Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/EzH_wVwMaqqgJDbaZLkrvAztln8.roa
File: EzH_wVwMaqqgJDbaZLkrvAztln8.roa (raw, json)
Hash identifier: XNpmgt+EASl33IbkGcKeqO7jlNfCnl3ZaOjIrFFSYcY=
Subject key identifier: 13:31:FF:C1:5C:0C:6A:AA:A0:24:36:DA:64:B9:2B:BC:0C:ED:96:7F
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019E5B0DD914ECA3A935554A5D170EE7DA0A
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/EzH_wVwMaqqgJDbaZLkrvAztln8.roa
Signing time: Sun 24 May 2026 17:34:54 +0000
ROA not before: Sun 24 May 2026 17:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 135.106.1.0/24 maxlen: 24
135.106.27.0/24 maxlen: 24
135.106.45.0/24 maxlen: 24
135.106.64.0/24 maxlen: 24
135.106.65.0/24 maxlen: 24
135.106.83.0/24 maxlen: 24
135.106.84.0/24 maxlen: 24
136.234.149.0/24 maxlen: 24
136.234.220.0/24 maxlen: 24
136.234.233.0/24 maxlen: 24
138.16.14.0/24 maxlen: 24
141.133.12.0/24 maxlen: 24
141.133.13.0/24 maxlen: 24
141.133.14.0/24 maxlen: 24
141.133.15.0/24 maxlen: 24
141.133.16.0/24 maxlen: 24
141.133.113.0/24 maxlen: 24
141.133.114.0/24 maxlen: 24
141.133.115.0/24 maxlen: 24
141.133.116.0/24 maxlen: 24
141.133.117.0/24 maxlen: 24
153.80.1.0/24 maxlen: 24
153.80.10.0/24 maxlen: 24
153.80.32.0/24 maxlen: 24
153.80.33.0/24 maxlen: 24
153.80.45.0/24 maxlen: 24
153.80.46.0/24 maxlen: 24
153.80.95.0/24 maxlen: 24
153.80.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5b:0d:d9:14:ec:a3:a9:35:55:4a:5d:17:0e:e7:da:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: May 24 17:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1331ffc15c0c6aaaa02436da64b92bbc0ced967f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:a1:67:5b:d6:6d:1a:fd:1a:fa:f9:cb:a9:
2a:73:20:b1:c0:41:dd:53:03:48:1a:20:7c:2e:0b:
49:35:a4:e8:c8:d3:c7:99:ad:9c:2d:5a:61:59:9a:
42:bf:54:ae:26:51:64:54:54:77:d1:c9:86:22:d6:
21:e3:4c:a5:fa:50:4b:65:45:86:0e:58:97:a7:94:
92:80:1d:a0:c6:98:f0:1e:33:16:26:ca:de:bd:3f:
f4:46:23:48:26:37:ce:5b:47:6e:77:4a:dc:a4:e4:
b0:14:08:6d:96:01:5f:f7:93:ff:6f:df:e6:8f:66:
86:d5:37:5f:03:86:20:23:7d:9e:68:d0:0c:93:46:
fd:18:cb:4a:22:5a:4c:6a:f0:eb:06:1e:78:3b:5f:
62:07:12:74:e5:af:ad:93:5f:77:64:58:1a:cf:9c:
4d:97:a7:07:8c:06:9a:29:e2:b4:42:f5:26:37:08:
8b:a5:5a:26:62:c4:2d:03:58:b5:d8:28:d4:a6:18:
aa:79:ee:2b:aa:f8:8c:12:23:b5:fc:e6:8e:55:28:
9e:fe:cc:fe:e0:2e:34:a4:ad:78:f6:98:27:5b:d8:
0d:6d:94:8a:30:1d:42:eb:38:b3:f7:ea:c0:48:80:
06:15:11:c0:25:2e:e5:14:ec:c6:60:62:bc:8a:7e:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:31:FF:C1:5C:0C:6A:AA:A0:24:36:DA:64:B9:2B:BC:0C:ED:96:7F
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/EzH_wVwMaqqgJDbaZLkrvAztln8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.1.0/24
135.106.27.0/24
135.106.45.0/24
135.106.64.0/23
135.106.83.0-135.106.84.255
136.234.149.0/24
136.234.220.0/24
136.234.233.0/24
138.16.14.0/24
141.133.12.0-141.133.16.255
141.133.113.0-141.133.117.255
153.80.1.0/24
153.80.10.0/24
153.80.32.0/23
153.80.45.0-153.80.46.255
153.80.95.0-153.80.96.255
Signature Algorithm: sha256WithRSAEncryption
78:87:e2:2d:0b:03:3d:81:a1:b4:16:29:90:05:c2:53:56:ce:
2e:a6:36:df:06:e4:04:5a:9f:10:e7:27:44:18:3e:0e:60:46:
80:89:e3:65:0a:61:c5:02:f4:30:9b:33:22:97:ee:31:dc:01:
88:4b:1f:7e:a5:61:e8:71:f6:ce:ab:9e:20:7a:80:87:6d:c7:
3a:6e:22:aa:a1:ed:aa:ff:97:63:9f:3e:fd:4c:98:61:f8:f7:
0e:a9:5e:9b:48:f6:61:8e:db:88:b3:bb:a5:d6:fa:f8:00:5f:
71:5f:97:88:de:6a:86:5c:ba:ce:18:12:23:53:7a:fb:d9:3f:
8e:fa:4d:b9:a9:f8:7b:2e:8c:4c:76:74:a0:a7:a9:e8:52:5c:
9e:b7:89:27:7c:9d:cd:72:d7:91:01:76:5f:1d:e0:a9:ff:f8:
bb:80:7e:ec:97:2d:8f:34:c5:f4:8d:20:eb:78:c0:e1:7b:02:
8b:ca:71:7c:2a:ce:41:36:64:28:10:c5:d2:48:27:5d:89:1b:
94:cd:dc:35:22:f5:7c:07:ce:af:84:eb:a9:38:77:7b:cf:66:
f5:ce:0e:57:5c:a4:b0:fc:8d:35:6c:79:b9:0a:9b:ea:5e:cf:
e8:19:de:42:d8:b8:5b:24:ba:98:15:7a:fb:78:20:b5:57:fb:
5e:9c:4f:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAZ5bDdkU7KOpNVVKXRcO59oKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3
YTkxODQwHhcNMjYwNTI0MTczNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzMxZmZjMTVjMGM2YWFhYTAyNDM2ZGE2NGI5MmJiYzBjZWQ5NjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxahZ1vWbRr9Gvr5y6kqcyCxwEHd
UwNIGiB8LgtJNaToyNPHma2cLVphWZpCv1SuJlFkVFR30cmGItYh40yl+lBLZUWG
DliXp5SSgB2gxpjwHjMWJsrevT/0RiNIJjfOW0dud0rcpOSwFAhtlgFf95P/b9/m
j2aG1TdfA4YgI32eaNAMk0b9GMtKIlpMavDrBh54O19iBxJ05a+tk193ZFgaz5xN
l6cHjAaaKeK0QvUmNwiLpVomYsQtA1i12CjUphiqee4rqviMEiO1/OaOVSie/sz+
4C40pK149pgnW9gNbZSKMB1C6ziz9+rASIAGFRHAJS7lFOzGYGK8in6Y1QIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFBMx/8FcDGqqoCQ22mS5K7wM7ZZ/MB8GA1UdIwQY
MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt
MzZiYWM4ZDkxZTJlLzEvRXpIX3dWd01hcXFnSkRiYVpMa3J2QXp0bG44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl
LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBACH
agEDBACHahsDBACHai0DBAGHakAwDAMEAIdqUwMEAIdqVAMEAIjqlQMEAIjq3AME
AIjq6QMEAIoQDjAMAwQCjYUMAwQAjYUQMAwDBACNhXEDBAGNhXQDBACZUAEDBACZ
UAoDBAGZUCAwDAMEAJlQLQMEAJlQLjAMAwQAmVBfAwQAmVBgMA0GCSqGSIb3DQEB
CwUAA4IBAQB4h+ItCwM9gaG0FimQBcJTVs4upjbfBuQEWp8Q5ydEGD4OYEaAieNl
CmHFAvQwmzMil+4x3AGISx9+pWHocfbOq54geoCHbcc6biKqoe2q/5djnz79TJhh
+PcOqV6bSPZhjtuIs7ul1vr4AF9xX5eI3mqGXLrOGBIjU3r72T+O+k25qfh7LoxM
dnSgp6noUlyet4knfJ3NcteRAXZfHeCp//i7gH7sly2PNMX0jSDreMDhewKLynF8
Ks5BNmQoEMXSSCddiRuUzdw1IvV8B86vhOupOHd7z2b1zg5XXKSw/I01bHm5Cpvq
Xs/oGd5C2LhbJLqYFXr7eCC1V/tenE9V
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:42 2026 by rpki-client