Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/x-kTaEAESwYmH0KJW_2H7OzcjCk.roa
File: x-kTaEAESwYmH0KJW_2H7OzcjCk.roa (raw, json)
Hash identifier: Bowt6kjqLi/RQZI6rUBP3F86k03YT2NTbSXMID97UJY=
Subject key identifier: C7:E9:13:68:40:04:4B:06:26:1F:42:89:5B:FD:87:EC:EC:DC:8C:29
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A0EEC36B41A51E4555376105258C1BF6F1
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/x-kTaEAESwYmH0KJW_2H7OzcjCk.roa
Signing time: Tue 29 Sep 2026 20:02:59 +0000
ROA not before: Tue 29 Sep 2026 20:02:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 135.106.50.0/24 maxlen: 24
135.106.54.0/24 maxlen: 24
135.106.80.0/24 maxlen: 24
136.234.127.0/24 maxlen: 24
136.234.130.0/24 maxlen: 24
136.234.133.0/24 maxlen: 24
136.234.138.0/24 maxlen: 24
136.234.139.0/24 maxlen: 24
136.234.147.0/24 maxlen: 24
136.234.158.0/24 maxlen: 24
136.234.159.0/24 maxlen: 24
136.234.160.0/24 maxlen: 24
136.234.161.0/24 maxlen: 24
136.234.162.0/24 maxlen: 24
136.234.221.0/24 maxlen: 24
136.234.222.0/24 maxlen: 24
136.234.223.0/24 maxlen: 24
136.234.224.0/24 maxlen: 24
136.234.225.0/24 maxlen: 24
136.234.235.0/24 maxlen: 24
136.234.244.0/24 maxlen: 24
136.234.249.0/24 maxlen: 24
136.234.250.0/24 maxlen: 24
136.234.252.0/24 maxlen: 24
136.234.253.0/24 maxlen: 24
136.234.255.0/24 maxlen: 24
138.16.17.0/24 maxlen: 24
138.16.38.0/24 maxlen: 24
138.16.60.0/24 maxlen: 24
138.16.61.0/24 maxlen: 24
138.16.70.0/24 maxlen: 24
138.16.90.0/24 maxlen: 24
138.16.105.0/24 maxlen: 24
141.133.8.0/24 maxlen: 24
141.133.9.0/24 maxlen: 24
141.133.11.0/24 maxlen: 24
141.133.23.0/24 maxlen: 24
141.133.24.0/24 maxlen: 24
141.133.25.0/24 maxlen: 24
141.133.26.0/24 maxlen: 24
141.133.27.0/24 maxlen: 24
141.133.28.0/24 maxlen: 24
141.133.29.0/24 maxlen: 24
141.133.30.0/24 maxlen: 24
141.133.31.0/24 maxlen: 24
141.133.32.0/24 maxlen: 24
141.133.36.0/24 maxlen: 24
141.133.37.0/24 maxlen: 24
141.133.38.0/24 maxlen: 24
141.133.39.0/24 maxlen: 24
141.133.40.0/24 maxlen: 24
141.133.41.0/24 maxlen: 24
141.133.42.0/24 maxlen: 24
141.133.43.0/24 maxlen: 24
141.133.86.0/24 maxlen: 24
141.133.87.0/24 maxlen: 24
141.133.88.0/24 maxlen: 24
141.133.89.0/24 maxlen: 24
141.133.90.0/24 maxlen: 24
141.133.91.0/24 maxlen: 24
141.133.92.0/24 maxlen: 24
141.133.93.0/24 maxlen: 24
141.133.94.0/24 maxlen: 24
141.133.97.0/24 maxlen: 24
141.133.98.0/24 maxlen: 24
141.133.99.0/24 maxlen: 24
141.133.100.0/24 maxlen: 24
141.133.101.0/24 maxlen: 24
141.133.102.0/24 maxlen: 24
141.133.103.0/24 maxlen: 24
141.133.104.0/24 maxlen: 24
141.133.105.0/24 maxlen: 24
141.133.106.0/24 maxlen: 24
141.133.107.0/24 maxlen: 24
141.133.118.0/24 maxlen: 24
141.133.120.0/24 maxlen: 24
141.133.121.0/24 maxlen: 24
153.80.2.0/24 maxlen: 24
153.80.6.0/24 maxlen: 24
153.80.70.0/24 maxlen: 24
153.80.72.0/24 maxlen: 24
153.80.73.0/24 maxlen: 24
153.80.79.0/24 maxlen: 24
153.80.80.0/24 maxlen: 24
153.80.93.0/24 maxlen: 24
153.80.111.0/24 maxlen: 24
153.80.112.0/24 maxlen: 24
153.80.128.0/24 maxlen: 24
153.80.129.0/24 maxlen: 24
153.80.139.0/24 maxlen: 24
153.80.140.0/24 maxlen: 24
153.80.150.0/24 maxlen: 24
153.80.160.0/24 maxlen: 24
153.80.169.0/24 maxlen: 24
153.80.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:c3:6b:41:a5:1e:45:55:37:61:05:25:8c:1b:f6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Sep 29 20:02:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7e9136840044b06261f42895bfd87ececdc8c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:7d:f2:4a:82:f9:f7:68:3f:6e:19:87:0d:
e3:29:93:25:f2:2d:4b:46:30:6a:78:7d:08:85:18:
c8:90:ab:89:49:ae:44:c7:af:dc:02:0f:0b:5a:2d:
bb:1e:67:3d:c8:ea:71:79:6e:d7:7d:e5:51:2d:d4:
cc:94:3b:c3:cb:02:69:4c:e5:97:54:4f:13:a2:79:
47:bf:ea:c0:77:77:f9:a4:80:1d:94:29:db:06:af:
26:f0:d9:01:aa:5e:ab:2e:ad:33:d1:a2:22:e4:5b:
00:dd:85:82:f6:54:95:c0:4d:41:07:b3:71:d5:5a:
99:7e:1c:37:52:46:0a:8a:8d:66:e7:11:60:aa:23:
4a:a4:fc:92:84:90:6d:b8:1c:54:eb:13:75:50:11:
f3:1b:78:d4:b5:33:95:53:3a:57:b6:7b:ff:0c:27:
6f:73:77:01:67:6a:8b:52:f4:7e:91:18:ad:1f:50:
8d:ac:b1:b8:ec:1a:00:36:5a:20:41:67:82:8c:69:
df:f0:da:09:79:83:7a:d2:a2:40:16:9c:8d:4b:66:
f9:e6:b6:7d:9c:6d:cb:d1:91:5f:0e:8b:f7:29:65:
72:47:b9:0b:70:c3:f0:ef:d9:b2:ca:a0:37:1f:98:
f7:75:5d:ea:48:4a:26:5a:0f:38:0f:ca:98:35:46:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E9:13:68:40:04:4B:06:26:1F:42:89:5B:FD:87:EC:EC:DC:8C:29
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/x-kTaEAESwYmH0KJW_2H7OzcjCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.50.0/24
135.106.54.0/24
135.106.80.0/24
136.234.127.0/24
136.234.130.0/24
136.234.133.0/24
136.234.138.0/23
136.234.147.0/24
136.234.158.0-136.234.162.255
136.234.221.0-136.234.225.255
136.234.235.0/24
136.234.244.0/24
136.234.249.0-136.234.250.255
136.234.252.0/23
136.234.255.0/24
138.16.17.0/24
138.16.38.0/24
138.16.60.0/23
138.16.70.0/24
138.16.90.0/24
138.16.105.0/24
141.133.8.0/23
141.133.11.0/24
141.133.23.0-141.133.32.255
141.133.36.0-141.133.43.255
141.133.86.0-141.133.94.255
141.133.97.0-141.133.107.255
141.133.118.0/24
141.133.120.0/23
153.80.2.0/24
153.80.6.0/24
153.80.70.0/24
153.80.72.0/23
153.80.79.0-153.80.80.255
153.80.93.0/24
153.80.111.0-153.80.112.255
153.80.128.0/23
153.80.139.0-153.80.140.255
153.80.150.0/24
153.80.160.0/24
153.80.169.0/24
153.80.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3c:7e:42:b1:36:8a:e5:19:eb:7e:04:81:93:50:cf:83:5b:
5b:c2:3b:32:f0:6b:2f:fb:c5:9a:bb:8b:7c:af:36:41:02:a2:
67:dd:74:52:5d:59:6e:43:37:96:6d:ad:05:59:9c:8e:09:13:
ea:4f:b6:eb:df:2b:97:6b:a6:19:34:ee:42:12:46:43:9a:b5:
a0:96:49:45:5b:5f:62:6c:8a:44:73:9d:cf:75:2c:ff:8e:f9:
5c:58:05:99:26:f3:0e:36:57:7d:64:da:e1:0c:0e:50:25:62:
18:02:b7:a9:a6:62:a9:c4:e8:9c:97:13:eb:8a:78:bf:80:6d:
99:fe:47:11:f4:15:f2:39:1c:9d:2f:3e:06:ba:ad:53:10:7e:
56:8b:58:d9:07:42:a2:fc:af:73:97:c7:38:69:e3:5c:9c:dd:
1f:c0:6c:15:d2:b7:2b:15:aa:6b:18:e6:15:a5:75:fd:a0:6a:
69:eb:c7:8f:8a:66:bf:1a:53:5c:b6:bf:88:03:bf:20:2d:19:
c8:dc:88:da:73:5d:ca:8c:78:d6:49:f4:e5:08:4c:6b:01:e1:
63:ca:a8:c1:1f:88:76:4b:8f:4a:e8:c8:cc:f9:ad:97:1e:48:
2a:97:83:c4:0a:e1:ba:a4:81:5e:62:a8:1b:73:d9:66:fa:46:
10:7f:57:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:31:33 2026 by rpki-client