:d7:8e:
73:ac:61:86:fd:f1:ba:4f:ab:48:44:38:70:1e:6d:7b:8e:3a:
be:af:42:fd:7d:c5:08:af:da:3a:01:6b:a0:5d:df:33:11:83:
a0:de:44:a2:b0:c3:29:27:f8:fa:51:b6:10:1a:ef:26:b7:d6:
5f:10:af:e8:92:47:76:91:7e:e9:ce:61:5d:65:b9:6e:b5:73:
53:01:2e:dd:a9:dc:f8:bc:53:e4:e9:30:3a:9c:d4:aa:fa:0f:
47:c2:09:24:28:8b:4b:a0:99:13:48:3d:ac:67:8a:f1:14:38:
1b:9b:e6:fb:a8:c8:b3:90:56:c6:c3:57:6d:09:13:5d:8a:13:
79:4a:5a:00:cc:15:fc:fe:1b:76:b4:8f:1a:bb:18:72:58:81:
a4:b3:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:00:52 2026 by rpki-client