Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0Ys9z-LD_wRc6zhIeZnJHEYBYSc.roa
File: 0Ys9z-LD_wRc6zhIeZnJHEYBYSc.roa (raw, json)
Hash identifier: H4n4ecpLEfFWtxhPfACTruSxk9dAaWkVWZDwXrqpiNU=
Subject key identifier: D1:8B:3D:CF:E2:C3:FF:04:5C:EB:38:48:79:99:C9:1C:46:01:61:27
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FFD94B26E71E4920A123ED0D04C81CE0E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0Ys9z-LD_wRc6zhIeZnJHEYBYSc.roa
Signing time: Fri 14 Aug 2026 00:03:28 +0000
ROA not before: Fri 14 Aug 2026 00:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 135.196.155.0/24 maxlen: 24
135.196.166.0/24 maxlen: 24
135.196.236.0/24 maxlen: 24
135.196.244.0/24 maxlen: 24
135.196.248.0/24 maxlen: 24
135.196.252.0/24 maxlen: 24
135.196.254.0/24 maxlen: 24
194.231.144.0/22 maxlen: 24
195.86.238.0/24 maxlen: 24
212.189.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:94:b2:6e:71:e4:92:0a:12:3e:d0:d0:4c:81:ce:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 14 00:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d18b3dcfe2c3ff045ceb38487999c91c46016127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:c2:6d:b1:20:aa:62:ec:39:52:8c:24:d8:
8d:35:6e:8f:28:64:32:55:03:d2:c2:eb:a6:3e:33:
6a:8f:0c:17:03:3c:91:be:a4:98:58:53:69:ea:70:
6d:f8:88:a7:89:56:b0:30:cc:0c:cb:a1:49:cc:e3:
34:db:30:f8:4f:95:6f:72:bb:7f:0a:b6:88:93:10:
ab:07:e5:60:9a:40:81:33:01:70:1b:2e:c5:4e:0c:
8c:5c:03:54:dd:0c:c1:2c:21:6a:72:95:04:01:5a:
95:51:21:57:62:59:7a:f9:24:6e:bf:c1:4e:54:f8:
f6:05:d4:ac:2f:a6:84:6b:77:71:cb:9c:d2:73:9b:
cd:20:0c:5f:99:5e:94:30:48:3d:8d:82:ac:16:37:
00:f9:c4:5d:27:c6:20:2f:17:ab:39:c3:07:34:20:
07:10:e0:a3:18:d6:58:a0:3a:ee:11:1e:58:d0:34:
4e:db:ef:4c:78:46:3a:64:74:7a:4f:5b:98:02:ff:
93:9e:7c:4b:a7:05:3a:68:c0:0f:3a:7d:f5:de:c6:
48:26:1e:99:4c:e6:86:e0:18:a4:cb:83:84:6e:f9:
d7:5f:87:09:9d:b1:cd:78:26:f5:aa:4d:1a:2c:31:
92:e0:2f:8f:0c:e8:d4:60:97:c6:ce:48:0c:19:38:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8B:3D:CF:E2:C3:FF:04:5C:EB:38:48:79:99:C9:1C:46:01:61:27
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0Ys9z-LD_wRc6zhIeZnJHEYBYSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.196.155.0/24
135.196.166.0/24
135.196.236.0/24
135.196.244.0/24
135.196.248.0/24
135.196.252.0/24
135.196.254.0/24
194.231.144.0/22
195.86.238.0/24
212.189.36.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b0:52:1d:e2:83:40:f3:6a:c2:dc:10:1f:c9:91:7d:67:b9:
00:eb:c4:e2:63:21:00:8e:3c:75:6c:ed:63:b3:b2:c8:d4:f1:
6d:a0:7c:83:8e:93:25:cf:4f:d2:6d:9d:30:65:d0:92:24:89:
7c:ed:43:60:0d:1d:35:50:90:47:2a:07:3b:00:4b:36:65:3f:
69:91:91:e7:94:df:10:1d:37:7b:e9:fa:9a:0d:79:52:a3:5b:
da:d6:bc:c2:81:83:c1:74:73:ff:8e:b4:34:d1:c2:26:42:91:
ca:4c:91:9b:f6:b9:09:c0:30:2e:2a:fa:c7:36:0c:63:81:03:
8f:cb:44:b8:97:8d:54:a8:c1:30:82:ff:32:d0:df:e8:10:ad:
76:6b:e4:bf:c0:41:89:a6:df:1b:15:e0:22:a6:bd:a9:4f:2c:
4a:6b:7a:1f:17:fc:da:ab:c7:64:00:b0:7b:5b:8a:12:23:79:
05:8d:a1:8f:fe:c2:89:4a:3e:a2:03:a8:52:18:92:17:74:72:
6f:59:8a:8f:0f:61:38:01:2c:e2:6b:53:47:46:4b:e5:91:19:
a8:e8:11:5e:05:4f:fd:04:e8:79:5c:e2:5d:da:99:54:25:29:
11:54:8b:c0:3b:d3:f4:6f:54:5a:56:f8:ea:09:09:93:68:da:
b3:03:04:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:38 2026 by rpki-client