Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KwreXy8e2vLuWoP4kjj-NP4ZM94.roa
File: KwreXy8e2vLuWoP4kjj-NP4ZM94.roa (raw, json)
Hash identifier: inVYNMmXLLPSv78FFtBCMcwY8KE3Vh6yQuYSLowXlXc=
Subject key identifier: 2B:0A:DE:5F:2F:1E:DA:F2:EE:5A:83:F8:92:38:FE:34:FE:19:33:DE
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019FA06F92A3F95DE76E8981E2ABC0C8DE37
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KwreXy8e2vLuWoP4kjj-NP4ZM94.roa
Signing time: Sun 26 Jul 2026 21:58:14 +0000
ROA not before: Sun 26 Jul 2026 21:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204997
IP address blocks: 104.128.132.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.136.0/24 maxlen: 24
104.128.137.0/24 maxlen: 24
104.128.140.0/24 maxlen: 24
104.128.141.0/24 maxlen: 24
135.136.180.0/24 maxlen: 24
135.136.188.0/24 maxlen: 24
135.136.191.0/24 maxlen: 24
157.228.136.0/24 maxlen: 24
157.228.137.0/24 maxlen: 24
2a0c:5d00:3001::/48 maxlen: 48
2a0c:5d00:ff03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:6f:92:a3:f9:5d:e7:6e:89:81:e2:ab:c0:c8:de:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 26 21:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b0ade5f2f1edaf2ee5a83f89238fe34fe1933de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:38:23:52:df:15:16:58:b3:ee:47:9f:1d:
c6:d2:ac:4e:0d:ec:a3:9d:16:bd:fd:be:bc:15:4b:
27:0b:63:47:44:3b:c8:7f:f7:e9:b4:63:25:c8:db:
0c:35:ed:ab:9e:f0:fd:42:44:66:a4:34:ea:bb:d5:
3b:cd:32:27:77:a1:d2:91:ba:18:79:57:2b:c4:84:
dd:81:1d:ef:4a:49:42:a2:fd:95:1b:9a:63:04:30:
ec:2b:87:30:90:dd:a8:53:69:5d:a2:75:ba:55:bd:
7d:a7:f9:98:ba:16:15:8d:a5:79:bc:95:41:f8:53:
dd:26:d0:67:9c:1f:8d:56:6b:c1:bb:64:a2:47:02:
a8:b1:73:23:93:b6:12:b8:36:e0:c8:2f:f3:f3:7a:
fd:82:b7:15:6f:f2:fa:6a:06:61:65:fc:00:48:c5:
22:4a:51:da:e1:f3:53:3c:26:83:c2:39:5e:b1:77:
6a:fd:72:89:79:4e:07:8d:a8:92:f5:c3:12:f7:86:
ea:3f:b3:7d:9e:9b:9a:08:a5:ee:8c:ca:6f:bb:74:
51:27:e0:c0:eb:e4:e9:2c:90:9f:aa:18:e8:a9:0a:
33:ab:06:54:ac:3f:08:9f:49:ef:fb:6f:63:4f:cc:
87:aa:bd:f2:ca:9c:b6:24:7b:02:96:a2:68:d6:84:
b7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0A:DE:5F:2F:1E:DA:F2:EE:5A:83:F8:92:38:FE:34:FE:19:33:DE
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KwreXy8e2vLuWoP4kjj-NP4ZM94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.128.132.0/23
104.128.136.0/23
104.128.140.0/23
135.136.180.0/24
135.136.188.0/24
135.136.191.0/24
157.228.136.0/23
IPv6:
2a0c:5d00:3001::/48
2a0c:5d00:ff03::/48
Signature Algorithm: sha256WithRSAEncryption
3b:ef:97:08:95:77:39:fb:1b:11:ad:7c:7b:24:d9:85:49:3a:
33:70:1d:e5:73:77:8d:94:8a:ca:dd:0f:41:4a:39:b7:b0:24:
62:ca:4c:18:e6:ae:33:90:2c:e1:07:b5:5c:9d:df:7d:0f:b9:
01:6b:25:cc:2e:33:23:97:b5:96:00:45:70:47:06:8a:a9:c5:
b5:58:b7:f1:3d:e1:3e:cd:8b:73:74:41:18:18:f0:9c:29:43:
f5:2f:e8:4c:a3:3e:f9:6c:34:d1:83:89:c4:e2:60:49:8b:6a:
ec:46:08:a9:e5:90:a4:5a:d0:ca:dc:77:ec:78:78:c1:d6:ac:
39:8b:9d:56:e8:60:da:c1:09:91:0c:7d:59:12:50:75:5e:cb:
79:57:3a:f4:ec:3b:fc:d6:45:0e:6c:fe:43:d7:09:3e:1a:aa:
cf:d4:ef:a9:bc:94:83:db:5f:a2:37:5b:e7:32:96:74:67:5d:
1e:0d:3e:66:db:a7:69:9d:5d:81:88:38:2e:dc:dc:69:2e:d3:
b1:77:d6:56:20:3e:c4:36:45:09:5f:f1:ea:c4:ba:af:ef:3e:
3b:1b:a1:8f:58:90:75:ea:33:10:48:24:f8:eb:3e:52:4a:d2:
1f:ca:ea:f3:67:65:8c:1d:36:ac:9a:2a:a7:39:6d:1c:10:14:
fc:8e:a1:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:11 2026 by rpki-client