Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/_VYOUpqv4o4joYaBxdO3F4bAoRg.roa
File: _VYOUpqv4o4joYaBxdO3F4bAoRg.roa (raw, json)
Hash identifier: tHDLHpXhmtOqKAjh5AEdbcavLeB1OGgUYiTAMnUaTDk=
Subject key identifier: FD:56:0E:52:9A:AF:E2:8E:23:A1:86:81:C5:D3:B7:17:86:C0:A1:18
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A1C57710FEDB3D94A3C7A888CA7B529081
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/_VYOUpqv4o4joYaBxdO3F4bAoRg.roa
Signing time: Tue 10 Nov 2026 12:37:57 +0000
ROA not before: Tue 10 Nov 2026 12:37:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 136.234.173.0/24 maxlen: 32
136.234.175.0/24 maxlen: 32
136.234.178.0/24 maxlen: 32
136.234.179.0/24 maxlen: 32
136.234.181.0/24 maxlen: 32
136.234.182.0/24 maxlen: 32
136.234.183.0/24 maxlen: 32
136.234.184.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:77:10:fe:db:3d:94:a3:c7:a8:88:ca:7b:52:90:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Nov 10 12:37:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd560e529aafe28e23a18681c5d3b71786c0a118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:1c:68:77:84:a0:d6:a0:d7:fe:1a:47:2e:
29:1e:84:39:05:e9:e1:18:3f:58:78:17:8e:84:ab:
18:d6:0b:af:8e:57:f1:a5:50:b6:89:cc:df:7c:b4:
1e:a4:3a:58:b9:08:27:cf:11:1f:d6:5f:5b:73:a9:
50:09:6a:02:37:34:e0:f4:e5:8d:49:dd:76:04:9f:
e8:1b:09:64:63:19:02:26:66:45:e8:9e:e4:5e:fc:
22:06:bd:f6:04:4f:64:c1:f7:7e:f7:ef:00:e4:95:
a8:0d:20:f5:22:31:bc:ac:d0:66:7e:2f:51:b5:6f:
10:01:2f:16:78:e4:e0:61:c5:31:3b:e1:05:f7:51:
0e:09:b9:ed:bd:53:1d:8d:40:4e:f2:28:e1:5f:a4:
07:6d:18:d6:78:3f:19:68:ba:ad:c6:fc:f2:fa:d1:
6f:45:43:ad:9f:d4:4d:40:55:30:67:08:b4:7d:2d:
8d:87:d7:f9:d5:af:d9:a8:31:ac:cf:17:2a:fb:3d:
47:23:76:2b:ac:76:bd:d2:1b:f0:fc:8c:8f:8a:28:
14:c9:90:53:4d:07:3e:95:a1:b9:15:9b:64:df:30:
e3:6b:21:38:fc:98:32:e2:de:4c:04:b2:33:d5:0d:
67:42:ac:b8:24:4d:de:1f:1f:cc:0c:f7:91:b9:54:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:56:0E:52:9A:AF:E2:8E:23:A1:86:81:C5:D3:B7:17:86:C0:A1:18
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/_VYOUpqv4o4joYaBxdO3F4bAoRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.234.173.0/24
136.234.175.0/24
136.234.178.0/23
136.234.181.0-136.234.184.255
Signature Algorithm: sha256WithRSAEncryption
43:c9:23:df:53:78:1b:88:9d:16:6d:b6:6d:00:6d:dc:15:05:
94:7e:e5:3e:43:5b:29:5c:c2:dc:32:89:d6:e0:6c:c6:f8:cf:
bd:31:f6:54:06:a3:4b:c3:c5:4f:a7:7c:13:8a:cc:55:54:b0:
5a:37:17:69:fa:cb:e5:4f:7f:7e:6d:78:40:16:3a:a0:e2:57:
2e:13:6a:72:8a:98:e2:89:93:f6:30:f1:bb:71:ba:20:4c:c1:
b5:10:2d:3b:77:c3:68:b3:53:71:ee:49:aa:a8:96:42:c7:67:
e9:14:24:0d:a3:1b:1f:8f:ee:22:96:97:81:47:46:7d:62:cb:
da:70:fe:14:f4:36:13:f9:e2:77:38:df:f8:fe:67:ad:0e:0a:
b7:18:1a:c4:de:bf:fb:05:84:e1:14:87:96:6a:78:62:21:44:
f5:66:ba:d8:eb:a4:59:97:0f:e4:b0:b9:66:09:0f:55:6a:59:
ea:dd:51:e6:38:e5:81:aa:cc:1e:df:86:b6:f9:84:2c:4b:ab:
ef:22:e3:11:4e:02:cc:0a:99:b0:3d:09:c8:0a:a6:bc:2d:7b:
64:53:4e:86:3f:26:36:d1:80:71:a6:3d:2b:0e:d8:5f:d9:a6:
f3:ae:35:45:44:0e:fe:4e:79:46:41:83:50:76:79:10:65:c6:
41:be:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:24:13 2026 by rpki-client