Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/DIvDnR9b1W0JHtaRYyq3vQL7DBA.roa
File: DIvDnR9b1W0JHtaRYyq3vQL7DBA.roa (raw, json)
Hash identifier: Lc2OQY+V9PM5s6oLkz3ZLJaBrP5SrTW/a9xCkQqF95Q=
Subject key identifier: 0C:8B:C3:9D:1F:5B:D5:6D:09:1E:D6:91:63:2A:B7:BD:02:FB:0C:10
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A067C776DFDE62CC8CA23D24BDAA4E9D20
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/DIvDnR9b1W0JHtaRYyq3vQL7DBA.roa
Signing time: Thu 03 Sep 2026 14:58:40 +0000
ROA not before: Thu 03 Sep 2026 14:58:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 135.106.111.0/24 maxlen: 24
135.106.112.0/24 maxlen: 24
135.106.114.0/24 maxlen: 24
135.106.115.0/24 maxlen: 24
135.106.116.0/24 maxlen: 24
135.106.117.0/24 maxlen: 24
135.106.118.0/24 maxlen: 24
135.106.119.0/24 maxlen: 24
135.106.120.0/24 maxlen: 24
135.106.121.0/24 maxlen: 24
135.106.122.0/24 maxlen: 24
135.106.123.0/24 maxlen: 24
135.106.124.0/24 maxlen: 24
135.106.125.0/24 maxlen: 24
135.106.127.0/24 maxlen: 24
136.234.131.0/24 maxlen: 24
136.234.134.0/24 maxlen: 24
136.234.175.0/24 maxlen: 24
136.234.181.0/24 maxlen: 24
136.234.182.0/24 maxlen: 24
136.234.183.0/24 maxlen: 24
136.234.186.0/24 maxlen: 24
136.234.187.0/24 maxlen: 24
136.234.188.0/24 maxlen: 24
136.234.189.0/24 maxlen: 24
136.234.190.0/24 maxlen: 24
136.234.191.0/24 maxlen: 24
136.234.192.0/24 maxlen: 24
136.234.193.0/24 maxlen: 24
136.234.194.0/24 maxlen: 24
136.234.195.0/24 maxlen: 24
136.234.196.0/24 maxlen: 24
136.234.197.0/24 maxlen: 24
136.234.200.0/24 maxlen: 24
136.234.201.0/24 maxlen: 24
136.234.208.0/24 maxlen: 24
141.133.20.0/24 maxlen: 24
141.133.110.0/24 maxlen: 24
153.80.131.0/24 maxlen: 24
153.80.132.0/24 maxlen: 24
153.80.133.0/24 maxlen: 24
153.80.134.0/24 maxlen: 24
153.80.135.0/24 maxlen: 24
153.80.141.0/24 maxlen: 24
153.80.149.0/24 maxlen: 24
153.80.159.0/24 maxlen: 24
153.80.164.0/24 maxlen: 24
153.80.165.0/24 maxlen: 24
153.80.166.0/24 maxlen: 24
153.80.167.0/24 maxlen: 24
153.80.168.0/24 maxlen: 24
194.69.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:c7:76:df:de:62:cc:8c:a2:3d:24:bd:aa:4e:9d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Sep 3 14:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c8bc39d1f5bd56d091ed691632ab7bd02fb0c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:33:7c:95:c5:f6:63:c7:c9:8c:14:fa:d4:cb:
79:69:ad:0a:80:cd:20:12:10:22:e3:fc:a7:56:65:
5d:13:1d:5e:3d:10:9e:ce:ac:84:2d:5e:c8:a3:d5:
bf:dc:c2:68:09:10:82:29:95:49:af:fb:ed:a2:31:
e9:d6:54:4b:67:83:99:f9:e6:97:7d:3a:a5:0e:73:
4a:4f:7b:29:5e:17:55:cb:c7:f1:1d:e5:10:23:8a:
25:b9:11:22:23:72:14:08:1e:65:8c:10:a9:12:84:
c7:3e:da:cc:e0:1a:d8:23:67:6f:e0:d3:97:85:52:
b6:6e:4b:2b:22:6a:e5:d9:38:da:16:24:38:e9:84:
e3:71:bb:91:d9:c8:23:ae:18:31:95:f9:b6:54:7c:
06:4e:a6:cc:72:d0:34:14:e5:03:6a:8a:52:99:df:
06:c7:5f:4e:9c:97:8f:7f:79:cc:e4:23:78:b4:fd:
e5:af:08:ee:fa:16:01:2b:f6:32:4c:69:b9:53:f4:
4c:4a:e9:0d:4b:ee:bb:48:d3:51:3a:35:d1:26:e4:
35:1e:3c:e7:c7:84:49:b9:71:d3:69:3b:17:e0:68:
4c:2f:73:a0:85:e7:e5:bf:51:7e:3f:48:49:38:ed:
e9:ea:e7:7a:35:89:cf:75:9c:e9:cd:81:f5:7d:f7:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8B:C3:9D:1F:5B:D5:6D:09:1E:D6:91:63:2A:B7:BD:02:FB:0C:10
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/DIvDnR9b1W0JHtaRYyq3vQL7DBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.111.0-135.106.112.255
135.106.114.0-135.106.125.255
135.106.127.0/24
136.234.131.0/24
136.234.134.0/24
136.234.175.0/24
136.234.181.0-136.234.183.255
136.234.186.0-136.234.197.255
136.234.200.0/23
136.234.208.0/24
141.133.20.0/24
141.133.110.0/24
153.80.131.0-153.80.135.255
153.80.141.0/24
153.80.149.0/24
153.80.159.0/24
153.80.164.0-153.80.168.255
194.69.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ea:a2:dd:ce:60:b4:fa:63:41:30:a4:72:96:cd:49:ae:64:
cb:ed:1d:4a:17:d1:79:b4:e8:ee:97:f8:d8:43:15:c6:5c:82:
4c:d5:d9:56:45:6d:50:9d:fb:42:57:4a:8a:a0:3c:b5:56:6e:
f5:14:bd:a4:2d:41:64:90:d4:d3:43:b0:79:c6:b6:4c:f9:6c:
45:50:20:44:0a:de:69:a6:d8:1c:8c:de:57:3e:e3:a6:ee:f7:
a0:91:19:02:e3:1d:a3:ee:a7:34:94:b3:53:26:bc:ab:49:71:
d3:ba:73:b8:a4:d4:bf:8f:fb:c1:b2:95:ea:7f:21:2a:f5:0f:
ee:9a:3f:af:1a:a6:89:98:37:23:9c:dc:96:99:26:f5:11:76:
15:cf:d3:ed:dc:e7:2d:19:90:2d:13:4c:77:be:cd:5f:6e:99:
c7:7b:c7:d2:46:1d:74:66:5d:89:bd:0e:82:08:70:17:31:9c:
9e:47:f4:d2:33:c8:5b:fc:86:50:c1:87:c3:0f:7e:49:ba:99:
8d:3b:00:33:04:3b:e9:22:1e:87:80:db:ad:86:50:0a:b0:f3:
0f:ed:bb:f7:8a:48:3e:5a:95:8a:0e:62:43:e1:2e:83:d9:cd:
d0:84:e1:70:a8:18:5f:93:12:03:10:75:f1:94:6c:cf:3d:fe:
9b:48:1c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:54:58 2026 by rpki-client