Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/vgdrRNg1iwDXk7wRjAKw2oXzxgk.roa
File: vgdrRNg1iwDXk7wRjAKw2oXzxgk.roa (raw, json)
Hash identifier: 9GItr0FbMxsEXBlU8CcW+5gVVGSwBDcp0ugxaQ97mEE=
Subject key identifier: BE:07:6B:44:D8:35:8B:00:D7:93:BC:11:8C:02:B0:DA:85:F3:C6:09
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019D1C6F7257571A4F593F7FC0F6301BB13B
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/vgdrRNg1iwDXk7wRjAKw2oXzxgk.roa
Signing time: Mon 23 Mar 2026 20:42:38 +0000
ROA not before: Mon 23 Mar 2026 20:42:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 136.234.127.0/24 maxlen: 24
136.234.130.0/24 maxlen: 24
136.234.133.0/24 maxlen: 24
136.234.138.0/24 maxlen: 24
136.234.139.0/24 maxlen: 24
136.234.158.0/24 maxlen: 24
136.234.159.0/24 maxlen: 24
136.234.160.0/24 maxlen: 24
136.234.161.0/24 maxlen: 24
136.234.162.0/24 maxlen: 24
136.234.221.0/24 maxlen: 24
136.234.222.0/24 maxlen: 24
136.234.223.0/24 maxlen: 24
136.234.224.0/24 maxlen: 24
136.234.225.0/24 maxlen: 24
136.234.244.0/24 maxlen: 24
136.234.249.0/24 maxlen: 24
136.234.250.0/24 maxlen: 24
136.234.252.0/24 maxlen: 24
136.234.253.0/24 maxlen: 24
136.234.255.0/24 maxlen: 24
141.133.8.0/24 maxlen: 24
141.133.9.0/24 maxlen: 24
141.133.11.0/24 maxlen: 24
141.133.23.0/24 maxlen: 24
141.133.24.0/24 maxlen: 24
141.133.25.0/24 maxlen: 24
141.133.26.0/24 maxlen: 24
141.133.27.0/24 maxlen: 24
141.133.28.0/24 maxlen: 24
141.133.29.0/24 maxlen: 24
141.133.30.0/24 maxlen: 24
141.133.31.0/24 maxlen: 24
141.133.32.0/24 maxlen: 24
141.133.36.0/24 maxlen: 24
141.133.37.0/24 maxlen: 24
141.133.38.0/24 maxlen: 24
141.133.39.0/24 maxlen: 24
141.133.40.0/24 maxlen: 24
141.133.41.0/24 maxlen: 24
141.133.42.0/24 maxlen: 24
141.133.43.0/24 maxlen: 24
141.133.86.0/24 maxlen: 24
141.133.87.0/24 maxlen: 24
141.133.88.0/24 maxlen: 24
141.133.89.0/24 maxlen: 24
141.133.90.0/24 maxlen: 24
141.133.91.0/24 maxlen: 24
141.133.92.0/24 maxlen: 24
141.133.93.0/24 maxlen: 24
141.133.94.0/24 maxlen: 24
141.133.97.0/24 maxlen: 24
141.133.98.0/24 maxlen: 24
141.133.99.0/24 maxlen: 24
141.133.100.0/24 maxlen: 24
141.133.101.0/24 maxlen: 24
141.133.102.0/24 maxlen: 24
141.133.103.0/24 maxlen: 24
141.133.104.0/24 maxlen: 24
141.133.105.0/24 maxlen: 24
141.133.106.0/24 maxlen: 24
141.133.107.0/24 maxlen: 24
141.133.118.0/24 maxlen: 24
141.133.120.0/24 maxlen: 24
141.133.121.0/24 maxlen: 24
153.80.128.0/24 maxlen: 24
153.80.129.0/24 maxlen: 24
153.80.139.0/24 maxlen: 24
153.80.140.0/24 maxlen: 24
153.80.160.0/24 maxlen: 24
153.80.169.0/24 maxlen: 24
153.80.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:6f:72:57:57:1a:4f:59:3f:7f:c0:f6:30:1b:b1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Mar 23 20:42:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be076b44d8358b00d793bc118c02b0da85f3c609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b4:ef:04:d3:62:58:b8:9c:f4:7b:58:1d:fe:
e4:ed:e3:d8:a0:14:d6:6e:06:a4:7a:63:98:03:33:
b9:d7:fe:4a:c4:2d:85:ec:46:a9:21:62:57:1d:75:
44:2a:5b:6f:f2:b2:20:da:59:30:e2:e5:a0:73:28:
db:07:88:da:b1:fa:00:d4:2d:70:2f:b3:f3:bc:36:
36:0a:88:b2:28:1f:a5:09:9b:3a:b8:d8:f5:fc:7f:
05:a0:1f:c5:7c:c9:92:b9:53:1b:b6:27:1f:f9:7e:
b8:c5:78:f1:5c:8d:95:e2:86:5e:0c:27:17:3e:73:
7b:61:f4:ed:26:3e:0f:40:bf:1f:95:ae:6f:18:b0:
6f:02:d6:18:b6:5f:59:91:c2:4f:28:c5:16:31:19:
b4:e3:89:93:93:bb:7d:6c:6b:9d:b7:b4:c5:10:82:
f3:c1:39:57:34:75:40:79:cd:09:c5:1a:d1:91:70:
18:e0:7d:7c:fa:7b:37:6c:3f:74:2f:a4:81:48:93:
55:a5:37:60:cc:e3:cd:32:1c:6a:87:4b:cc:ad:ae:
1b:16:eb:4c:03:7a:05:19:b0:2f:cd:71:f1:1c:fb:
1d:59:7a:51:f5:3c:70:de:c7:36:20:52:60:f1:f0:
09:78:4c:aa:ea:cf:e7:78:8a:da:f0:7d:0b:d9:72:
49:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:07:6B:44:D8:35:8B:00:D7:93:BC:11:8C:02:B0:DA:85:F3:C6:09
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/vgdrRNg1iwDXk7wRjAKw2oXzxgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.234.127.0/24
136.234.130.0/24
136.234.133.0/24
136.234.138.0/23
136.234.158.0-136.234.162.255
136.234.221.0-136.234.225.255
136.234.244.0/24
136.234.249.0-136.234.250.255
136.234.252.0/23
136.234.255.0/24
141.133.8.0/23
141.133.11.0/24
141.133.23.0-141.133.32.255
141.133.36.0-141.133.43.255
141.133.86.0-141.133.94.255
141.133.97.0-141.133.107.255
141.133.118.0/24
141.133.120.0/23
153.80.128.0/23
153.80.139.0-153.80.140.255
153.80.160.0/24
153.80.169.0/24
153.80.171.0/24
Signature Algorithm: sha256WithRSAEncryption
79:1a:81:e5:2b:c8:62:42:db:6b:0c:d8:40:6d:76:cc:d6:e8:
6a:48:78:ac:4f:59:c4:b1:6c:e2:ee:33:ad:03:3a:f2:a7:71:
a4:6f:69:db:89:b6:ab:a2:1d:4e:15:c4:8e:f9:fe:5e:29:1d:
41:8d:37:3b:5d:85:ad:99:97:ed:78:34:19:52:cb:96:d3:02:
88:a1:5a:9f:32:b5:cf:0f:ad:d2:21:6d:d9:2a:e1:9e:a0:17:
4f:cb:f4:93:e4:ec:03:a6:2b:e3:e8:a5:d6:b9:0c:85:0d:07:
a7:18:cd:09:7e:91:7d:dd:b0:57:0d:04:73:3a:c5:7f:21:4e:
18:85:24:6c:10:ba:37:ee:81:8f:ce:1e:45:ca:55:ce:03:e9:
de:86:c3:c0:39:bf:73:e3:a7:d5:d4:de:4b:59:b0:1c:8f:01:
80:70:9d:01:38:48:7e:2e:d0:27:a0:c7:fa:5a:20:d2:5a:1b:
54:29:54:73:eb:84:a2:1e:9d:ce:ce:07:2d:b3:5e:b4:85:cb:
d7:bd:77:ae:ea:37:cf:08:26:56:72:d2:61:2d:68:18:58:06:
27:11:db:71:be:52:d0:66:eb:4f:23:8e:d4:b0:b5:b8:d7:4a:
9c:07:99:89:9a:45:df:5f:29:16:00:3c:fb:17:5f:6f:c5:a5:
79:87:4d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:01 2026 by rpki-client