Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/nynFadiKhVTTAb1VPU3Cmie2xF0.roa
File: nynFadiKhVTTAb1VPU3Cmie2xF0.roa (raw, json)
Hash identifier: 3QJ9XmE3XhfqpSOZbO8CGD3RHkFQ2Ty7eUnID8LQjBc=
Subject key identifier: 9F:29:C5:69:D8:8A:85:54:D3:01:BD:55:3D:4D:C2:9A:27:B6:C4:5D
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 019F585B91688FDC860F99F3EB41844FE910
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/nynFadiKhVTTAb1VPU3Cmie2xF0.roa
Signing time: Sun 12 Jul 2026 22:03:43 +0000
ROA not before: Sun 12 Jul 2026 22:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 195.95.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:58:5b:91:68:8f:dc:86:0f:99:f3:eb:41:84:4f:e9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jul 12 22:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f29c569d88a8554d301bd553d4dc29a27b6c45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:e1:bd:b7:05:80:12:8a:6a:5b:d2:a0:1b:
7b:75:76:80:86:46:49:56:0c:8c:5a:67:b9:df:be:
3d:fe:2e:d0:bd:81:ac:ab:07:24:58:ac:cf:54:92:
02:bc:86:58:19:06:ca:98:53:7c:cf:e0:04:ca:60:
64:91:0a:07:90:7f:2e:51:99:c7:be:a8:86:61:27:
37:92:92:3a:c5:53:23:28:dd:9e:6c:b6:3c:09:44:
78:4b:f2:40:d1:6b:7d:55:46:7e:da:a7:1b:e7:e4:
a9:96:c9:e8:a4:14:61:06:57:87:2f:d3:e8:ec:43:
e4:58:6c:58:31:62:e9:a4:42:cf:61:c3:69:47:53:
95:81:04:fb:22:82:77:55:4e:1f:e2:5e:e6:e0:25:
89:b5:e7:7d:c3:0a:a6:b1:fa:6f:f7:fc:78:13:70:
26:97:ce:91:27:3f:bb:c7:4e:f5:ad:da:77:17:ae:
5e:9f:4e:8f:af:5d:59:f4:ac:4a:40:af:4f:cd:fd:
7c:f8:e7:a4:95:1f:d3:a1:11:7d:4a:58:62:bc:35:
c8:e5:b6:7f:48:3f:57:61:75:32:a1:2b:a5:62:e5:
3b:94:22:a6:b3:4d:44:85:7c:a4:3e:d5:d7:73:98:
7d:eb:b8:bd:d3:c5:41:9d:b8:97:3c:c4:2c:d2:5c:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:29:C5:69:D8:8A:85:54:D3:01:BD:55:3D:4D:C2:9A:27:B6:C4:5D
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/nynFadiKhVTTAb1VPU3Cmie2xF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.205.0/24
Signature Algorithm: sha256WithRSAEncryption
54:71:f9:c1:a2:c6:45:e9:e8:8d:c9:40:d7:7a:b7:2e:f3:89:
af:c2:c5:37:31:c6:6f:69:46:10:27:de:48:10:4e:fa:3a:bf:
55:be:38:01:8e:b8:da:9d:63:02:f3:c3:d1:50:da:13:d1:fa:
dc:6c:aa:b7:dc:c9:cf:7e:c0:00:cf:a3:fe:28:65:4f:0e:86:
b2:64:5a:43:e7:39:d5:7a:e4:19:86:50:52:5d:9e:6e:7c:15:
81:7f:c8:0b:e7:53:ab:fa:8e:45:12:6b:17:42:06:60:ee:45:
40:34:96:da:b5:b8:e9:b2:f6:53:8b:ca:21:37:4f:a3:6b:81:
34:06:00:af:3c:5d:d3:0b:7c:01:59:1f:86:50:a5:da:9b:90:
b8:b4:d0:5a:c7:8d:40:30:27:5b:21:ee:1d:62:37:ec:58:84:
12:84:1e:0a:16:c2:c2:25:e8:c7:f1:10:bf:c0:22:d6:62:38:
8d:a2:f4:c4:e2:59:af:fc:4c:fc:ce:90:0c:f5:c8:71:87:9d:
eb:3c:4f:50:6d:45:ea:b7:f0:96:71:c5:2d:7e:0d:bb:6a:81:
e8:27:7d:10:98:7f:56:bc:a6:e7:3d:97:8d:42:62:31:fa:31:
2b:2d:17:f9:83:c8:48:72:de:39:0f:0d:d1:80:a3:7b:00:c3:
dd:84:5d:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9YW5Foj9yGD5nz60GET+kQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk
NmNlNTEwHhcNMjYwNzEyMjIwMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjI5YzU2OWQ4OGE4NTU0ZDMwMWJkNTUzZDRkYzI5YTI3YjZjNDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWzhvbcFgBKKalvSoBt7dXaAhkZJ
VgyMWme53749/i7QvYGsqwckWKzPVJICvIZYGQbKmFN8z+AEymBkkQoHkH8uUZnH
vqiGYSc3kpI6xVMjKN2ebLY8CUR4S/JA0Wt9VUZ+2qcb5+SplsnopBRhBleHL9Po
7EPkWGxYMWLppELPYcNpR1OVgQT7IoJ3VU4f4l7m4CWJted9wwqmsfpv9/x4E3Am
l86RJz+7x071rdp3F65en06Pr11Z9KxKQK9Pzf18+OeklR/ToRF9SlhivDXI5bZ/
SD9XYXUyoSulYuU7lCKms01EhXykPtXXc5h967i908VBnbiXPMQs0lwH5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8pxWnYioVU0wG9VT1NwpontsRdMB8GA1UdIwQY
MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt
ZGY2NGYwZTgyMzYwLzEvbnluRmFkaUtoVlRUQWIxVlBVM0NtaWUyeEYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw
LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1/NMA0G
CSqGSIb3DQEBCwUAA4IBAQBUcfnBosZF6eiNyUDXercu84mvwsU3McZvaUYQJ95I
EE76Or9VvjgBjrjanWMC88PRUNoT0frcbKq33MnPfsAAz6P+KGVPDoayZFpD5znV
euQZhlBSXZ5ufBWBf8gL51Or+o5FEmsXQgZg7kVANJbatbjpsvZTi8ohN0+ja4E0
BgCvPF3TC3wBWR+GUKXam5C4tNBax41AMCdbIe4dYjfsWIQShB4KFsLCJejH8RC/
wCLWYjiNovTE4lmv/Ez8zpAM9chxh53rPE9QbUXqt/CWccUtfg27aoHoJ30QmH9W
vKbnPZeNQmIx+jErLRf5g8hIct45Dw3RgKN7AMPdhF2X
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:31:04 2026 by rpki-client