Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/mDxqVz7IppCgvOdtR7DjC7b9ypI.roa
File: mDxqVz7IppCgvOdtR7DjC7b9ypI.roa (raw, json)
Hash identifier: ay9aW1CuP8m9lxlqxiHtvKKFTkPdf9+ts1KUQSE2mIg=
Subject key identifier: 98:3C:6A:57:3E:C8:A6:90:A0:BC:E7:6D:47:B0:E3:0B:B6:FD:CA:92
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A067C7788905FCEBB38DA3B2539131BB3C
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/mDxqVz7IppCgvOdtR7DjC7b9ypI.roa
Signing time: Thu 03 Sep 2026 14:58:40 +0000
ROA not before: Thu 03 Sep 2026 14:58:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204957
IP address blocks: 135.106.5.0/24 maxlen: 24
135.106.26.0/24 maxlen: 24
135.106.66.0/24 maxlen: 24
135.106.85.0/24 maxlen: 24
135.106.94.0/24 maxlen: 24
135.106.107.0/24 maxlen: 24
136.234.141.0/24 maxlen: 24
136.234.142.0/24 maxlen: 24
136.234.143.0/24 maxlen: 24
136.234.174.0/24 maxlen: 24
136.234.209.0/24 maxlen: 24
136.234.239.0/24 maxlen: 24
136.234.240.0/24 maxlen: 24
136.234.241.0/24 maxlen: 24
136.234.242.0/24 maxlen: 24
141.133.34.0/24 maxlen: 24
141.133.35.0/24 maxlen: 24
141.133.95.0/24 maxlen: 24
153.80.11.0/24 maxlen: 24
153.80.13.0/24 maxlen: 24
153.80.19.0/24 maxlen: 24
153.80.44.0/24 maxlen: 24
153.80.84.0/24 maxlen: 24
153.80.97.0/24 maxlen: 24
153.80.108.0/24 maxlen: 24
153.80.115.0/24 maxlen: 24
153.80.142.0/24 maxlen: 24
153.80.143.0/24 maxlen: 24
153.80.144.0/24 maxlen: 24
153.80.145.0/24 maxlen: 24
153.80.155.0/24 maxlen: 24
153.80.156.0/24 maxlen: 24
153.80.157.0/24 maxlen: 24
153.80.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:c7:78:89:05:fc:eb:b3:8d:a3:b2:53:91:31:bb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Sep 3 14:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=983c6a573ec8a690a0bce76d47b0e30bb6fdca92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:87:ef:87:60:45:b6:10:ea:f7:e6:49:26:
3c:dc:9b:d2:ca:ba:a5:ff:2b:d8:9a:9b:8b:5a:66:
41:71:68:23:71:7e:f1:1e:83:d9:a1:70:a3:54:9a:
28:74:22:38:ef:69:45:79:29:7e:7d:a5:2a:30:c2:
14:f6:17:12:ee:66:62:b9:68:2c:93:23:d1:a8:dc:
ea:9c:96:c6:c2:03:99:60:c9:af:e8:fe:ea:5a:0c:
bf:32:3c:22:ea:b2:b7:58:db:2b:69:ae:9f:3d:b0:
c3:82:29:fd:50:09:5e:2a:f4:c5:03:43:68:20:d8:
a4:5e:53:87:1b:d2:d4:dc:e9:0c:84:0d:f7:71:66:
fc:c1:ad:eb:de:5f:70:f6:c2:87:f1:52:ce:20:06:
00:f6:03:1f:83:b4:b0:68:c3:1e:8e:7f:ac:71:de:
56:0d:e9:84:cd:f9:fb:96:1d:6c:53:c9:34:5a:61:
16:dc:87:5d:7d:d0:c4:a5:53:51:3c:8d:2a:db:8c:
c7:b7:b4:99:7e:0d:dd:75:29:00:24:3c:29:2f:e1:
7d:75:a2:85:e0:aa:69:99:55:79:4c:a7:82:7a:1c:
ce:89:ed:4b:7d:bf:4a:31:01:6a:b5:d5:e1:c2:77:
a1:33:45:c6:60:de:b7:60:d1:a3:f8:53:01:36:34:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3C:6A:57:3E:C8:A6:90:A0:BC:E7:6D:47:B0:E3:0B:B6:FD:CA:92
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/mDxqVz7IppCgvOdtR7DjC7b9ypI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.5.0/24
135.106.26.0/24
135.106.66.0/24
135.106.85.0/24
135.106.94.0/24
135.106.107.0/24
136.234.141.0-136.234.143.255
136.234.174.0/24
136.234.209.0/24
136.234.239.0-136.234.242.255
141.133.34.0/23
141.133.95.0/24
153.80.11.0/24
153.80.13.0/24
153.80.19.0/24
153.80.44.0/24
153.80.84.0/24
153.80.97.0/24
153.80.108.0/24
153.80.115.0/24
153.80.142.0-153.80.145.255
153.80.155.0-153.80.158.255
Signature Algorithm: sha256WithRSAEncryption
62:82:17:2d:89:6e:c1:c6:1b:80:21:d5:16:3f:8c:fe:0e:69:
b5:14:8b:84:e8:e0:b2:4f:11:e6:3c:5c:fa:ab:e1:01:83:c9:
7b:f7:48:7a:da:8e:73:42:e2:93:45:28:b3:73:f5:f3:bb:94:
63:2e:01:95:fc:2b:6e:a6:c9:b4:ac:e9:31:7d:52:b7:f4:64:
9b:e8:4a:62:60:76:b1:0b:06:bc:f5:5a:85:fd:f9:b0:a7:91:
b1:0c:ab:ce:c0:1c:ce:f0:47:6a:b8:ba:f9:bc:9d:05:62:b2:
2b:f6:f4:e1:67:12:c2:14:fa:c0:d5:93:d5:46:66:d2:f2:d6:
01:aa:e5:74:29:cf:f1:92:56:8d:3a:c1:f9:ef:67:00:3e:76:
ac:f9:ef:3e:3a:19:52:3c:35:01:3f:1b:d6:0a:2b:fc:b8:d3:
b9:d0:1c:70:65:1a:35:6c:6a:8f:90:dc:73:62:90:b0:c8:d5:
8e:1d:91:1a:48:8e:2e:97:15:f3:e6:30:af:1a:90:98:c5:cf:
56:82:9c:53:9b:a4:08:3c:ca:a0:f5:71:42:1c:2b:7f:7d:3a:
5f:ab:29:e5:fe:3a:0e:ca:59:30:09:7f:75:56:33:40:1b:4e:
92:e9:99:ef:9c:27:a3:82:b9:cb:a7:2d:f9:94:ff:8d:2e:f7:
0c:29:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:22 2026 by rpki-client