Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/a4c5nDjxUxZzN8-2XTGKKyylEKA.roa
File: a4c5nDjxUxZzN8-2XTGKKyylEKA.roa (raw, json)
Hash identifier: vIspRpTGJa0UmUflc4n43GVwg91z3DdXziQm69Y2zi4=
Subject key identifier: 6B:87:39:9C:38:F1:53:16:73:37:CF:B6:5D:31:8A:2B:2C:A5:10:A0
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019D1C6E871E7B952B4344FC064A4E38898F
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/a4c5nDjxUxZzN8-2XTGKKyylEKA.roa
Signing time: Mon 23 Mar 2026 20:41:38 +0000
ROA not before: Mon 23 Mar 2026 20:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204957
IP address blocks: 135.106.5.0/24 maxlen: 24
135.106.26.0/24 maxlen: 24
135.106.66.0/24 maxlen: 24
135.106.85.0/24 maxlen: 24
135.106.94.0/24 maxlen: 24
135.106.107.0/24 maxlen: 24
136.234.141.0/24 maxlen: 24
136.234.142.0/24 maxlen: 24
136.234.143.0/24 maxlen: 24
136.234.174.0/24 maxlen: 24
136.234.209.0/24 maxlen: 24
136.234.239.0/24 maxlen: 24
136.234.240.0/24 maxlen: 24
136.234.241.0/24 maxlen: 24
136.234.242.0/24 maxlen: 24
141.133.33.0/24 maxlen: 24
141.133.34.0/24 maxlen: 24
141.133.35.0/24 maxlen: 24
141.133.95.0/24 maxlen: 24
141.133.96.0/24 maxlen: 24
153.80.11.0/24 maxlen: 24
153.80.13.0/24 maxlen: 24
153.80.19.0/24 maxlen: 24
153.80.44.0/24 maxlen: 24
153.80.84.0/24 maxlen: 24
153.80.97.0/24 maxlen: 24
153.80.108.0/24 maxlen: 24
153.80.115.0/24 maxlen: 24
153.80.142.0/24 maxlen: 24
153.80.143.0/24 maxlen: 24
153.80.144.0/24 maxlen: 24
153.80.145.0/24 maxlen: 24
153.80.155.0/24 maxlen: 24
153.80.156.0/24 maxlen: 24
153.80.157.0/24 maxlen: 24
153.80.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:6e:87:1e:7b:95:2b:43:44:fc:06:4a:4e:38:89:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Mar 23 20:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b87399c38f153167337cfb65d318a2b2ca510a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:bf:51:d5:a9:cb:cd:92:06:5a:6a:61:cd:
a7:c6:1b:78:29:3f:8d:3e:c9:a4:4d:ae:c6:f1:aa:
e8:08:f3:c5:7c:b9:78:70:73:59:36:72:2e:f9:37:
d3:1a:46:16:85:ef:84:e4:86:05:01:19:7b:e1:47:
c8:14:c3:32:4c:8d:17:17:c9:99:c5:15:cf:4b:2c:
6a:0a:5c:84:a1:3b:41:63:4a:60:44:6f:f5:e3:d8:
b4:05:70:66:43:ea:86:2a:6a:96:81:4c:f4:00:03:
10:1c:e2:ac:d5:dc:32:00:64:c2:70:8e:8c:1a:96:
09:67:92:75:0c:23:7a:7b:00:c1:ae:97:46:f0:5b:
bc:8e:cf:c3:9f:a3:3d:db:33:c5:7c:59:c7:dd:42:
df:fc:83:e0:9c:70:1e:54:c3:2f:5d:88:21:ed:0b:
ce:8b:ef:c4:fa:1b:05:38:37:1f:2d:4d:69:5c:5e:
90:c7:40:68:1e:75:40:40:d5:47:34:b6:dc:64:68:
a1:c2:e1:99:b9:e7:d3:98:b0:41:6c:89:f6:9c:a4:
a6:d0:f0:a3:5e:2e:d9:e3:0c:14:35:77:45:66:73:
5c:d4:7f:99:b7:40:87:8b:28:2b:9a:90:ca:3e:73:
1f:03:ae:38:74:6d:cc:e0:43:e4:a1:0b:68:22:b1:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:39:9C:38:F1:53:16:73:37:CF:B6:5D:31:8A:2B:2C:A5:10:A0
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/a4c5nDjxUxZzN8-2XTGKKyylEKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.5.0/24
135.106.26.0/24
135.106.66.0/24
135.106.85.0/24
135.106.94.0/24
135.106.107.0/24
136.234.141.0-136.234.143.255
136.234.174.0/24
136.234.209.0/24
136.234.239.0-136.234.242.255
141.133.33.0-141.133.35.255
141.133.95.0-141.133.96.255
153.80.11.0/24
153.80.13.0/24
153.80.19.0/24
153.80.44.0/24
153.80.84.0/24
153.80.97.0/24
153.80.108.0/24
153.80.115.0/24
153.80.142.0-153.80.145.255
153.80.155.0-153.80.158.255
Signature Algorithm: sha256WithRSAEncryption
0d:dc:74:56:65:f3:07:59:6b:77:ce:49:ac:1a:66:6d:94:18:
a5:c5:ee:00:0a:82:75:39:4e:80:4e:a2:97:54:80:10:3f:66:
67:8d:d0:e1:0f:7c:7e:d3:31:cb:01:51:fd:4d:aa:c9:ab:dc:
d5:1c:b2:e3:65:25:eb:8c:a9:2b:70:63:75:7d:ac:98:9d:a3:
e1:23:a1:57:e2:bd:89:b4:11:a8:5e:57:6e:9b:ea:b8:1a:3b:
65:47:50:64:a9:c5:b4:dd:b1:3b:ce:db:98:1e:6b:9b:3c:6f:
be:3c:4e:ac:be:32:e6:b2:c7:a5:77:d9:f8:1d:61:d4:de:a6:
54:b4:9f:b6:df:34:1f:42:38:bd:a9:bf:a8:2c:a0:a7:01:c8:
72:b6:db:aa:99:eb:e0:4c:41:8d:4b:d8:84:b6:2d:07:78:10:
d4:0d:21:9d:ee:d5:c9:db:a6:ae:a2:e3:9d:4b:aa:d8:25:91:
77:23:72:71:fb:75:88:63:0d:43:4b:55:59:3f:19:f3:1b:66:
1b:70:96:fd:bf:3a:78:14:51:01:39:8d:c8:3a:12:e8:a8:f5:
08:af:f7:5f:88:d4:ae:15:68:00:27:ae:cf:ab:ad:e1:b9:3e:
78:70:50:16:19:fe:ce:25:39:db:92:98:b8:f5:86:39:2a:20:
a8:53:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:43 2026 by rpki-client