Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/l1JBJeL1TzXpfEJ4dJ1OFlIGoKs.roa
File: l1JBJeL1TzXpfEJ4dJ1OFlIGoKs.roa (raw, json)
Hash identifier: WH2AV+DKIPZKgJAKlzBT1MXSPWrK7NoPeJmwxvwHWks=
Subject key identifier: 97:52:41:25:E2:F5:4F:35:E9:7C:42:78:74:9D:4E:16:52:06:A0:AB
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019D082759A787B0FFEA127FBDB219052647
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/l1JBJeL1TzXpfEJ4dJ1OFlIGoKs.roa
Signing time: Thu 19 Mar 2026 22:11:29 +0000
ROA not before: Thu 19 Mar 2026 22:11:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 141.133.3.0/24 maxlen: 24
141.133.4.0/24 maxlen: 24
141.133.5.0/24 maxlen: 24
141.133.6.0/24 maxlen: 24
141.133.7.0/24 maxlen: 24
141.133.10.0/24 maxlen: 24
141.133.44.0/24 maxlen: 24
141.133.45.0/24 maxlen: 24
141.133.46.0/24 maxlen: 24
141.133.47.0/24 maxlen: 24
141.133.48.0/24 maxlen: 24
141.133.49.0/24 maxlen: 24
141.133.50.0/24 maxlen: 24
141.133.51.0/24 maxlen: 24
141.133.52.0/24 maxlen: 24
141.133.53.0/24 maxlen: 24
141.133.77.0/24 maxlen: 24
141.133.78.0/24 maxlen: 24
141.133.79.0/24 maxlen: 24
141.133.80.0/24 maxlen: 24
141.133.81.0/24 maxlen: 24
141.133.82.0/24 maxlen: 24
141.133.83.0/24 maxlen: 24
141.133.84.0/24 maxlen: 24
141.133.85.0/24 maxlen: 24
141.133.122.0/24 maxlen: 24
141.133.123.0/24 maxlen: 24
141.133.124.0/24 maxlen: 24
141.133.125.0/24 maxlen: 24
141.133.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:27:59:a7:87:b0:ff:ea:12:7f:bd:b2:19:05:26:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Mar 19 22:11:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97524125e2f54f35e97c4278749d4e165206a0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:17:0b:4b:83:c6:34:6e:08:2b:27:21:c8:
ef:10:0d:46:da:01:77:8b:f9:6c:f2:80:13:04:c2:
4a:ed:2d:d0:da:2b:58:25:e1:f3:d9:e3:85:d8:93:
51:de:1b:57:dd:ec:32:0c:e0:07:65:4b:93:95:a8:
11:78:ad:71:5d:4d:d6:e9:b4:99:5d:24:22:a9:f3:
d0:6e:e8:ea:9e:0b:e1:b2:cd:05:e7:48:3a:43:ef:
f3:9a:f3:21:5e:a9:f4:33:29:e5:ca:32:aa:49:9b:
a3:cb:7d:d7:0a:ae:49:0d:1c:60:8d:1f:d5:c3:d7:
30:31:9f:2b:57:96:b7:ea:c4:9a:14:33:c3:d8:95:
7f:16:82:8f:e5:2f:8f:bd:c2:74:ce:0c:7c:f2:d0:
88:2e:04:c3:a3:e4:23:d8:1b:32:dc:04:92:8e:a7:
81:4a:2f:55:e5:15:ab:fc:71:2f:40:5e:dd:c2:f1:
63:04:fc:b3:4c:c5:09:b6:13:45:7f:b6:62:7d:ab:
d0:84:29:5f:29:9a:05:3b:da:9b:f2:21:61:dd:c5:
0a:32:43:6c:65:2e:7b:ae:40:54:b2:39:cb:cf:d9:
5a:52:1a:aa:d0:b7:0d:c6:82:3a:8c:e1:02:97:0a:
7f:0e:2d:4d:e5:ba:0a:0f:c3:63:55:6f:f9:b8:c7:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:52:41:25:E2:F5:4F:35:E9:7C:42:78:74:9D:4E:16:52:06:A0:AB
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/l1JBJeL1TzXpfEJ4dJ1OFlIGoKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.133.3.0-141.133.7.255
141.133.10.0/24
141.133.44.0-141.133.53.255
141.133.77.0-141.133.85.255
141.133.122.0-141.133.126.255
Signature Algorithm: sha256WithRSAEncryption
4e:53:c3:5e:cf:22:a0:19:35:80:2c:6c:5a:f1:27:5f:f5:49:
74:e5:9a:f6:66:8b:c0:f7:62:49:8f:80:af:25:50:c3:31:88:
9b:91:38:7b:99:45:db:0a:4f:9e:42:95:62:c2:49:45:34:fa:
0c:cb:f8:65:28:16:96:eb:b4:f8:0d:42:d9:a3:eb:a9:a5:e8:
7f:fe:f1:2c:39:49:f4:63:cb:73:23:6e:c2:be:ff:2d:9a:2a:
cb:4e:20:89:54:66:2d:1f:7f:57:06:09:da:d0:17:4c:93:6e:
07:42:11:4c:71:d1:29:1d:0b:76:14:50:77:f9:9c:52:54:cf:
7d:db:0e:a5:7d:a6:9c:ad:ae:d1:5c:46:ec:7a:85:be:f4:67:
05:9c:6c:48:49:12:0d:cf:be:3c:99:37:90:d1:20:fe:9b:35:
cb:1f:b3:5a:fc:48:c9:1b:ca:d0:d7:52:44:e1:82:64:07:c5:
1d:58:ed:85:9b:24:4d:e1:7e:de:0f:23:fd:a6:fb:c4:bd:1a:
11:d0:e0:82:ca:92:a7:2b:f9:37:e4:91:68:df:25:9e:66:80:
83:dc:ea:43:15:2a:6a:10:cf:d5:ff:03:48:d9:c2:89:1f:7a:
66:1a:f0:d5:60:bc:66:49:72:58:9d:01:c0:11:67:ad:ae:b0:
1a:1b:40:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:12 2026 by rpki-client