Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/jAlspVhsLbiGMlpNROg-gDmQVcU.roa
File: jAlspVhsLbiGMlpNROg-gDmQVcU.roa (raw, json)
Hash identifier: lJl5x7/MJSFqX0QAPfTwxLsZfHEp37/BIM0tRwHSWCU=
Subject key identifier: 8C:09:6C:A5:58:6C:2D:B8:86:32:5A:4D:44:E8:3E:80:39:90:55:C5
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A0EEB3DC50D743C40AD88BED8E34442435
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/jAlspVhsLbiGMlpNROg-gDmQVcU.roa
Signing time: Tue 29 Sep 2026 19:45:59 +0000
ROA not before: Tue 29 Sep 2026 19:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 135.106.111.0/24 maxlen: 24
135.106.112.0/24 maxlen: 24
135.106.114.0/24 maxlen: 24
135.106.115.0/24 maxlen: 24
135.106.116.0/24 maxlen: 24
135.106.117.0/24 maxlen: 24
135.106.118.0/24 maxlen: 24
135.106.119.0/24 maxlen: 24
135.106.120.0/24 maxlen: 24
135.106.121.0/24 maxlen: 24
135.106.122.0/24 maxlen: 24
135.106.123.0/24 maxlen: 24
135.106.124.0/24 maxlen: 24
135.106.125.0/24 maxlen: 24
135.106.127.0/24 maxlen: 24
136.234.131.0/24 maxlen: 24
136.234.134.0/24 maxlen: 24
136.234.186.0/24 maxlen: 24
136.234.187.0/24 maxlen: 24
136.234.189.0/24 maxlen: 24
136.234.190.0/24 maxlen: 24
136.234.191.0/24 maxlen: 24
136.234.193.0/24 maxlen: 24
136.234.194.0/24 maxlen: 24
136.234.195.0/24 maxlen: 24
136.234.196.0/24 maxlen: 24
136.234.197.0/24 maxlen: 24
136.234.208.0/24 maxlen: 24
141.133.20.0/24 maxlen: 24
141.133.110.0/24 maxlen: 24
153.80.132.0/24 maxlen: 24
153.80.133.0/24 maxlen: 24
153.80.134.0/24 maxlen: 24
153.80.135.0/24 maxlen: 24
153.80.141.0/24 maxlen: 24
153.80.149.0/24 maxlen: 24
153.80.159.0/24 maxlen: 24
153.80.164.0/24 maxlen: 24
153.80.165.0/24 maxlen: 24
153.80.166.0/24 maxlen: 24
153.80.167.0/24 maxlen: 24
153.80.168.0/24 maxlen: 24
194.69.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:b3:dc:50:d7:43:c4:0a:d8:8b:ed:8e:34:44:24:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Sep 29 19:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c096ca5586c2db886325a4d44e83e80399055c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:b9:d5:2d:a1:07:4f:47:a4:de:16:8f:74:
f1:f2:f9:bc:e4:ac:6b:63:5d:2a:a9:fb:46:06:83:
45:20:ac:e6:3b:d3:c4:a6:66:0f:5e:47:80:23:f1:
f9:4e:1e:ec:b3:46:89:e8:8d:c6:cc:80:8e:b3:b3:
71:ac:27:26:7a:da:ab:5d:88:c9:b4:35:da:84:03:
26:51:a8:33:79:90:be:63:9c:e8:c7:6e:3c:f0:c3:
5e:db:2c:ec:89:fd:80:89:e4:8b:63:68:6d:1d:5d:
43:75:aa:fd:d0:5b:a8:5a:4d:cf:f5:06:d8:81:0f:
31:6c:02:37:f1:93:67:8d:4a:40:93:80:77:00:cc:
0e:48:28:30:91:85:24:50:9e:b2:02:3b:c5:41:f6:
39:0a:72:b0:72:a4:22:4d:97:e2:e1:d0:a1:3d:2d:
f7:33:d4:77:ed:d1:09:3c:f2:f6:80:db:06:8f:b6:
0c:70:17:a9:bb:83:a9:fc:8b:f5:c1:42:8d:8d:6b:
6c:2d:02:f7:b7:73:ff:62:5b:97:2b:93:b8:c4:39:
57:d7:cb:b3:84:d3:ad:d8:0a:c7:67:b8:ea:af:e6:
d3:d0:95:9e:9a:70:8e:fb:a6:16:73:43:00:49:f3:
93:c2:94:2e:80:f7:83:26:44:ea:7d:e5:cd:e3:2e:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:09:6C:A5:58:6C:2D:B8:86:32:5A:4D:44:E8:3E:80:39:90:55:C5
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/jAlspVhsLbiGMlpNROg-gDmQVcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.111.0-135.106.112.255
135.106.114.0-135.106.125.255
135.106.127.0/24
136.234.131.0/24
136.234.134.0/24
136.234.186.0/23
136.234.189.0-136.234.191.255
136.234.193.0-136.234.197.255
136.234.208.0/24
141.133.20.0/24
141.133.110.0/24
153.80.132.0/22
153.80.141.0/24
153.80.149.0/24
153.80.159.0/24
153.80.164.0-153.80.168.255
194.69.253.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d7:8b:3a:ee:76:b3:5e:ec:f8:9d:c0:9d:22:02:19:06:61:
ab:bd:61:81:19:34:4c:95:9e:2a:e5:d0:44:f7:fb:55:d3:4e:
ab:35:6a:d7:2d:e4:f5:95:3b:33:ea:14:77:1b:3c:70:a6:2a:
66:ca:be:3a:d3:c8:1c:28:a5:b1:42:18:2d:12:89:7f:35:86:
d1:01:a0:37:d8:11:11:26:6f:b1:18:52:3e:7c:01:c0:72:1c:
81:ce:e1:49:34:40:27:64:d3:db:e0:70:8f:e8:0d:8a:14:95:
90:bc:cf:75:f7:28:18:22:dc:23:b9:ed:bb:39:1b:56:64:fd:
eb:bb:8c:ee:9b:05:c5:78:38:b8:7d:03:65:9b:49:56:04:9d:
11:e6:5e:96:a3:74:fc:62:d0:ea:19:43:f6:6c:c7:c8:04:24:
7d:fd:de:7e:59:f5:0f:ca:5e:9d:9c:4f:18:98:7b:1f:84:89:
73:5a:a7:c1:fc:21:26:f4:0e:25:5b:09:fb:ae:81:e7:91:8a:
de:11:3e:5c:ee:66:a6:05:3d:a8:f5:61:11:e9:e4:cd:4f:ae:
c2:a3:96:fb:fa:96:f4:9c:03:41:46:48:b7:7d:e8:b0:58:a2:
f7:80:8a:5e:44:e0:14:85:a9:00:4f:c8:3d:6a:46:65:67:51:
a9:c0:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 17:41:15 2026 by rpki-client