Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/NGaKx93gVd7PEUOW9cZ6Qm-pDiM.roa
File: NGaKx93gVd7PEUOW9cZ6Qm-pDiM.roa (raw, json)
Hash identifier: 7CEypykvoEH87nl9qepiOLWn4IZ55cRNamKSB2KnDXE=
Subject key identifier: 34:66:8A:C7:DD:E0:55:DE:CF:11:43:96:F5:C6:7A:42:6F:A9:0E:23
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A0AFB96E5E85FC43484C0886FBDE8E281F
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/NGaKx93gVd7PEUOW9cZ6Qm-pDiM.roa
Signing time: Thu 17 Sep 2026 14:16:00 +0000
ROA not before: Thu 17 Sep 2026 14:16:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 135.106.50.0/24 maxlen: 24
135.106.54.0/24 maxlen: 24
135.106.80.0/24 maxlen: 24
136.234.127.0/24 maxlen: 24
136.234.129.0/24 maxlen: 24
136.234.130.0/24 maxlen: 24
136.234.133.0/24 maxlen: 24
136.234.138.0/24 maxlen: 24
136.234.139.0/24 maxlen: 24
136.234.144.0/24 maxlen: 24
136.234.147.0/24 maxlen: 24
136.234.158.0/24 maxlen: 24
136.234.159.0/24 maxlen: 24
136.234.160.0/24 maxlen: 24
136.234.161.0/24 maxlen: 24
136.234.162.0/24 maxlen: 24
136.234.178.0/24 maxlen: 24
136.234.221.0/24 maxlen: 24
136.234.222.0/24 maxlen: 24
136.234.223.0/24 maxlen: 24
136.234.224.0/24 maxlen: 24
136.234.225.0/24 maxlen: 24
136.234.235.0/24 maxlen: 24
136.234.238.0/24 maxlen: 24
136.234.244.0/24 maxlen: 24
136.234.249.0/24 maxlen: 24
136.234.250.0/24 maxlen: 24
136.234.252.0/24 maxlen: 24
136.234.253.0/24 maxlen: 24
136.234.255.0/24 maxlen: 24
138.16.17.0/24 maxlen: 24
138.16.38.0/24 maxlen: 24
138.16.60.0/24 maxlen: 24
138.16.61.0/24 maxlen: 24
138.16.70.0/24 maxlen: 24
138.16.90.0/24 maxlen: 24
138.16.105.0/24 maxlen: 24
141.133.8.0/24 maxlen: 24
141.133.9.0/24 maxlen: 24
141.133.11.0/24 maxlen: 24
141.133.23.0/24 maxlen: 24
141.133.24.0/24 maxlen: 24
141.133.25.0/24 maxlen: 24
141.133.26.0/24 maxlen: 24
141.133.27.0/24 maxlen: 24
141.133.28.0/24 maxlen: 24
141.133.29.0/24 maxlen: 24
141.133.30.0/24 maxlen: 24
141.133.31.0/24 maxlen: 24
141.133.32.0/24 maxlen: 24
141.133.36.0/24 maxlen: 24
141.133.37.0/24 maxlen: 24
141.133.38.0/24 maxlen: 24
141.133.39.0/24 maxlen: 24
141.133.40.0/24 maxlen: 24
141.133.41.0/24 maxlen: 24
141.133.42.0/24 maxlen: 24
141.133.43.0/24 maxlen: 24
141.133.86.0/24 maxlen: 24
141.133.87.0/24 maxlen: 24
141.133.88.0/24 maxlen: 24
141.133.89.0/24 maxlen: 24
141.133.90.0/24 maxlen: 24
141.133.91.0/24 maxlen: 24
141.133.92.0/24 maxlen: 24
141.133.93.0/24 maxlen: 24
141.133.94.0/24 maxlen: 24
141.133.97.0/24 maxlen: 24
141.133.98.0/24 maxlen: 24
141.133.99.0/24 maxlen: 24
141.133.100.0/24 maxlen: 24
141.133.101.0/24 maxlen: 24
141.133.102.0/24 maxlen: 24
141.133.103.0/24 maxlen: 24
141.133.104.0/24 maxlen: 24
141.133.105.0/24 maxlen: 24
141.133.106.0/24 maxlen: 24
141.133.107.0/24 maxlen: 24
141.133.118.0/24 maxlen: 24
141.133.120.0/24 maxlen: 24
141.133.121.0/24 maxlen: 24
153.80.2.0/24 maxlen: 24
153.80.6.0/24 maxlen: 24
153.80.70.0/24 maxlen: 24
153.80.72.0/24 maxlen: 24
153.80.73.0/24 maxlen: 24
153.80.79.0/24 maxlen: 24
153.80.80.0/24 maxlen: 24
153.80.93.0/24 maxlen: 24
153.80.111.0/24 maxlen: 24
153.80.112.0/24 maxlen: 24
153.80.128.0/24 maxlen: 24
153.80.129.0/24 maxlen: 24
153.80.139.0/24 maxlen: 24
153.80.140.0/24 maxlen: 24
153.80.150.0/24 maxlen: 24
153.80.160.0/24 maxlen: 24
153.80.169.0/24 maxlen: 24
153.80.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:b9:6e:5e:85:fc:43:48:4c:08:86:fb:de:8e:28:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Sep 17 14:16:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34668ac7dde055decf114396f5c67a426fa90e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:a2:05:50:62:51:da:80:6a:23:b3:32:5d:
86:09:90:0b:15:7e:b3:7b:51:ef:bc:c7:3b:18:77:
4d:8e:02:6c:90:73:ae:bd:96:0d:bf:d1:10:48:31:
43:6a:9d:15:16:fe:1c:71:1d:ed:62:46:a8:a3:9a:
ef:b6:52:1e:7d:81:cf:8b:8c:c1:58:f4:1b:97:69:
11:e4:40:4c:a1:9c:ab:40:01:e7:4d:a7:20:1f:cd:
15:70:b6:3a:8d:3d:73:db:c9:3c:ea:43:b6:11:5a:
eb:78:2d:3d:20:d0:a7:db:3c:c6:40:3e:f7:cc:ce:
5f:c3:21:ee:0a:07:de:b7:4d:3b:89:2c:94:b3:53:
d2:1c:08:be:f6:82:ac:31:7b:87:db:e0:25:a8:0f:
85:b1:bc:a9:9f:7c:8e:11:49:24:47:b1:5c:fb:70:
72:f9:41:f8:0b:70:54:47:67:98:9b:b5:0e:e2:e7:
13:27:3e:9f:f5:ae:24:27:90:b6:9b:61:53:9d:69:
c2:94:15:42:95:b3:dc:7d:7d:42:4f:3e:cc:d0:52:
a0:a6:55:29:c7:c8:e2:4a:11:3c:95:77:de:84:eb:
46:10:c6:27:97:5e:6f:50:df:53:c8:0e:f2:a6:ad:
48:60:78:8e:12:72:77:dd:37:f6:01:44:a2:13:fc:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:66:8A:C7:DD:E0:55:DE:CF:11:43:96:F5:C6:7A:42:6F:A9:0E:23
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/NGaKx93gVd7PEUOW9cZ6Qm-pDiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.50.0/24
135.106.54.0/24
135.106.80.0/24
136.234.127.0/24
136.234.129.0-136.234.130.255
136.234.133.0/24
136.234.138.0/23
136.234.144.0/24
136.234.147.0/24
136.234.158.0-136.234.162.255
136.234.178.0/24
136.234.221.0-136.234.225.255
136.234.235.0/24
136.234.238.0/24
136.234.244.0/24
136.234.249.0-136.234.250.255
136.234.252.0/23
136.234.255.0/24
138.16.17.0/24
138.16.38.0/24
138.16.60.0/23
138.16.70.0/24
138.16.90.0/24
138.16.105.0/24
141.133.8.0/23
141.133.11.0/24
141.133.23.0-141.133.32.255
141.133.36.0-141.133.43.255
141.133.86.0-141.133.94.255
141.133.97.0-141.133.107.255
141.133.118.0/24
141.133.120.0/23
153.80.2.0/24
153.80.6.0/24
153.80.70.0/24
153.80.72.0/23
153.80.79.0-153.80.80.255
153.80.93.0/24
153.80.111.0-153.80.112.255
153.80.128.0/23
153.80.139.0-153.80.140.255
153.80.150.0/24
153.80.160.0/24
153.80.169.0/24
153.80.171.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0e:a3:2c:c2:03:fd:86:39:ac:53:99:e7:df:22:27:0b:bc:
46:2e:c2:99:c2:e6:46:ea:8d:47:1d:55:70:2f:ae:03:54:24:
1c:43:32:5b:84:2a:84:23:92:f6:76:28:67:02:6b:18:64:37:
0c:b5:ff:c6:9f:98:16:66:e7:20:14:5a:ba:45:3d:65:0b:df:
9e:0e:de:cb:68:8a:63:77:cc:d4:ab:3f:b9:64:b0:b2:b2:63:
65:93:f9:a2:8e:a9:eb:bc:72:da:66:ae:44:4a:71:e8:98:af:
e3:83:fe:18:e8:b4:87:a2:ef:70:84:a6:de:ed:0f:db:b0:28:
45:14:f3:af:91:5b:f6:b2:2b:1a:18:4f:c1:52:b2:cf:29:18:
58:be:03:59:63:6c:21:72:c4:ca:9b:63:45:d5:a9:b8:6f:31:
c0:cb:e6:08:7e:6d:8c:01:cd:c4:e6:44:c4:8a:62:4a:40:a6:
39:66:93:0f:5b:12:6b:f0:c0:33:63:14:63:d9:34:24:da:13:
fa:b8:3a:ac:45:24:2a:01:65:39:4d:c0:1c:5d:fe:e8:f3:7b:
8e:6a:24:f6:b7:50:92:45:a5:8e:d5:61:aa:2b:ab:2f:32:26:
56:33:4e:6a:31:d9:4a:ab:3d:cd:83:4c:c0:db:42:38:32:2c:
d1:33:46:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:04:26 2026 by rpki-client