Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NYANP8A7p_FlMCJYLcEW_FqQt5g.roa
File: NYANP8A7p_FlMCJYLcEW_FqQt5g.roa (raw, json)
Hash identifier: 5yHd68tMIcbSa71MHxRrdm6YHhzC5ud7TYIiCAc6BJA=
Subject key identifier: 35:80:0D:3F:C0:3B:A7:F1:65:30:22:58:2D:C1:16:FC:5A:90:B7:98
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FF356FB9AE36C4939A820E430A9EE14F3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NYANP8A7p_FlMCJYLcEW_FqQt5g.roa
Signing time: Wed 12 Aug 2026 00:19:51 +0000
ROA not before: Wed 12 Aug 2026 00:19:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 89.144.16.0/24 maxlen: 24
94.103.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f3:56:fb:9a:e3:6c:49:39:a8:20:e4:30:a9:ee:14:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 12 00:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35800d3fc03ba7f1653022582dc116fc5a90b798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:f4:0c:7b:c3:0e:ba:3d:9f:b7:47:00:a2:
f8:50:37:7e:13:19:07:d6:e4:6d:a8:0b:24:96:50:
e8:3e:3f:2f:74:67:ea:df:d9:62:98:fe:8c:2c:9a:
d0:cc:39:ce:a2:49:9a:5c:46:05:1d:b1:ed:79:5f:
d7:b0:12:7e:8d:1f:43:29:a6:2a:dc:d9:be:f9:2d:
e1:f9:d4:4b:ce:76:a0:c0:86:f0:52:b4:55:3e:ad:
2e:a0:67:40:d9:3d:0b:8b:cc:23:13:16:63:41:05:
0a:10:e7:f6:02:0f:32:43:dd:6c:43:d6:83:10:71:
6d:a6:73:5a:ef:d4:cd:3c:af:df:12:bd:85:78:12:
00:da:bd:6b:bb:c3:9e:6f:9e:f3:a0:4c:4d:2d:99:
14:90:32:0a:91:a4:3e:e5:7b:88:11:83:1d:80:4f:
ea:85:50:4a:84:20:5e:9c:fb:8a:75:04:6a:f8:a9:
17:ef:ff:fd:11:0c:ac:fe:ab:e3:2a:09:13:7c:a4:
dc:68:b4:d1:be:03:55:9d:fb:20:51:f3:f4:18:1a:
50:8c:5d:e7:93:29:b8:08:74:a6:92:7e:e3:ed:22:
75:1d:76:b5:e9:b3:fd:a9:1b:55:e2:5d:c9:8e:68:
7b:3e:f8:b7:b8:de:20:31:7f:11:3e:28:96:78:9c:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:80:0D:3F:C0:3B:A7:F1:65:30:22:58:2D:C1:16:FC:5A:90:B7:98
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NYANP8A7p_FlMCJYLcEW_FqQt5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.16.0/24
94.103.169.0/24
Signature Algorithm: sha256WithRSAEncryption
02:dd:51:37:34:9f:82:51:31:e3:35:e5:cb:bc:69:3e:b2:86:
af:bb:bd:cb:bf:ec:cd:b2:02:9c:57:18:54:8f:9a:b9:61:00:
cf:0d:61:b6:f4:a7:ab:a9:3e:7a:99:eb:a9:e3:6e:c2:aa:f5:
7f:6b:58:ec:d3:be:16:71:51:d4:c7:8c:18:4b:f8:de:2a:39:
60:b7:76:a1:e4:06:23:8c:79:e4:53:c8:03:ad:b4:15:60:ad:
74:d8:1f:d8:69:a6:e9:0e:48:1d:22:9e:b4:38:5a:3a:e9:92:
e1:a6:0a:5f:71:fd:65:39:f8:0c:21:81:f8:11:92:0a:81:f8:
6d:62:13:de:86:7f:d2:0b:08:8e:43:30:de:6e:34:60:75:dc:
95:95:cc:de:51:be:12:ba:33:95:6d:90:9e:b1:57:0c:dd:b2:
4e:47:ea:f3:9e:cd:55:86:86:97:6d:a6:1f:4c:cf:89:da:2e:
03:31:ae:57:ea:fb:42:0c:92:3f:ff:7c:37:77:e8:1a:aa:c9:
1e:31:37:8d:e5:bb:34:96:4c:8c:1e:0c:0d:61:ff:0a:8b:33:
46:45:79:12:0a:11:99:84:78:fd:3a:61:cf:1b:bf:78:ca:35:
9f:61:bd:64:54:7c:85:16:0e:74:13:36:0a:fe:96:e3:eb:74:
66:ef:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:05:12 2026 by rpki-client