Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/nEuFgjSf9CSNHr9s0kOq0Fa4Hq0.roa
File: nEuFgjSf9CSNHr9s0kOq0Fa4Hq0.roa (raw, json)
Hash identifier: u+gexLqI/UIAUkDFD2X4A593OmunHk5AwHDiMsNNn+Y=
Subject key identifier: 9C:4B:85:82:34:9F:F4:24:8D:1E:BF:6C:D2:43:AA:D0:56:B8:1E:AD
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A05BF1047FA828A661C44853C804D33C23
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/nEuFgjSf9CSNHr9s0kOq0Fa4Hq0.roa
Signing time: Tue 01 Sep 2026 07:48:36 +0000
ROA not before: Tue 01 Sep 2026 07:48:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197703
IP address blocks: 132.243.30.0/23 maxlen: 23
135.136.182.0/23 maxlen: 23
135.136.182.0/24 maxlen: 24
135.136.183.0/24 maxlen: 24
157.228.130.0/23 maxlen: 23
157.228.130.0/24 maxlen: 24
157.228.131.0/24 maxlen: 24
157.228.156.0/23 maxlen: 23
157.228.156.0/24 maxlen: 24
157.228.157.0/24 maxlen: 24
2a0c:5d00:3011::/48 maxlen: 48
2a0c:5d00:3012::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f1:04:7f:a8:28:a6:61:c4:48:53:c8:04:d3:3c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 1 07:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c4b8582349ff4248d1ebf6cd243aad056b81ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:17:25:5a:8b:9d:9f:95:0e:d6:3c:28:5c:
d6:b5:3a:ee:1a:d8:d9:81:3c:0a:1d:c2:a1:67:27:
bb:25:d2:16:62:d2:9b:76:a9:8a:43:9f:ee:bf:b2:
53:6c:4f:16:93:c2:05:75:2c:17:ed:26:59:54:7e:
ac:53:29:92:8b:f7:70:2c:52:0c:ff:b1:58:0d:8e:
58:b0:cd:56:1d:ee:1b:65:48:21:3b:83:35:2c:09:
aa:9f:e0:50:2c:76:4a:ed:64:79:7c:38:09:83:49:
0f:ed:8c:02:08:65:c0:d6:8f:65:b9:1e:18:a7:89:
de:9b:00:52:cf:11:33:e8:52:b3:82:af:c6:90:b4:
85:0e:ae:d4:b0:52:d8:ce:19:09:de:9d:46:40:e3:
6a:a4:51:40:e0:c6:b9:cb:5d:a9:76:43:f0:82:9d:
a0:99:28:7c:8a:30:e1:b6:76:59:63:cd:0c:40:dd:
d0:11:9e:ed:98:75:10:74:44:70:de:80:1d:c3:78:
20:ab:fa:4a:3f:84:f5:99:2c:3c:9f:c2:a1:81:52:
f8:19:f9:0c:6a:3b:12:b6:c8:0b:06:fa:52:b6:b6:
66:22:86:53:c8:16:b3:ea:b3:90:d5:38:2d:48:80:
b7:ef:9d:e7:bb:a7:4f:8c:76:f5:14:57:df:b5:c8:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4B:85:82:34:9F:F4:24:8D:1E:BF:6C:D2:43:AA:D0:56:B8:1E:AD
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/nEuFgjSf9CSNHr9s0kOq0Fa4Hq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.30.0/23
135.136.182.0/23
157.228.130.0/23
157.228.156.0/23
IPv6:
2a0c:5d00:3011::-2a0c:5d00:3012:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:1b:1f:cf:f7:09:92:4b:f2:3e:72:f1:68:9b:43:dc:e3:e9:
86:be:17:f3:fb:6f:d5:89:7d:14:92:ee:0f:78:7c:c1:b8:2c:
c4:39:f6:39:db:b2:32:bc:1a:98:09:eb:d6:c8:f5:19:02:4b:
c1:35:16:7c:0e:34:d5:ec:d3:60:25:4d:25:b8:71:40:b2:66:
b6:54:31:b3:30:2c:52:1a:5e:ac:69:08:ef:70:3a:35:1d:85:
4b:8f:17:2f:ad:d2:d3:e9:c3:e5:9d:ce:45:9e:d8:02:e5:6e:
ea:3a:1b:19:ca:46:da:93:5c:cb:69:98:c0:34:09:7d:3c:dc:
b5:d2:ca:ba:2e:14:cd:6e:d6:85:bc:d9:e0:2c:32:7b:8f:c7:
b4:63:cf:de:e0:31:05:e3:d0:92:8e:57:a2:14:76:cb:27:b7:
4e:62:19:d4:4e:e9:b8:f7:b4:b2:44:45:55:63:bd:c3:d7:3d:
0c:cf:42:ee:6a:29:eb:6a:f0:f5:90:3e:c9:d8:07:3c:e5:b5:
46:df:13:fa:83:7f:17:75:a3:bf:19:60:8a:84:06:42:0b:cf:
45:8e:8e:d5:01:d0:e6:95:e0:73:1e:92:88:44:66:02:94:cc:
2a:60:b7:d0:03:dc:58:77:9f:64:40:bc:c9:08:e2:eb:64:2c:
52:75:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:33 2026 by rpki-client