Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/n0Pjl1iN4UJD00VVk1WPBIdEbfI.roa
File: n0Pjl1iN4UJD00VVk1WPBIdEbfI.roa (raw, json)
Hash identifier: APVkSzx555X6U1mDDbfUdUA6bl5/k8buaX5a/5aJA9Q=
Subject key identifier: 9F:43:E3:97:58:8D:E1:42:43:D3:45:55:93:55:8F:04:87:44:6D:F2
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019C6552391FF02A004FE95AC9713307E767
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/n0Pjl1iN4UJD00VVk1WPBIdEbfI.roa
Signing time: Mon 16 Feb 2026 07:20:13 +0000
ROA not before: Mon 16 Feb 2026 07:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204997
IP address blocks: 104.128.132.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.140.0/24 maxlen: 24
104.128.141.0/24 maxlen: 24
2a0c:5d00:3001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:52:39:1f:f0:2a:00:4f:e9:5a:c9:71:33:07:e7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Feb 16 07:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f43e397588de14243d3455593558f0487446df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:5e:bc:82:61:1e:cb:c6:fb:fd:2b:96:57:
da:65:39:de:6e:03:33:8f:e3:1a:a5:c9:2e:d3:1f:
35:a9:d6:a3:c2:e5:4c:3a:52:46:89:3a:08:10:ef:
98:2e:87:74:0d:ed:3f:b3:14:85:c3:ab:f6:4f:28:
f2:ff:ab:07:8a:21:f0:f3:41:c7:58:c3:29:df:64:
8e:f0:56:ca:a7:89:03:32:7d:8f:eb:d8:ca:53:ed:
8d:a6:56:90:da:b0:15:3b:a1:f8:ae:ab:27:16:c1:
4a:f6:22:e9:0b:30:52:af:8e:3f:9c:c2:e0:3c:71:
b3:1c:88:1e:f6:d8:2d:d7:97:b7:87:3d:ea:7a:20:
2c:c0:2e:6c:aa:cc:b6:cf:84:1c:4a:76:67:dc:4f:
d2:ca:b5:a9:c2:d8:df:73:e0:26:e1:0b:1d:21:3a:
ba:c5:09:4d:40:96:34:e8:93:8d:dd:b7:69:83:0f:
6c:d7:d1:ca:3a:5d:e8:e1:eb:36:47:27:ad:bb:9c:
56:fb:55:7d:75:78:41:1d:2b:12:7f:b1:51:43:8c:
fd:4d:b2:e3:26:fc:38:68:a5:b3:5d:aa:c6:7e:ce:
4b:da:31:7c:1c:28:d7:a3:02:80:6a:b5:31:4e:ff:
18:f7:f9:2e:5d:52:35:5e:4e:0c:53:e7:43:37:8b:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:E3:97:58:8D:E1:42:43:D3:45:55:93:55:8F:04:87:44:6D:F2
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/n0Pjl1iN4UJD00VVk1WPBIdEbfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.128.132.0/23
104.128.140.0/23
IPv6:
2a0c:5d00:3001::/48
Signature Algorithm: sha256WithRSAEncryption
aa:6e:29:01:20:f8:42:ef:ae:d6:62:b0:8b:8e:5c:ce:7f:2c:
28:86:bb:bc:79:b1:7a:e1:97:3d:a9:4b:b0:16:b9:2e:ba:59:
bc:b9:35:d2:d2:f4:a6:79:d9:db:6d:32:85:9f:c9:43:52:4a:
b3:66:63:6f:78:0a:c6:c8:46:0f:d4:22:f2:d9:71:85:17:4e:
c7:b3:b6:12:ae:3d:c0:e7:6d:87:b2:07:41:5d:34:4d:1f:ac:
d1:74:ba:fc:3e:8a:23:d9:f9:9f:44:19:83:87:dd:91:c2:4c:
97:18:e0:e8:ce:21:fa:e9:b9:2e:d1:f3:1b:71:9f:bc:2d:fd:
05:3b:f4:b5:f1:ed:a0:a1:54:81:78:9f:76:dc:de:78:41:9b:
21:85:9a:96:14:e0:5d:2c:ab:1b:29:0c:48:85:e2:c7:d2:69:
5c:9d:7a:99:bb:a1:79:bd:67:e0:86:e4:46:1e:16:f5:cd:08:
09:1f:3c:a8:6a:de:96:61:0d:f2:4d:30:f2:51:bc:1e:ab:5d:
ca:87:bb:27:b3:92:32:63:42:1e:d6:7a:5d:55:5d:3c:f0:05:
f6:6a:cf:a6:53:fe:a1:0c:e2:a4:d7:e6:5b:0a:67:b5:13:45:
d1:54:4c:d9:49:2f:a6:1a:b8:ac:07:88:fb:d4:8e:d0:d5:c0:
44:12:33:95
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZxlUjkf8CoAT+layXEzB+dnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjYwMjE2MDcyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjQzZTM5NzU4OGRlMTQyNDNkMzQ1NTU5MzU1OGYwNDg3NDQ2ZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjclevIJhHsvG+/0rllfaZTnebgMz
j+Mapcku0x81qdajwuVMOlJGiToIEO+YLod0De0/sxSFw6v2Tyjy/6sHiiHw80HH
WMMp32SO8FbKp4kDMn2P69jKU+2NplaQ2rAVO6H4rqsnFsFK9iLpCzBSr44/nMLg
PHGzHIge9tgt15e3hz3qeiAswC5sqsy2z4QcSnZn3E/SyrWpwtjfc+Am4QsdITq6
xQlNQJY06JON3bdpgw9s19HKOl3o4es2Ryetu5xW+1V9dXhBHSsSf7FRQ4z9TbLj
Jvw4aKWzXarGfs5L2jF8HCjXowKAarUxTv8Y9/kuXVI1Xk4MU+dDN4tDzwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFJ9D45dYjeFCQ9NFVZNVjwSHRG3yMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvbjBQamwxaU40VUpEMDBWVmsxV1BCSWRFYmZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBaICEAwQB
aICMMA8EAgACMAkDBwAqDF0AMAEwDQYJKoZIhvcNAQELBQADggEBAKpuKQEg+ELv
rtZisIuOXM5/LCiGu7x5sXrhlz2pS7AWuS66Wby5NdLS9KZ52dttMoWfyUNSSrNm
Y294CsbIRg/UIvLZcYUXTsezthKuPcDnbYeyB0FdNE0frNF0uvw+iiPZ+Z9EGYOH
3ZHCTJcY4OjOIfrpuS7R8xtxn7wt/QU79LXx7aChVIF4n3bc3nhBmyGFmpYU4F0s
qxspDEiF4sfSaVydepm7oXm9Z+CG5EYeFvXNCAkfPKhq3pZhDfJNMPJRvB6rXcqH
uyezkjJjQh7Wel1VXTzwBfZqz6ZT/qEM4qTX5lsKZ7UTRdFUTNlJL6YauKwHiPvU
jtDVwEQSM5U=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:59 2026 by rpki-client