Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/nyidShnDMtpVxyvL6HeAlijOSDQ.roa
File: nyidShnDMtpVxyvL6HeAlijOSDQ.roa (raw, json)
Hash identifier: vbNVmcPeGsaUnYz415iIBYnjZiWUpKnA7gUFzA/n9Rg=
Subject key identifier: 9F:28:9D:4A:19:C3:32:DA:55:C7:2B:CB:E8:77:80:96:28:CE:48:34
Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial: 019FF55EFEB222082A3F462E680E47B7AF11
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/nyidShnDMtpVxyvL6HeAlijOSDQ.roa
Signing time: Wed 12 Aug 2026 09:47:51 +0000
ROA not before: Wed 12 Aug 2026 09:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29386
IP address blocks: 178.169.2.0/23 maxlen: 23
178.169.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:5e:fe:b2:22:08:2a:3f:46:2e:68:0e:47:b7:af:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Validity
Not Before: Aug 12 09:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f289d4a19c332da55c72bcbe877809628ce4834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:ff:18:70:89:ba:90:50:9e:27:36:ad:2b:
99:cc:38:4b:59:38:14:83:e6:a1:7d:0e:17:c2:f1:
3a:64:10:a0:b2:67:34:69:34:50:76:69:62:3c:8f:
75:eb:5c:48:29:63:cb:43:4d:75:aa:b0:32:6c:f0:
01:b5:56:1a:37:84:44:0c:23:2a:d6:c9:d6:b9:5d:
e4:d1:80:c6:6d:7c:d6:0f:c9:b3:72:78:ee:48:15:
c4:91:04:ac:10:d8:7e:34:82:6d:ba:15:e5:ba:08:
eb:3c:2f:bb:4a:e3:3a:d5:49:e3:33:0c:1d:5f:29:
f7:aa:a7:0d:13:49:f8:9d:f4:d6:4f:79:c2:d6:f7:
ad:5e:ce:d3:ae:57:07:de:b1:c4:7a:7b:4d:6b:82:
7c:6e:c8:18:82:fc:3e:d5:5d:24:2c:f2:9f:f5:83:
73:e9:22:28:b0:9e:2e:29:59:e8:39:02:a4:4f:70:
a3:9e:d0:c0:2c:04:e4:eb:a4:6d:fb:69:a7:30:4f:
61:fe:b2:2d:c5:84:50:0e:2c:27:27:56:0e:e7:ad:
14:b5:ed:1b:47:30:65:67:f8:e7:a6:e4:25:19:7f:
18:46:35:e4:97:e5:e5:b2:c1:c4:76:91:52:a7:99:
54:ed:fb:ff:00:d0:e1:67:69:82:c9:31:48:c3:71:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:28:9D:4A:19:C3:32:DA:55:C7:2B:CB:E8:77:80:96:28:CE:48:34
X509v3 Authority Key Identifier:
keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/nyidShnDMtpVxyvL6HeAlijOSDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.169.2.0-178.169.5.255
Signature Algorithm: sha256WithRSAEncryption
d1:f9:28:61:93:99:5a:bb:8d:77:92:83:33:49:30:a2:36:45:
76:5e:f4:a1:e7:8a:4e:40:83:40:d9:d6:ea:48:59:31:3b:bb:
00:75:07:c3:0f:fa:3c:f5:01:4c:b9:e0:b8:81:2c:65:04:8d:
bf:ff:48:56:9b:05:19:6e:d1:da:dc:63:20:0c:63:61:a0:e0:
ea:c1:1b:4b:d9:47:9f:ed:ff:7a:f0:8f:82:09:52:21:63:83:
a1:ab:f5:43:e8:c9:52:2d:89:ed:a1:e2:dc:1d:8b:9e:8f:09:
c5:2e:5d:b3:1e:7a:19:b5:f6:35:b2:7f:ea:4b:91:7b:50:f5:
8f:21:68:7c:5a:5a:d3:2b:cf:91:ba:e1:73:d8:08:45:3b:83:
a4:a3:7f:63:43:f4:d3:32:db:d4:4b:e0:40:4a:62:99:b3:b3:
01:11:a7:fb:20:e0:af:62:f8:c6:c8:02:2f:57:d1:dc:38:a4:
45:63:b6:ab:07:de:c2:91:02:e6:6b:34:21:d0:22:b3:00:4c:
49:49:e1:c3:8a:18:4a:a5:02:4e:d2:e3:f0:58:e3:37:73:7e:
0a:00:ac:9c:71:4d:84:41:25:b1:f2:36:9d:4b:3d:fe:6d:6f:
f4:77:6a:63:aa:c5:d1:21:1f:93:e1:34:a3:8e:b5:71:86:ed:
5d:bd:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:59:34 2026 by rpki-client