Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/dQmrc2nZuuJy6Aymy-Tf7oYZxRk.roa
File: dQmrc2nZuuJy6Aymy-Tf7oYZxRk.roa (raw, json)
Hash identifier: LO9nmR28aOPkgvny3ve66xJHuFE8oY1t9GbJIa1BiJk=
Subject key identifier: 75:09:AB:73:69:D9:BA:E2:72:E8:0C:A6:CB:E4:DF:EE:86:19:C5:19
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019FF02DA63FA370D9E2CB97A44DECA3C8C8
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/dQmrc2nZuuJy6Aymy-Tf7oYZxRk.roa
Signing time: Tue 11 Aug 2026 09:35:51 +0000
ROA not before: Tue 11 Aug 2026 09:35:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 141.133.3.0/24 maxlen: 24
141.133.4.0/24 maxlen: 24
141.133.5.0/24 maxlen: 24
141.133.6.0/24 maxlen: 24
141.133.7.0/24 maxlen: 24
141.133.10.0/24 maxlen: 24
141.133.44.0/24 maxlen: 24
141.133.45.0/24 maxlen: 24
141.133.46.0/24 maxlen: 24
141.133.47.0/24 maxlen: 24
141.133.48.0/24 maxlen: 24
141.133.49.0/24 maxlen: 24
141.133.50.0/24 maxlen: 24
141.133.51.0/24 maxlen: 24
141.133.52.0/24 maxlen: 24
141.133.53.0/24 maxlen: 24
141.133.77.0/24 maxlen: 24
141.133.78.0/24 maxlen: 24
141.133.79.0/24 maxlen: 24
141.133.80.0/24 maxlen: 24
141.133.81.0/24 maxlen: 24
141.133.82.0/24 maxlen: 24
141.133.83.0/24 maxlen: 24
141.133.84.0/24 maxlen: 24
141.133.85.0/24 maxlen: 24
141.133.122.0/24 maxlen: 24
141.133.123.0/24 maxlen: 24
141.133.124.0/24 maxlen: 24
141.133.125.0/24 maxlen: 24
141.133.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:2d:a6:3f:a3:70:d9:e2:cb:97:a4:4d:ec:a3:c8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Aug 11 09:35:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7509ab7369d9bae272e80ca6cbe4dfee8619c519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:87:a4:d3:6d:19:5d:1d:a6:1f:04:0b:94:
8a:06:a3:5c:43:0a:92:33:24:87:7a:75:ea:3a:b1:
dc:0e:0b:54:f9:32:43:a5:dc:a3:20:ee:fc:0d:34:
ee:93:de:fd:a8:5c:01:2f:23:e0:84:6f:e6:fb:fe:
c6:ab:a2:2d:5f:30:ad:9b:04:71:52:9c:8f:c2:c1:
8c:b8:02:8f:31:d6:30:5c:b1:6f:a5:01:30:2c:f2:
e9:00:74:ac:21:19:74:0e:57:1d:1e:a9:62:69:b0:
5f:2b:84:a4:c9:e1:c6:ab:53:e9:5b:7b:28:14:f2:
67:35:94:43:a0:0b:a1:9d:d2:3a:eb:33:e8:55:b7:
aa:47:13:90:10:8c:d0:b3:8d:27:73:a0:73:a6:1c:
7b:af:97:23:75:75:44:77:88:c7:40:28:40:10:8e:
27:b5:c5:33:96:bd:61:b0:0b:33:65:33:7a:d6:f3:
d3:2e:8b:62:0d:a6:07:d5:7b:99:6e:87:e9:df:6e:
99:03:91:14:fa:00:4f:4b:fc:90:5b:6b:3b:b3:cd:
aa:11:51:76:2c:35:b3:ed:bf:06:72:ac:1e:cc:e3:
2e:54:2b:f1:8d:f7:d4:ca:e4:c9:7c:0e:b4:00:69:
f4:86:57:45:1d:95:88:d8:2d:c6:b8:e2:85:65:e3:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:09:AB:73:69:D9:BA:E2:72:E8:0C:A6:CB:E4:DF:EE:86:19:C5:19
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/dQmrc2nZuuJy6Aymy-Tf7oYZxRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.133.3.0-141.133.7.255
141.133.10.0/24
141.133.44.0-141.133.53.255
141.133.77.0-141.133.85.255
141.133.122.0-141.133.126.255
Signature Algorithm: sha256WithRSAEncryption
28:34:13:08:66:84:6e:4d:d8:0d:47:88:6b:47:e0:7d:0e:32:
47:c7:7c:06:81:d6:0c:d3:96:e4:86:eb:5f:6f:b8:6e:3e:7c:
96:4c:e2:46:7e:e9:1c:2c:04:db:22:31:bb:0e:4d:ac:80:b8:
9d:fe:60:94:81:4a:6d:e5:84:46:52:00:01:fe:d0:0a:72:6f:
3b:a2:dc:a0:7f:c6:99:69:c6:4d:d4:91:60:86:84:99:55:85:
3a:6c:66:81:45:29:84:dc:d2:cc:27:e2:cb:6f:b6:2f:84:c4:
09:57:bd:f1:14:f9:d4:6d:8a:6f:d1:47:8a:13:6a:a7:96:89:
be:4f:86:f0:81:5b:1d:43:7d:68:aa:fe:d5:83:c5:9f:bd:36:
a6:e2:a9:b3:6e:af:bc:2a:17:5f:f0:42:39:71:da:27:75:6c:
31:42:8e:2b:fd:e5:26:a4:8c:a0:50:c0:7a:ad:36:34:5b:e7:
0c:f7:1c:2e:e9:79:d9:31:f7:10:93:a2:d2:ae:b6:b3:9a:96:
76:fb:9b:61:99:78:ab:4e:e9:e4:81:a6:96:27:34:09:37:ae:
5e:92:fe:ca:2f:4f:ea:d2:3c:59:2d:44:5b:36:bd:87:07:9b:
07:57:4d:99:44:48:40:7c:ac:06:bc:8b:84:1b:d9:6c:5b:79:
be:c7:23:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 14:09:46 2026 by rpki-client