Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/g6sZYsJ1ypENnEpUtLySsOMUY1o.roa
File: g6sZYsJ1ypENnEpUtLySsOMUY1o.roa (raw, json)
Hash identifier: 0w5Spv5lv+XXu5h9F2EE56xENPq4dtFdkA2C/B0IBtM=
Subject key identifier: 83:AB:19:62:C2:75:CA:91:0D:9C:4A:54:B4:BC:92:B0:E3:14:63:5A
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019EF93EFA799D6AD10F0BFB5C6D10B5C7CA
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/g6sZYsJ1ypENnEpUtLySsOMUY1o.roa
Signing time: Wed 24 Jun 2026 10:48:34 +0000
ROA not before: Wed 24 Jun 2026 10:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204997
IP address blocks: 104.128.132.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.136.0/24 maxlen: 24
104.128.137.0/24 maxlen: 24
104.128.140.0/24 maxlen: 24
104.128.141.0/24 maxlen: 24
135.136.180.0/24 maxlen: 24
135.136.188.0/24 maxlen: 24
135.136.191.0/24 maxlen: 24
2a0c:5d00:3001::/48 maxlen: 48
2a0c:5d00:ff03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:3e:fa:79:9d:6a:d1:0f:0b:fb:5c:6d:10:b5:c7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 24 10:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83ab1962c275ca910d9c4a54b4bc92b0e314635a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:c7:44:8f:02:b5:72:a0:a0:43:f0:9c:4e:
72:0a:bd:5e:67:94:f0:76:9a:3c:45:cb:1f:6c:5e:
aa:e0:7a:7f:c9:b9:11:7e:a4:1a:d8:ee:9c:43:9e:
7f:84:f4:6d:97:32:a9:e8:4d:d3:83:d2:9b:2c:28:
b1:c4:b9:38:cd:27:82:96:c8:6f:5f:a2:23:f4:9c:
32:85:21:1f:5b:c2:17:6a:b7:1a:5a:63:09:dd:16:
e7:10:fc:53:c4:4f:cf:28:f7:5a:07:04:0e:41:3f:
7b:00:42:f4:42:32:69:c3:d8:0a:5f:f9:85:99:82:
fc:b4:11:a0:37:b2:1d:d1:a9:fd:06:8a:21:00:d0:
ae:53:5a:bc:c6:06:0b:18:9f:af:a1:84:85:e3:3f:
14:8b:de:31:f5:45:2b:f3:c9:f4:cd:22:6f:e1:af:
8b:e9:e5:2e:92:88:ae:9e:ad:fe:cd:f3:3f:4a:86:
17:47:cb:94:d7:41:e7:ef:6c:f3:75:38:04:3a:ce:
24:1d:ce:50:7e:e3:6b:19:70:18:11:f9:71:d3:dd:
3a:ac:a7:b8:58:57:c3:b2:f5:42:30:6c:d6:37:c0:
77:19:af:56:61:81:cb:08:08:81:4a:b8:5d:5f:e2:
b5:bb:fd:49:a7:5d:ea:c3:13:31:65:81:f8:c0:b1:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:19:62:C2:75:CA:91:0D:9C:4A:54:B4:BC:92:B0:E3:14:63:5A
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/g6sZYsJ1ypENnEpUtLySsOMUY1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.128.132.0/23
104.128.136.0/23
104.128.140.0/23
135.136.180.0/24
135.136.188.0/24
135.136.191.0/24
IPv6:
2a0c:5d00:3001::/48
2a0c:5d00:ff03::/48
Signature Algorithm: sha256WithRSAEncryption
0d:c7:2b:6f:ce:90:cb:c7:20:72:a2:2a:0f:7a:84:e5:70:4f:
8d:be:ad:fd:15:df:8b:c8:89:20:54:9e:97:3a:75:0c:5d:a3:
e0:15:43:64:00:a2:4e:34:77:34:50:ba:e9:fa:3f:60:5b:06:
f4:b1:2c:05:18:a2:82:10:ba:6b:09:09:75:15:49:58:55:1d:
30:5d:83:89:ec:09:2e:01:73:42:c6:9c:a2:f7:40:7f:ee:8b:
c6:d7:57:08:c4:0d:fd:27:07:f7:b9:3c:4a:9b:28:da:97:81:
a2:10:b7:b1:8c:bf:01:c7:01:35:8e:9c:f7:c1:68:55:33:fc:
f8:31:38:ca:ff:21:91:44:87:04:58:7d:f9:45:5b:5c:67:64:
b8:55:46:a3:ac:04:cc:fc:b1:a0:5f:ad:58:37:0f:ff:4f:5d:
b9:da:85:ea:c9:8f:fc:c0:d8:28:3e:0b:6c:bb:0a:f4:f4:ba:
3a:12:f4:ec:12:f8:36:73:90:35:f9:96:cb:44:9c:61:9e:39:
94:59:e8:5d:1e:02:c7:3b:14:d6:d1:55:5e:3e:64:7d:54:a6:
3c:06:54:7f:05:96:55:95:18:0d:1f:f1:c1:a0:fc:6b:fd:ee:
74:df:da:39:af:3f:4b:55:bb:98:e2:7d:e2:95:7e:53:e1:80:
44:0c:d4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:14 2026 by rpki-client