Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/9Ofa4VmuCjaO-DF5AbTQmQU6YGY.roa
File: 9Ofa4VmuCjaO-DF5AbTQmQU6YGY.roa (raw, json)
Hash identifier: KQP2rMOpDatuw1qkt95mEYPMGXLnMr/DJh8hFVLv6+A=
Subject key identifier: F4:E7:DA:E1:59:AE:0A:36:8E:F8:31:79:01:B4:D0:99:05:3A:60:66
Certificate issuer: /CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Certificate serial: 019F236902D21DB815E1835141B807DEC67C
Authority key identifier: 4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/9Ofa4VmuCjaO-DF5AbTQmQU6YGY.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198748
IP address blocks: 136.148.136.0/24 maxlen: 24
136.148.137.0/24 maxlen: 24
136.148.138.0/24 maxlen: 24
136.148.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:02:d2:1d:b8:15:e1:83:51:41:b8:07:de:c6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4e7dae159ae0a368ef8317901b4d099053a6066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:64:1f:54:d1:f4:f2:24:d7:61:2e:0b:5a:
fa:b9:aa:4a:a2:78:42:a5:4d:55:0b:23:59:2d:d8:
35:0f:12:e9:b4:53:dc:b9:6f:fd:78:37:61:9a:c6:
5c:d1:5a:91:52:77:55:93:7c:05:d7:4e:2d:59:ed:
4f:e3:51:91:62:e7:9e:1d:bc:53:d1:82:1e:77:e3:
91:9b:b6:c7:9e:61:50:bf:a0:ec:d4:30:80:76:3d:
74:03:a3:24:51:17:b8:60:bb:8d:8f:06:72:da:d4:
9e:d9:5e:e7:a1:a2:43:e4:43:47:01:d9:1e:f9:ce:
a3:93:33:58:de:ca:09:f4:9f:f5:15:52:36:2c:4c:
25:37:bd:d7:db:a7:dc:15:27:44:36:62:44:93:d7:
e1:c8:4f:ff:bb:1b:fc:d3:a9:dc:b3:d0:ee:a2:a4:
fc:89:15:b9:81:4c:d6:47:8e:73:89:0e:fa:2f:73:
7b:60:53:3d:97:8e:05:3e:4d:d7:a7:47:e3:26:88:
71:69:66:fb:6b:7b:2e:41:4a:1a:43:b3:6f:97:2c:
93:20:6b:22:50:2a:0b:1d:a6:c4:93:93:4a:15:b8:
60:9b:c0:5b:83:bc:1b:1e:5b:92:b7:46:0b:8c:48:
da:ef:c1:bd:61:e4:0b:03:6a:dd:5f:90:e8:c4:f9:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E7:DA:E1:59:AE:0A:36:8E:F8:31:79:01:B4:D0:99:05:3A:60:66
X509v3 Authority Key Identifier:
keyid:4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/9Ofa4VmuCjaO-DF5AbTQmQU6YGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.136.0/22
Signature Algorithm: sha256WithRSAEncryption
92:b4:a4:02:6e:de:7c:de:99:ee:02:15:54:c4:1f:bb:94:32:
bb:9d:a8:99:17:c2:6d:a2:10:41:89:49:52:02:b5:48:10:a7:
47:02:24:c8:86:b5:10:c9:62:fd:64:3e:e4:a6:1f:fb:d7:be:
2d:55:23:76:ff:d8:e6:77:a1:8e:c3:7e:0f:8a:c0:e4:57:ab:
1a:e1:c8:52:5c:b6:9a:a8:f6:a2:ae:ce:2d:5d:0f:05:59:0b:
f0:59:02:6f:bc:4a:5d:cf:5e:f0:dd:88:8d:59:91:2e:5e:6d:
a9:a0:cf:c7:cf:3f:cb:ed:b9:ff:77:5a:01:eb:78:d3:f9:1b:
d0:ba:80:1c:55:3e:7c:2b:bd:21:36:6a:c5:91:a3:ab:cc:e0:
d5:a5:bc:05:4f:d2:8a:d7:29:30:cc:b2:c9:38:c7:c9:b7:51:
08:88:1f:b0:4f:a3:18:08:8c:d0:03:6d:14:2a:39:ee:3c:89:
4c:84:66:a4:41:b8:8e:96:3f:13:4c:17:8f:9b:bc:f1:b5:58:
f4:ae:ea:0b:99:29:d1:c5:a9:2d:2b:c9:1b:f9:ed:93:69:94:
a3:4e:18:5a:42:91:25:1b:6c:de:98:85:88:5f:1d:ca:9c:ee:
0c:89:08:b3:74:c5:d5:e3:e3:d2:ef:ec:e3:cd:a8:5d:7f:cd:
a9:0f:d7:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQLSHbgV4YNRQbgH3sZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDJhNzQ2MzRmODYxMTdkYzEzZDFhOTI2MDQ3MGRlZWU2
Zjc2YjUwHhcNMjYwNzAyMTUxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGU3ZGFlMTU5YWUwYTM2OGVmODMxNzkwMWI0ZDA5OTA1M2E2MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXtkH1TR9PIk12EuC1r6uapKonhC
pU1VCyNZLdg1DxLptFPcuW/9eDdhmsZc0VqRUndVk3wF104tWe1P41GRYueeHbxT
0YIed+ORm7bHnmFQv6Ds1DCAdj10A6MkURe4YLuNjwZy2tSe2V7noaJD5ENHAdke
+c6jkzNY3soJ9J/1FVI2LEwlN73X26fcFSdENmJEk9fhyE//uxv806ncs9DuoqT8
iRW5gUzWR45ziQ76L3N7YFM9l44FPk3Xp0fjJohxaWb7a3suQUoaQ7NvlyyTIGsi
UCoLHabEk5NKFbhgm8Bbg7wbHluSt0YLjEja78G9YeQLA2rdX5DoxPlWdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPTn2uFZrgo2jvgxeQG00JkFOmBmMB8GA1UdIwQY
MBaAFErSp0Y0+GEX3BPRqSYEcN7ub3a1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3RLblJqVDRZUmZjRTlHcEpnUnczdTV2ZHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2FhNDgtNmFhMy00NjFiLWI0OTAt
YzBmNzk4MzM1MjdmLzEvOU9mYTRWbXVDamFPLURGNUFiVFFtUVU2WUdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wY2FhNDgtNmFhMy00NjFiLWI0OTAtYzBmNzk4MzM1Mjdm
LzEvU3RLblJqVDRZUmZjRTlHcEpnUnczdTV2ZHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiJSIMA0G
CSqGSIb3DQEBCwUAA4IBAQCStKQCbt583pnuAhVUxB+7lDK7naiZF8JtohBBiUlS
ArVIEKdHAiTIhrUQyWL9ZD7kph/7174tVSN2/9jmd6GOw34PisDkV6sa4chSXLaa
qPairs4tXQ8FWQvwWQJvvEpdz17w3YiNWZEuXm2poM/Hzz/L7bn/d1oB63jT+RvQ
uoAcVT58K70hNmrFkaOrzODVpbwFT9KK1ykwzLLJOMfJt1EIiB+wT6MYCIzQA20U
KjnuPIlMhGakQbiOlj8TTBePm7zxtVj0ruoLmSnRxaktK8kb+e2TaZSjThhaQpEl
G2zemIWIXx3KnO4MiQizdMXV4+PS7+zjzahdf82pD9eM
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:05:55 2026 by rpki-client