Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/nYd9WAHfnnkyefHNJxlyLZw7juY.roa
File: nYd9WAHfnnkyefHNJxlyLZw7juY.roa (raw, json)
Hash identifier: 0Jl7sSfyxb2cLvac18MQkQRRmrhCrh71DaYL81jG5C4=
Subject key identifier: 9D:87:7D:58:01:DF:9E:79:32:79:F1:CD:27:19:72:2D:9C:3B:8E:E6
Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial: 019E6DB049B90B638107605C859B3B6D4855
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/nYd9WAHfnnkyefHNJxlyLZw7juY.roa
Signing time: Thu 28 May 2026 08:25:29 +0000
ROA not before: Thu 28 May 2026 08:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216016
IP address blocks: 188.95.199.0/24 maxlen: 24
2a14:300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:b0:49:b9:0b:63:81:07:60:5c:85:9b:3b:6d:48:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Validity
Not Before: May 28 08:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d877d5801df9e793279f1cd2719722d9c3b8ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:01:b5:f8:40:7a:33:99:46:28:98:86:f3:
9a:a2:fa:b7:05:2d:24:e5:14:20:f0:5a:d0:e6:f1:
84:02:62:45:3f:93:4a:7e:3a:e8:c3:e2:c7:82:bc:
07:97:2a:2f:c4:66:09:62:96:e5:d0:0e:84:b1:e1:
a1:d0:e9:66:13:13:ef:48:58:a1:92:6c:53:a1:a1:
b0:7b:d2:a2:97:1f:78:69:ad:4b:86:c3:6d:92:2a:
f7:cc:f6:e1:c9:f6:c1:4e:cf:06:83:71:3d:51:bc:
fe:70:14:42:37:50:3f:59:0e:e6:19:df:96:32:81:
63:ac:c5:80:a4:3a:54:12:15:52:a4:7c:14:8a:aa:
bb:8c:30:ed:3b:15:a9:3e:65:f8:90:da:15:7f:82:
6b:6e:6a:33:67:b0:ab:12:ee:c0:08:7d:9e:b2:72:
82:af:05:3e:6d:a8:ec:59:13:df:3e:ac:f0:ec:8c:
37:8b:1f:09:27:ed:a2:bc:cf:1d:17:9e:4b:81:76:
6a:2b:5f:81:c1:5f:1f:95:b7:33:9e:9e:79:88:50:
37:75:fe:b1:5f:c0:7d:86:cf:6a:e9:75:56:dd:79:
ba:21:91:c5:00:30:98:cd:99:b1:8e:8d:79:53:ca:
6e:dc:aa:2d:49:5e:d6:50:91:25:38:04:01:9c:97:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:7D:58:01:DF:9E:79:32:79:F1:CD:27:19:72:2D:9C:3B:8E:E6
X509v3 Authority Key Identifier:
keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/nYd9WAHfnnkyefHNJxlyLZw7juY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.199.0/24
IPv6:
2a14:300::/29
Signature Algorithm: sha256WithRSAEncryption
64:70:ed:0b:b1:8f:06:7d:47:c9:5b:a3:2f:ac:8c:be:9c:55:
bd:13:7f:9d:46:a6:c6:6e:4c:d3:2a:b6:20:70:6d:f1:ca:cd:
d4:58:c2:bd:65:a5:57:2f:f0:90:47:69:66:8e:74:41:4d:74:
8e:93:84:59:ca:7e:13:4f:76:11:97:3b:ac:96:c0:6c:8e:46:
30:da:83:0e:80:a7:22:a1:d6:58:93:85:54:34:35:9a:41:95:
54:a9:6c:62:b0:1b:84:a6:9f:20:fd:08:15:44:ce:c2:41:9c:
37:66:69:c9:4c:9e:4a:1b:4e:64:06:46:6e:32:5d:50:a1:5b:
de:05:f7:de:c3:57:de:77:c9:29:70:ff:90:f8:f7:9a:c1:c1:
6e:2f:f2:00:be:90:35:93:5c:bb:cd:12:ed:5b:d2:84:6f:89:
09:1d:62:3f:2e:f5:c8:4f:8a:26:9c:0d:cd:70:72:a2:d9:3f:
d9:36:78:5d:a0:22:96:26:89:e5:bb:81:f2:e0:2d:3d:37:7f:
40:bd:df:9d:b4:41:e3:b0:d3:23:73:54:dd:d8:1e:30:c6:46:
5b:02:0b:89:bf:be:31:d1:20:77:18:10:6c:6e:8d:9f:99:f1:
32:00:c0:7c:d5:57:59:62:5c:10:35:73:52:2c:d0:da:81:8d:
08:3c:cc:6f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ5tsEm5C2OBB2BchZs7bUhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDZhZDhiNTEwY2Y1NTk0ODVlMzYxMTU1NWI4YjQzOWVm
NTMzYmIwHhcNMjYwNTI4MDgyNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDg3N2Q1ODAxZGY5ZTc5MzI3OWYxY2QyNzE5NzIyZDljM2I4ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhABtfhAejOZRiiYhvOaovq3BS0k
5RQg8FrQ5vGEAmJFP5NKfjrow+LHgrwHlyovxGYJYpbl0A6EseGh0OlmExPvSFih
kmxToaGwe9Kilx94aa1LhsNtkir3zPbhyfbBTs8Gg3E9Ubz+cBRCN1A/WQ7mGd+W
MoFjrMWApDpUEhVSpHwUiqq7jDDtOxWpPmX4kNoVf4JrbmozZ7CrEu7ACH2esnKC
rwU+bajsWRPfPqzw7Iw3ix8JJ+2ivM8dF55LgXZqK1+BwV8flbcznp55iFA3df6x
X8B9hs9q6XVW3Xm6IZHFADCYzZmxjo15U8pu3KotSV7WUJElOAQBnJfmbwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ2HfVgB3555MnnxzScZci2cO47mMB8GA1UdIwQY
MBaAFEpGrYtRDPVZSF42EVVbi0Oe9TO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQt
ODQyNmFhMWE2ZDJmLzEvbllkOVdBSGZubmt5ZWZITkp4bHlMWnc3anVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQtODQyNmFhMWE2ZDJm
LzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAvF/HMA0E
AgACMAcDBQMqFAMAMA0GCSqGSIb3DQEBCwUAA4IBAQBkcO0LsY8GfUfJW6MvrIy+
nFW9E3+dRqbGbkzTKrYgcG3xys3UWMK9ZaVXL/CQR2lmjnRBTXSOk4RZyn4TT3YR
lzuslsBsjkYw2oMOgKciodZYk4VUNDWaQZVUqWxisBuEpp8g/QgVRM7CQZw3ZmnJ
TJ5KG05kBkZuMl1QoVveBffew1fed8kpcP+Q+PeawcFuL/IAvpA1k1y7zRLtW9KE
b4kJHWI/LvXIT4omnA3NcHKi2T/ZNnhdoCKWJonlu4Hy4C09N39Avd+dtEHjsNMj
c1Td2B4wxkZbAguJv74x0SB3GBBsbo2fmfEyAMB81VdZYlwQNXNSLNDagY0IPMxv
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:45:28 2026 by rpki-client