Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/A1MQklWg-A5UnSZ2wJYzhx5LnTk.roa
File: A1MQklWg-A5UnSZ2wJYzhx5LnTk.roa (raw, json)
Hash identifier: L51VXZiGJss90SwacOguLCSRISZlKNtCuqmAK5BU4Z4=
Subject key identifier: 03:53:10:92:55:A0:F8:0E:54:9D:26:76:C0:96:33:87:1E:4B:9D:39
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A07BFD1C857304DCA88818225D491E40A2
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/A1MQklWg-A5UnSZ2wJYzhx5LnTk.roa
Signing time: Mon 07 Sep 2026 13:09:40 +0000
ROA not before: Mon 07 Sep 2026 13:09:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204997
IP address blocks: 104.128.132.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.136.0/24 maxlen: 24
104.128.137.0/24 maxlen: 24
104.128.140.0/24 maxlen: 24
104.128.141.0/24 maxlen: 24
135.136.180.0/24 maxlen: 24
135.136.188.0/24 maxlen: 24
135.136.191.0/24 maxlen: 24
157.228.131.0/24 maxlen: 24
157.228.134.0/24 maxlen: 24
157.228.135.0/24 maxlen: 24
157.228.136.0/24 maxlen: 24
157.228.137.0/24 maxlen: 24
157.228.190.0/24 maxlen: 24
2a0c:5d00:3001::/48 maxlen: 48
2a0c:5d00:ff03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:fd:1c:85:73:04:dc:a8:88:18:22:5d:49:1e:40:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 7 13:09:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0353109255a0f80e549d2676c09633871e4b9d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:db:df:d7:cd:bd:72:20:ff:24:06:89:36:
9d:9b:72:4f:43:d5:f5:6a:f5:b8:98:d0:0a:8b:de:
fc:d6:d0:e7:71:6c:74:81:2e:00:18:29:c7:5c:ae:
80:31:81:58:d9:c5:88:56:98:83:cd:82:f2:6e:3c:
bb:ac:c7:e6:ba:ba:81:ff:b2:6f:09:f0:3e:f3:8f:
e1:2a:32:28:92:bb:05:70:72:c2:b9:f7:3e:d3:c1:
f7:7b:a3:86:64:9f:c0:20:d2:70:8c:92:fd:da:9c:
d4:ea:6e:cf:12:25:ab:35:52:ac:47:a9:5a:aa:89:
b7:4b:4f:25:06:c8:82:05:c5:71:b7:c2:17:82:22:
60:7e:07:e3:d3:f7:c3:9a:ea:95:fb:a4:84:55:30:
7e:68:50:8a:c9:a6:ef:aa:ad:ac:34:3d:a7:3e:de:
e9:18:82:30:1e:fa:77:81:d6:49:bc:a8:69:ac:da:
7a:4f:0e:87:6a:30:42:2b:fb:4d:82:bf:36:5f:38:
76:26:51:44:6c:df:21:9e:2d:95:50:86:3b:d3:b6:
57:84:7f:b7:f2:02:32:58:9c:ed:d4:1e:eb:34:db:
43:f6:21:31:8f:b9:a1:8a:71:c2:37:3a:01:a0:74:
d1:4c:86:0b:a0:59:c3:0a:3d:fc:95:26:1d:7a:27:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:53:10:92:55:A0:F8:0E:54:9D:26:76:C0:96:33:87:1E:4B:9D:39
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/A1MQklWg-A5UnSZ2wJYzhx5LnTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.128.132.0/23
104.128.136.0/23
104.128.140.0/23
135.136.180.0/24
135.136.188.0/24
135.136.191.0/24
157.228.131.0/24
157.228.134.0-157.228.137.255
157.228.190.0/24
IPv6:
2a0c:5d00:3001::/48
2a0c:5d00:ff03::/48
Signature Algorithm: sha256WithRSAEncryption
6c:61:80:83:56:c3:46:60:04:e9:b2:63:98:9e:d4:82:a9:1c:
20:31:34:70:39:e0:ea:a1:2c:cd:01:19:a6:70:3b:a3:a3:d6:
9e:13:0c:1a:75:fb:39:56:1b:42:a2:6b:42:52:c2:32:8c:43:
4f:ea:ea:a6:45:a3:8b:61:7f:e8:5d:cd:fb:d9:57:0a:45:f7:
dc:94:da:ee:bc:f2:89:1c:cf:cb:c1:cd:21:be:12:8f:64:22:
e6:14:d3:40:e4:70:69:5b:6b:d6:ed:de:2e:68:8c:9c:c2:e3:
27:73:13:30:52:70:6a:38:e2:b7:ff:24:2b:8e:bf:50:f9:26:
fa:cd:9a:16:68:b6:5b:3d:2f:7a:04:4f:ba:25:0a:a3:45:b6:
da:07:8f:7f:43:9a:b1:93:bd:89:30:a6:b9:12:16:1a:bb:81:
bc:74:23:f1:5c:f0:11:54:2e:22:fa:40:71:72:98:6a:53:9d:
03:4b:97:ad:e0:46:41:4d:d1:88:50:c1:ca:ba:2c:c9:05:c9:
fe:27:37:c3:17:56:e5:e5:4c:01:37:7c:30:05:86:9d:27:57:
9c:49:1e:2b:95:91:e1:f5:5e:c6:c3:13:96:54:72:21:35:51:
83:b5:c8:a8:88:ad:6a:a0:5d:67:f3:46:cb:b7:56:1c:e4:f4:
2a:30:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:14:11 2026 by rpki-client