Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/wqjHGj-J1T9xqzfjc8bs1w_Xc44.roa
File: wqjHGj-J1T9xqzfjc8bs1w_Xc44.roa (raw, json)
Hash identifier: R87zg2t6BKPDcfe+HdDGungwi+W5/h91BjuwXZ1+jhA=
Subject key identifier: C2:A8:C7:1A:3F:89:D5:3F:71:AB:37:E3:73:C6:EC:D7:0F:D7:73:8E
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019ED6F4314BA98B872A36F8DA4FBF58E92B
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/wqjHGj-J1T9xqzfjc8bs1w_Xc44.roa
Signing time: Wed 17 Jun 2026 18:59:48 +0000
ROA not before: Wed 17 Jun 2026 18:59:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 135.106.31.0/24 maxlen: 24
135.106.35.0/24 maxlen: 24
135.106.37.0/24 maxlen: 24
135.106.46.0/24 maxlen: 24
135.106.49.0/24 maxlen: 24
135.106.50.0/24 maxlen: 24
135.106.54.0/24 maxlen: 24
135.106.57.0/24 maxlen: 24
135.106.76.0/24 maxlen: 24
135.106.80.0/24 maxlen: 24
135.106.101.0/24 maxlen: 24
135.106.113.0/24 maxlen: 24
136.234.127.0/24 maxlen: 24
136.234.129.0/24 maxlen: 24
136.234.130.0/24 maxlen: 24
136.234.133.0/24 maxlen: 24
136.234.138.0/24 maxlen: 24
136.234.139.0/24 maxlen: 24
136.234.144.0/24 maxlen: 24
136.234.147.0/24 maxlen: 24
136.234.158.0/24 maxlen: 24
136.234.159.0/24 maxlen: 24
136.234.160.0/24 maxlen: 24
136.234.161.0/24 maxlen: 24
136.234.162.0/24 maxlen: 24
136.234.178.0/24 maxlen: 24
136.234.221.0/24 maxlen: 24
136.234.222.0/24 maxlen: 24
136.234.223.0/24 maxlen: 24
136.234.224.0/24 maxlen: 24
136.234.225.0/24 maxlen: 24
136.234.235.0/24 maxlen: 24
136.234.238.0/24 maxlen: 24
136.234.244.0/24 maxlen: 24
136.234.249.0/24 maxlen: 24
136.234.250.0/24 maxlen: 24
136.234.252.0/24 maxlen: 24
136.234.253.0/24 maxlen: 24
136.234.255.0/24 maxlen: 24
138.16.17.0/24 maxlen: 24
138.16.38.0/24 maxlen: 24
138.16.39.0/24 maxlen: 24
138.16.60.0/24 maxlen: 24
138.16.61.0/24 maxlen: 24
138.16.70.0/24 maxlen: 24
138.16.90.0/24 maxlen: 24
138.16.91.0/24 maxlen: 24
138.16.105.0/24 maxlen: 24
141.133.8.0/24 maxlen: 24
141.133.9.0/24 maxlen: 24
141.133.11.0/24 maxlen: 24
141.133.23.0/24 maxlen: 24
141.133.24.0/24 maxlen: 24
141.133.25.0/24 maxlen: 24
141.133.26.0/24 maxlen: 24
141.133.27.0/24 maxlen: 24
141.133.28.0/24 maxlen: 24
141.133.29.0/24 maxlen: 24
141.133.30.0/24 maxlen: 24
141.133.31.0/24 maxlen: 24
141.133.32.0/24 maxlen: 24
141.133.36.0/24 maxlen: 24
141.133.37.0/24 maxlen: 24
141.133.38.0/24 maxlen: 24
141.133.39.0/24 maxlen: 24
141.133.40.0/24 maxlen: 24
141.133.41.0/24 maxlen: 24
141.133.42.0/24 maxlen: 24
141.133.43.0/24 maxlen: 24
141.133.86.0/24 maxlen: 24
141.133.87.0/24 maxlen: 24
141.133.88.0/24 maxlen: 24
141.133.89.0/24 maxlen: 24
141.133.90.0/24 maxlen: 24
141.133.91.0/24 maxlen: 24
141.133.92.0/24 maxlen: 24
141.133.93.0/24 maxlen: 24
141.133.94.0/24 maxlen: 24
141.133.97.0/24 maxlen: 24
141.133.98.0/24 maxlen: 24
141.133.99.0/24 maxlen: 24
141.133.100.0/24 maxlen: 24
141.133.101.0/24 maxlen: 24
141.133.102.0/24 maxlen: 24
141.133.103.0/24 maxlen: 24
141.133.104.0/24 maxlen: 24
141.133.105.0/24 maxlen: 24
141.133.106.0/24 maxlen: 24
141.133.107.0/24 maxlen: 24
141.133.118.0/24 maxlen: 24
141.133.120.0/24 maxlen: 24
141.133.121.0/24 maxlen: 24
153.80.2.0/24 maxlen: 24
153.80.4.0/24 maxlen: 24
153.80.6.0/24 maxlen: 24
153.80.7.0/24 maxlen: 24
153.80.36.0/24 maxlen: 24
153.80.40.0/24 maxlen: 24
153.80.49.0/24 maxlen: 24
153.80.50.0/24 maxlen: 24
153.80.53.0/24 maxlen: 24
153.80.70.0/24 maxlen: 24
153.80.72.0/24 maxlen: 24
153.80.73.0/24 maxlen: 24
153.80.75.0/24 maxlen: 24
153.80.79.0/24 maxlen: 24
153.80.80.0/24 maxlen: 24
153.80.88.0/24 maxlen: 24
153.80.92.0/24 maxlen: 24
153.80.93.0/24 maxlen: 24
153.80.111.0/24 maxlen: 24
153.80.112.0/24 maxlen: 24
153.80.122.0/24 maxlen: 24
153.80.128.0/24 maxlen: 24
153.80.129.0/24 maxlen: 24
153.80.139.0/24 maxlen: 24
153.80.140.0/24 maxlen: 24
153.80.150.0/24 maxlen: 24
153.80.160.0/24 maxlen: 24
153.80.169.0/24 maxlen: 24
153.80.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:f4:31:4b:a9:8b:87:2a:36:f8:da:4f:bf:58:e9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Jun 17 18:59:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2a8c71a3f89d53f71ab37e373c6ecd70fd7738e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:64:22:c9:4a:70:01:3d:bd:86:28:0e:fd:
ab:8b:73:df:bf:77:57:eb:e4:0f:50:52:61:89:eb:
15:49:6f:ed:da:18:67:54:b1:81:f6:7b:b1:86:62:
ed:a8:74:98:dd:b1:f8:29:04:95:a4:19:41:a0:d0:
fb:9b:5f:97:8e:f8:43:36:08:a1:38:5e:fa:4a:c6:
db:a0:bd:a5:85:4d:76:ac:e1:dd:4f:4e:55:c7:23:
1e:94:71:9e:aa:99:2c:0e:01:81:50:cd:f6:43:3b:
8a:11:f3:3d:bb:70:6a:25:b3:a1:2c:7d:6f:f3:20:
2a:63:07:0d:b8:d1:40:3b:e5:33:e5:00:4f:9d:9a:
39:3b:af:ed:d1:b8:68:60:61:26:35:5f:43:8e:bb:
62:10:df:21:d6:d9:5a:05:27:3c:37:1a:d2:ec:b2:
d9:70:9e:7b:07:6c:c8:65:b3:cd:52:49:d5:93:b2:
7a:d1:05:b2:f7:f6:9d:36:47:9c:17:35:4c:65:68:
18:8e:2f:9d:6e:9b:c3:f7:ab:d9:84:b7:b0:30:8b:
c2:79:93:d7:85:ae:90:d0:08:9d:17:2c:fc:ac:2e:
65:e3:06:3c:69:84:a5:66:a9:e4:23:22:af:5a:c4:
47:5e:f0:d3:48:58:2a:b2:38:e9:ce:cb:16:f2:e7:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A8:C7:1A:3F:89:D5:3F:71:AB:37:E3:73:C6:EC:D7:0F:D7:73:8E
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/wqjHGj-J1T9xqzfjc8bs1w_Xc44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.31.0/24
135.106.35.0/24
135.106.37.0/24
135.106.46.0/24
135.106.49.0-135.106.50.255
135.106.54.0/24
135.106.57.0/24
135.106.76.0/24
135.106.80.0/24
135.106.101.0/24
135.106.113.0/24
136.234.127.0/24
136.234.129.0-136.234.130.255
136.234.133.0/24
136.234.138.0/23
136.234.144.0/24
136.234.147.0/24
136.234.158.0-136.234.162.255
136.234.178.0/24
136.234.221.0-136.234.225.255
136.234.235.0/24
136.234.238.0/24
136.234.244.0/24
136.234.249.0-136.234.250.255
136.234.252.0/23
136.234.255.0/24
138.16.17.0/24
138.16.38.0/23
138.16.60.0/23
138.16.70.0/24
138.16.90.0/23
138.16.105.0/24
141.133.8.0/23
141.133.11.0/24
141.133.23.0-141.133.32.255
141.133.36.0-141.133.43.255
141.133.86.0-141.133.94.255
141.133.97.0-141.133.107.255
141.133.118.0/24
141.133.120.0/23
153.80.2.0/24
153.80.4.0/24
153.80.6.0/23
153.80.36.0/24
153.80.40.0/24
153.80.49.0-153.80.50.255
153.80.53.0/24
153.80.70.0/24
153.80.72.0/23
153.80.75.0/24
153.80.79.0-153.80.80.255
153.80.88.0/24
153.80.92.0/23
153.80.111.0-153.80.112.255
153.80.122.0/24
153.80.128.0/23
153.80.139.0-153.80.140.255
153.80.150.0/24
153.80.160.0/24
153.80.169.0/24
153.80.171.0/24
Signature Algorithm: sha256WithRSAEncryption
85:0d:0a:fd:a3:31:ff:10:3e:a6:d5:52:e8:70:08:35:da:7e:
18:22:fd:e3:5a:83:96:dd:da:ce:f8:19:fd:55:c1:74:18:16:
8c:bb:c3:aa:d1:31:de:93:4a:46:38:56:e4:24:51:cb:ea:fe:
31:dc:34:0e:f4:9d:1a:e6:8d:7e:0b:04:ec:39:9f:4a:02:f6:
7e:54:a1:67:ab:be:b8:a9:cf:92:dd:48:43:e6:e8:e5:3f:ea:
e3:28:d7:ea:6c:d9:b1:4e:53:fb:dc:49:6f:eb:8e:f7:2a:e7:
a0:7d:62:f2:a4:c2:4d:2c:2f:f5:1c:94:25:f6:1a:f4:d8:7a:
ee:00:9d:d7:e6:8a:3c:21:28:eb:9d:0c:e4:1c:41:cb:dc:74:
a0:4f:4e:c6:a6:4d:f4:24:33:a3:56:15:dd:43:48:02:08:c4:
52:a6:16:25:3e:c2:e2:b1:c6:55:2f:69:a1:5c:13:4b:30:2f:
50:00:5e:b8:47:04:88:c8:62:85:e8:09:bd:38:81:95:4a:1d:
29:c2:69:91:29:05:8b:42:64:43:a7:22:c9:e2:e1:7b:09:ba:
84:b0:39:0d:92:30:e5:7c:47:e5:26:eb:59:62:57:23:c7:57:
03:6e:4c:ff:a5:5f:c2:fc:e2:40:ab:01:1b:38:68:76:30:ac:
86:ee:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 19:52:46 2026 by rpki-client