Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/N9DbGrK74r1kM6DpZ2j28HbQyWE.roa
File: N9DbGrK74r1kM6DpZ2j28HbQyWE.roa (raw, json)
Hash identifier: Mjnv1A/ZxfFnnDaxkBF1WeDc4SxQV2As3y6ATrkoi/4=
Subject key identifier: 37:D0:DB:1A:B2:BB:E2:BD:64:33:A0:E9:67:68:F6:F0:76:D0:C9:61
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019FD3306DFAF69D615AAF73748932B05100
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/N9DbGrK74r1kM6DpZ2j28HbQyWE.roa
Signing time: Wed 05 Aug 2026 18:29:54 +0000
ROA not before: Wed 05 Aug 2026 18:29:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204997
IP address blocks: 104.128.132.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.136.0/24 maxlen: 24
104.128.137.0/24 maxlen: 24
104.128.140.0/24 maxlen: 24
104.128.141.0/24 maxlen: 24
135.136.180.0/24 maxlen: 24
135.136.188.0/24 maxlen: 24
135.136.191.0/24 maxlen: 24
157.228.131.0/24 maxlen: 24
157.228.134.0/24 maxlen: 24
157.228.135.0/24 maxlen: 24
157.228.136.0/24 maxlen: 24
157.228.137.0/24 maxlen: 24
2a0c:5d00:3001::/48 maxlen: 48
2a0c:5d00:ff03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:30:6d:fa:f6:9d:61:5a:af:73:74:89:32:b0:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 5 18:29:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37d0db1ab2bbe2bd6433a0e96768f6f076d0c961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:08:92:8d:78:8d:64:cb:e4:e7:65:fe:61:
8b:28:b4:45:6e:b2:b9:68:fc:ae:c2:f7:b4:20:4e:
d8:e3:f3:03:5d:c3:7b:36:02:b2:fe:f0:b6:94:7e:
4a:92:68:c2:0c:36:be:16:a6:d6:3d:14:24:6d:f4:
81:3c:0a:f7:0d:2a:b5:fc:68:2a:22:d0:81:dc:95:
56:a3:ba:86:72:94:64:71:ce:50:e5:1b:80:4f:39:
b2:01:49:c5:50:3b:0e:4c:1b:a2:21:82:d9:0b:f1:
47:e6:c1:7b:20:19:c8:71:09:fd:dc:f0:a6:26:5b:
ad:67:54:8f:4a:61:b1:62:53:df:22:8b:8d:93:bb:
b0:ea:ee:76:20:0c:63:37:7e:e9:57:11:83:b1:cc:
5d:7f:fe:41:11:ef:8e:1f:ba:e6:5d:9a:7a:8c:3d:
a2:3c:45:bc:1f:d8:43:51:21:97:d8:94:35:ce:85:
a4:43:20:b6:af:bd:76:bb:c3:c2:04:d1:e5:16:48:
e5:22:dd:5d:ae:a6:a2:0a:bb:be:d2:60:89:5c:ac:
8e:52:4b:d2:ea:fe:f1:f4:96:cb:a7:db:80:86:c4:
3c:27:f3:0b:1f:c6:49:33:33:12:a3:62:9f:aa:4f:
e6:2e:bd:ba:ad:ae:b0:c1:cd:8b:66:63:f2:13:a1:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D0:DB:1A:B2:BB:E2:BD:64:33:A0:E9:67:68:F6:F0:76:D0:C9:61
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/N9DbGrK74r1kM6DpZ2j28HbQyWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.128.132.0/23
104.128.136.0/23
104.128.140.0/23
135.136.180.0/24
135.136.188.0/24
135.136.191.0/24
157.228.131.0/24
157.228.134.0-157.228.137.255
IPv6:
2a0c:5d00:3001::/48
2a0c:5d00:ff03::/48
Signature Algorithm: sha256WithRSAEncryption
b5:8c:14:37:f8:a8:f4:a6:59:ab:76:2d:ae:4f:32:b5:24:fa:
4f:c7:4e:b5:ce:66:ac:1b:c2:4a:cc:4b:1a:c6:c6:a6:f7:31:
d1:20:7f:3e:ea:b6:92:50:11:b1:ff:cb:dd:7d:df:06:a0:e3:
93:07:5e:22:ec:55:ed:51:a2:c6:30:88:ed:7e:fc:b9:c2:d6:
ba:bf:19:7b:7b:90:7b:df:56:a9:85:8b:0e:90:0f:e6:55:17:
f0:8d:2c:f9:ff:48:0c:ee:8a:43:8e:1b:c4:52:4e:6a:3b:56:
c7:9f:ac:eb:70:1f:b9:f0:5f:71:94:d2:4b:d8:dd:29:cd:44:
b2:7f:2b:83:5c:66:9c:a1:6f:6d:8d:a5:e6:96:a9:60:00:dc:
a6:bb:9b:e2:3f:61:50:7f:8f:af:a1:74:9d:4d:66:c6:49:66:
94:88:6a:cf:60:de:96:d9:64:3f:57:c3:f2:5e:af:4c:df:84:
d2:4e:86:15:4c:fa:74:a9:87:5b:76:08:25:69:e9:46:ca:be:
a2:a2:54:ed:d2:25:c4:07:4b:ac:06:1b:9e:aa:c7:1b:0a:7f:
91:a9:89:fb:dc:9b:da:97:c3:6b:a5:3d:e2:ed:23:bc:b1:77:
3d:32:74:79:60:bd:99:ea:44:d5:e5:1b:a2:3e:08:ad:a9:bd:
64:70:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:19 2026 by rpki-client