Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/iSk8AoSjmjvGAx0fRKLMxzUCEVU.roa
File: iSk8AoSjmjvGAx0fRKLMxzUCEVU.roa (raw, json)
Hash identifier: F3wnoulP2apb+g9H3J6ypZzO+s5WHg2Wr8yfKyYumyI=
Subject key identifier: 89:29:3C:02:84:A3:9A:3B:C6:03:1D:1F:44:A2:CC:C7:35:02:11:55
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019E6A7BEEF05BA9086131FC0F85453154A7
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/iSk8AoSjmjvGAx0fRKLMxzUCEVU.roa
Signing time: Wed 27 May 2026 17:29:27 +0000
ROA not before: Wed 27 May 2026 17:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 135.106.30.0/24 maxlen: 24
135.106.31.0/24 maxlen: 24
135.106.35.0/24 maxlen: 24
135.106.37.0/24 maxlen: 24
135.106.38.0/24 maxlen: 24
135.106.40.0/24 maxlen: 24
135.106.46.0/24 maxlen: 24
135.106.49.0/24 maxlen: 24
135.106.50.0/24 maxlen: 24
135.106.54.0/24 maxlen: 24
135.106.57.0/24 maxlen: 24
135.106.61.0/24 maxlen: 24
135.106.76.0/24 maxlen: 24
135.106.79.0/24 maxlen: 24
135.106.80.0/24 maxlen: 24
135.106.101.0/24 maxlen: 24
135.106.103.0/24 maxlen: 24
135.106.113.0/24 maxlen: 24
136.234.127.0/24 maxlen: 24
136.234.129.0/24 maxlen: 24
136.234.130.0/24 maxlen: 24
136.234.133.0/24 maxlen: 24
136.234.138.0/24 maxlen: 24
136.234.139.0/24 maxlen: 24
136.234.144.0/24 maxlen: 24
136.234.147.0/24 maxlen: 24
136.234.148.0/24 maxlen: 24
136.234.158.0/24 maxlen: 24
136.234.159.0/24 maxlen: 24
136.234.160.0/24 maxlen: 24
136.234.161.0/24 maxlen: 24
136.234.162.0/24 maxlen: 24
136.234.178.0/24 maxlen: 24
136.234.221.0/24 maxlen: 24
136.234.222.0/24 maxlen: 24
136.234.223.0/24 maxlen: 24
136.234.224.0/24 maxlen: 24
136.234.225.0/24 maxlen: 24
136.234.234.0/24 maxlen: 24
136.234.235.0/24 maxlen: 24
136.234.238.0/24 maxlen: 24
136.234.244.0/24 maxlen: 24
136.234.249.0/24 maxlen: 24
136.234.250.0/24 maxlen: 24
136.234.252.0/24 maxlen: 24
136.234.253.0/24 maxlen: 24
136.234.255.0/24 maxlen: 24
138.16.17.0/24 maxlen: 24
138.16.24.0/24 maxlen: 24
138.16.25.0/24 maxlen: 24
138.16.38.0/24 maxlen: 24
138.16.39.0/24 maxlen: 24
138.16.58.0/24 maxlen: 24
138.16.59.0/24 maxlen: 24
138.16.60.0/24 maxlen: 24
138.16.61.0/24 maxlen: 24
138.16.69.0/24 maxlen: 24
138.16.70.0/24 maxlen: 24
138.16.71.0/24 maxlen: 24
138.16.72.0/24 maxlen: 24
138.16.90.0/24 maxlen: 24
138.16.91.0/24 maxlen: 24
138.16.96.0/24 maxlen: 24
138.16.104.0/24 maxlen: 24
138.16.105.0/24 maxlen: 24
138.16.111.0/24 maxlen: 24
138.16.113.0/24 maxlen: 24
138.16.116.0/24 maxlen: 24
138.16.124.0/24 maxlen: 24
141.133.8.0/24 maxlen: 24
141.133.9.0/24 maxlen: 24
141.133.11.0/24 maxlen: 24
141.133.23.0/24 maxlen: 24
141.133.24.0/24 maxlen: 24
141.133.25.0/24 maxlen: 24
141.133.26.0/24 maxlen: 24
141.133.27.0/24 maxlen: 24
141.133.28.0/24 maxlen: 24
141.133.29.0/24 maxlen: 24
141.133.30.0/24 maxlen: 24
141.133.31.0/24 maxlen: 24
141.133.32.0/24 maxlen: 24
141.133.36.0/24 maxlen: 24
141.133.37.0/24 maxlen: 24
141.133.38.0/24 maxlen: 24
141.133.39.0/24 maxlen: 24
141.133.40.0/24 maxlen: 24
141.133.41.0/24 maxlen: 24
141.133.42.0/24 maxlen: 24
141.133.43.0/24 maxlen: 24
141.133.86.0/24 maxlen: 24
141.133.87.0/24 maxlen: 24
141.133.88.0/24 maxlen: 24
141.133.89.0/24 maxlen: 24
141.133.90.0/24 maxlen: 24
141.133.91.0/24 maxlen: 24
141.133.92.0/24 maxlen: 24
141.133.93.0/24 maxlen: 24
141.133.94.0/24 maxlen: 24
141.133.97.0/24 maxlen: 24
141.133.98.0/24 maxlen: 24
141.133.99.0/24 maxlen: 24
141.133.100.0/24 maxlen: 24
141.133.101.0/24 maxlen: 24
141.133.102.0/24 maxlen: 24
141.133.103.0/24 maxlen: 24
141.133.104.0/24 maxlen: 24
141.133.105.0/24 maxlen: 24
141.133.106.0/24 maxlen: 24
141.133.107.0/24 maxlen: 24
141.133.118.0/24 maxlen: 24
141.133.120.0/24 maxlen: 24
141.133.121.0/24 maxlen: 24
153.80.2.0/24 maxlen: 24
153.80.4.0/24 maxlen: 24
153.80.6.0/24 maxlen: 24
153.80.7.0/24 maxlen: 24
153.80.36.0/24 maxlen: 24
153.80.40.0/24 maxlen: 24
153.80.49.0/24 maxlen: 24
153.80.50.0/24 maxlen: 24
153.80.53.0/24 maxlen: 24
153.80.70.0/24 maxlen: 24
153.80.72.0/24 maxlen: 24
153.80.73.0/24 maxlen: 24
153.80.75.0/24 maxlen: 24
153.80.79.0/24 maxlen: 24
153.80.80.0/24 maxlen: 24
153.80.88.0/24 maxlen: 24
153.80.92.0/24 maxlen: 24
153.80.93.0/24 maxlen: 24
153.80.111.0/24 maxlen: 24
153.80.112.0/24 maxlen: 24
153.80.122.0/24 maxlen: 24
153.80.128.0/24 maxlen: 24
153.80.129.0/24 maxlen: 24
153.80.139.0/24 maxlen: 24
153.80.140.0/24 maxlen: 24
153.80.150.0/24 maxlen: 24
153.80.160.0/24 maxlen: 24
153.80.169.0/24 maxlen: 24
153.80.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:7b:ee:f0:5b:a9:08:61:31:fc:0f:85:45:31:54:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: May 27 17:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89293c0284a39a3bc6031d1f44a2ccc735021155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:db:da:5b:02:15:95:f9:91:62:01:0a:36:
43:02:ca:38:fa:39:8b:58:da:fd:86:a7:08:33:67:
13:17:2c:0a:c6:41:3e:c3:f7:7d:18:23:ab:86:81:
75:28:70:96:aa:39:08:26:95:1e:fa:07:f9:41:a2:
0e:00:ef:43:9e:bf:96:5e:02:d5:a2:d1:4b:b6:70:
0c:29:2f:02:51:4b:7e:72:75:bf:2b:5e:4c:a3:77:
ac:e4:51:37:9a:5b:4a:94:ec:15:2f:35:53:b3:3b:
d6:68:4c:f8:77:ca:d7:16:97:df:55:1f:6e:e7:3f:
73:53:cc:c6:51:32:11:02:d9:cd:1f:6a:e7:b4:60:
f8:a8:7a:a5:a7:21:4e:4c:d4:3c:18:30:10:b9:74:
82:8f:34:17:73:8d:0f:4b:a4:c1:26:67:db:16:a4:
e0:6d:52:05:ea:57:e5:9e:19:61:9e:bc:17:ba:6d:
93:c0:12:c3:f5:ee:27:ea:30:c3:82:ff:64:ef:da:
33:80:cf:a7:6e:53:9a:56:ec:3f:e4:23:73:94:6b:
54:c2:c0:cc:79:80:56:f4:fe:6c:88:37:0b:d2:00:
cc:c7:f0:65:9e:3c:c8:9e:e9:f2:b3:97:6e:64:bf:
d8:c5:56:d7:2d:61:28:4f:ea:a1:ef:86:39:f1:db:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:29:3C:02:84:A3:9A:3B:C6:03:1D:1F:44:A2:CC:C7:35:02:11:55
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/iSk8AoSjmjvGAx0fRKLMxzUCEVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.30.0/23
135.106.35.0/24
135.106.37.0-135.106.38.255
135.106.40.0/24
135.106.46.0/24
135.106.49.0-135.106.50.255
135.106.54.0/24
135.106.57.0/24
135.106.61.0/24
135.106.76.0/24
135.106.79.0-135.106.80.255
135.106.101.0/24
135.106.103.0/24
135.106.113.0/24
136.234.127.0/24
136.234.129.0-136.234.130.255
136.234.133.0/24
136.234.138.0/23
136.234.144.0/24
136.234.147.0-136.234.148.255
136.234.158.0-136.234.162.255
136.234.178.0/24
136.234.221.0-136.234.225.255
136.234.234.0/23
136.234.238.0/24
136.234.244.0/24
136.234.249.0-136.234.250.255
136.234.252.0/23
136.234.255.0/24
138.16.17.0/24
138.16.24.0/23
138.16.38.0/23
138.16.58.0-138.16.61.255
138.16.69.0-138.16.72.255
138.16.90.0/23
138.16.96.0/24
138.16.104.0/23
138.16.111.0/24
138.16.113.0/24
138.16.116.0/24
138.16.124.0/24
141.133.8.0/23
141.133.11.0/24
141.133.23.0-141.133.32.255
141.133.36.0-141.133.43.255
141.133.86.0-141.133.94.255
141.133.97.0-141.133.107.255
141.133.118.0/24
141.133.120.0/23
153.80.2.0/24
153.80.4.0/24
153.80.6.0/23
153.80.36.0/24
153.80.40.0/24
153.80.49.0-153.80.50.255
153.80.53.0/24
153.80.70.0/24
153.80.72.0/23
153.80.75.0/24
153.80.79.0-153.80.80.255
153.80.88.0/24
153.80.92.0/23
153.80.111.0-153.80.112.255
153.80.122.0/24
153.80.128.0/23
153.80.139.0-153.80.140.255
153.80.150.0/24
153.80.160.0/24
153.80.169.0/24
153.80.171.0/24
Signature Algorithm: sha256WithRSAEncryption
27:84:bb:9a:c3:18:42:b4:a7:32:00:72:b9:61:27:2c:67:45:
e5:f2:38:c0:d2:6d:b8:df:e6:c9:88:f9:26:c2:7f:a8:c6:a8:
ba:87:13:8a:82:4d:fc:72:27:da:4b:8a:c1:3d:e4:5a:b4:3b:
71:bb:87:79:83:ae:85:0c:77:ae:d6:eb:91:ce:81:90:76:7c:
95:fa:ab:83:3c:84:c8:b4:c3:9a:82:cd:76:cd:10:66:d3:68:
3a:30:fd:aa:b5:73:06:5d:51:49:2b:2d:19:44:12:62:45:e6:
be:b4:e8:af:5c:df:e0:68:d7:31:0f:2b:a2:87:ca:04:18:15:
19:e3:f8:48:40:83:32:f8:67:42:ea:b6:a2:2d:36:ed:d4:4d:
3a:dd:96:56:f5:66:a7:ba:9e:9f:31:c5:91:47:8d:3b:f9:3d:
ff:a7:75:1d:26:79:5d:7d:fa:33:5b:7e:5b:a7:6a:06:a7:0e:
4e:91:03:93:74:fa:25:c4:09:dd:c3:ad:a2:f0:92:9c:24:e5:
ec:db:0b:e6:62:ee:eb:cc:41:f2:64:8d:7c:49:be:59:1a:c6:
d3:b3:86:c1:6c:21:61:3a:1b:4e:26:95:dd:e2:a3:6e:b1:27:
b6:a3:df:a2:a5:26:3a:a1:77:b9:b5:ff:e8:06:91:1b:a0:70:
4f:c4:48:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:55:29 2026 by rpki-client