Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/65B1GOVkxXjJrshc0mICtXdttks.roa
File: 65B1GOVkxXjJrshc0mICtXdttks.roa (raw, json)
Hash identifier: v/Erj5878S/I6twSq1r+QfsnI9wSz6cQHP4aCN2xgSQ=
Subject key identifier: EB:90:75:18:E5:64:C5:78:C9:AE:C8:5C:D2:62:02:B5:77:6D:B6:4B
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01A1BB5F9FAFD8F12287F8A1199B39B73CCB
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/65B1GOVkxXjJrshc0mICtXdttks.roa
Signing time: Sun 08 Nov 2026 13:36:08 +0000
ROA not before: Sun 08 Nov 2026 13:36:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48309
IP address blocks: 188.136.150.0/24 maxlen: 24
188.136.152.0/24 maxlen: 24
188.136.153.0/24 maxlen: 24
188.136.154.0/24 maxlen: 24
188.136.155.0/24 maxlen: 24
188.136.156.0/24 maxlen: 24
188.136.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:5f:9f:af:d8:f1:22:87:f8:a1:19:9b:39:b7:3c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Nov 8 13:36:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb907518e564c578c9aec85cd26202b5776db64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:af:b2:d4:92:56:8a:1b:bf:49:2d:9d:bf:
b7:f5:d5:12:0b:f5:2f:34:d5:11:40:ff:07:7a:07:
39:5d:7f:a1:1e:69:64:2d:63:0f:19:59:ba:3d:5e:
bf:7f:21:ef:5b:9e:91:6c:97:04:ae:3e:08:a0:94:
d5:bc:e1:86:5c:cc:26:b5:71:33:29:60:78:60:54:
78:48:2b:33:95:93:be:51:ad:32:b9:16:b2:a4:2e:
ee:40:18:01:a3:75:61:71:af:e1:96:1b:95:6e:b0:
dc:62:eb:78:27:1f:67:39:1b:e5:1d:64:36:53:8c:
5e:09:5f:3a:b2:df:8b:d1:fa:6d:20:b5:b5:ab:34:
13:c6:5e:9d:18:d7:31:4d:21:f7:fd:83:81:92:f3:
76:54:41:c9:8f:5e:3d:8e:5d:9f:fc:32:9d:89:a4:
22:43:15:29:e7:66:42:09:63:60:b5:dc:98:7f:9c:
2d:c8:dd:6f:04:98:f2:e9:07:03:dd:dd:6b:83:15:
f8:c4:9c:e0:44:56:53:b3:04:92:18:22:de:93:18:
a1:cf:9f:f9:de:c2:2c:79:96:9d:f7:dd:53:93:20:
95:8f:16:58:93:a1:04:6a:21:a2:5b:a2:6a:34:8f:
3c:e9:6a:74:4a:29:63:87:59:4d:99:9a:a3:5e:7e:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:75:18:E5:64:C5:78:C9:AE:C8:5C:D2:62:02:B5:77:6D:B6:4B
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/65B1GOVkxXjJrshc0mICtXdttks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.136.150.0/24
188.136.152.0-188.136.156.255
188.136.196.0/24
Signature Algorithm: sha256WithRSAEncryption
33:cb:b1:01:43:f9:06:a0:32:07:cf:75:e0:46:b3:2a:01:78:
05:2a:9a:09:cc:48:e7:e8:43:ff:7f:95:52:8d:9f:88:bf:4d:
f7:72:1c:8d:1d:83:6f:4e:ae:34:fc:13:b5:28:34:ba:1e:c3:
d2:1f:5f:c2:db:b8:cb:ce:66:49:77:e2:8c:92:33:14:a0:e3:
1e:84:79:29:91:54:c4:ff:9a:88:65:87:a8:18:ad:ba:1b:0d:
15:f2:bd:fd:9f:6b:b6:49:82:4f:51:45:79:87:89:41:87:b1:
2e:fb:03:01:7b:8b:48:74:a7:dd:55:6e:e7:19:31:a4:55:0b:
88:40:ff:6c:93:aa:17:81:80:c4:2b:71:63:66:c6:22:8b:b1:
4e:fd:87:66:42:09:0b:4d:a5:bc:6c:12:a2:d6:d8:ef:29:09:
7f:ad:eb:04:de:1e:c9:00:f4:d7:a5:11:9c:c0:44:c3:90:8a:
77:fc:8f:98:a6:1e:76:13:65:e3:fd:24:c0:0b:cb:1e:34:48:
12:9f:d7:8f:42:75:3e:f6:48:51:bc:58:5a:18:fb:66:87:69:
4f:b1:76:1c:1f:0f:6d:63:46:f1:de:da:e6:cb:ba:19:1e:cb:
d7:b2:c9:39:e0:af:43:f9:4d:2d:6e:8e:45:55:d3:b6:9c:45:
6c:e6:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:29:34 2026 by rpki-client