Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nlYVAhnZHh8lIMyhCWnvgOcQD5M.roa
File: nlYVAhnZHh8lIMyhCWnvgOcQD5M.roa (raw, json)
Hash identifier: 1BL5rnxRlAU4TNDs4EZgEs2usMjokGlJwPGDilbK4RM=
Subject key identifier: 9E:56:15:02:19:D9:1E:1F:25:20:CC:A1:09:69:EF:80:E7:10:0F:93
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A188AC380FA1104F0CB5FAC11CF7FE9A37
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nlYVAhnZHh8lIMyhCWnvgOcQD5M.roa
Signing time: Thu 29 Oct 2026 17:19:10 +0000
ROA not before: Thu 29 Oct 2026 17:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219501
IP address blocks: 2.27.255.0/24 maxlen: 24
179.253.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:ac:38:0f:a1:10:4f:0c:b5:fa:c1:1c:f7:fe:9a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 29 17:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e56150219d91e1f2520cca10969ef80e7100f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:8a:3c:01:e8:85:66:7d:d2:9e:d6:cf:ef:
a4:a2:be:0d:05:d7:7a:12:e4:44:a9:f6:d7:c0:be:
0c:2b:59:94:3d:91:2a:f1:c9:88:dd:0e:e7:2f:95:
4c:49:35:a9:f4:45:2c:64:ee:83:a2:68:17:c6:0e:
32:8c:fc:2c:8c:0c:a9:66:38:23:2e:41:5e:5c:c5:
31:c0:0c:3e:8b:d4:82:e2:fb:3b:42:75:2b:c3:39:
06:82:10:66:9b:fd:5a:0c:f0:aa:b0:4d:d2:e4:3e:
28:fb:a7:70:6e:f4:48:1d:8f:68:51:7b:27:2e:cc:
a8:bb:9c:f1:93:29:93:9e:07:d0:36:13:c0:3a:a2:
6c:a6:45:42:cf:22:5f:f9:71:88:09:c3:60:1b:d6:
00:10:49:fc:e7:0f:85:43:30:8e:02:b9:e7:b2:64:
1d:78:8d:56:0f:8f:84:99:2c:d1:b9:a7:85:84:d3:
96:6f:34:25:f1:27:2f:85:19:1a:b2:6b:a9:e5:c9:
3b:5e:21:25:8d:76:c9:a4:ee:bf:8b:1c:89:92:5c:
ea:58:f5:95:c0:c0:51:48:7f:66:ec:51:cf:b5:80:
e8:d3:05:12:6d:30:8e:9e:b1:ee:fd:94:fb:89:cb:
04:0f:7b:17:46:8c:f0:6e:e1:24:eb:98:e6:ec:bc:
eb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:56:15:02:19:D9:1E:1F:25:20:CC:A1:09:69:EF:80:E7:10:0F:93
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/nlYVAhnZHh8lIMyhCWnvgOcQD5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.255.0/24
179.253.179.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ee:cd:c6:c1:85:dd:af:84:3c:d6:76:f4:de:27:a3:79:41:
d1:0d:5d:88:84:96:3c:78:80:b1:53:e5:17:e8:d5:1d:60:e9:
7a:7c:6b:8e:fc:8b:4b:18:d7:1e:77:52:51:c4:2b:9b:89:db:
16:15:29:ef:28:bd:79:72:b4:a9:99:9d:95:1d:17:91:70:db:
a8:cd:68:4d:4c:e9:8a:50:42:7b:78:76:9d:95:b0:d7:12:38:
11:6a:ed:e0:7d:1c:8b:c3:5d:4f:49:fb:11:ab:97:a9:87:9c:
27:f3:42:d7:a6:07:cc:02:df:bd:11:f1:1e:9d:de:6a:25:1f:
c8:20:91:f4:75:c5:82:87:0b:56:07:9f:c3:a7:f5:1c:d1:55:
15:71:e2:cc:81:80:14:21:6b:ea:50:2b:37:bc:74:71:eb:6b:
a6:d6:86:e7:fc:1f:27:b9:9c:d7:6a:a8:61:54:b2:9f:3b:fc:
41:92:74:fe:17:49:29:d8:80:89:64:00:30:ad:9a:55:82:09:
b5:f0:79:a3:a6:c7:6e:4d:61:e2:85:31:c7:cd:8e:e4:9a:df:
b5:51:a4:6e:b7:b4:41:9f:09:3d:f4:26:21:16:6e:b2:3f:a6:
1a:c0:30:d1:24:c0:4b:3e:3c:55:8e:8f:20:7c:8c:4e:bc:5b:
88:b6:43:9b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGIrDgPoRBPDLX6wRz3/po3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDI5MTcxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTU2MTUwMjE5ZDkxZTFmMjUyMGNjYTEwOTY5ZWY4MGU3MTAwZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2+KPAHohWZ90p7Wz++kor4NBdd6
EuREqfbXwL4MK1mUPZEq8cmI3Q7nL5VMSTWp9EUsZO6DomgXxg4yjPwsjAypZjgj
LkFeXMUxwAw+i9SC4vs7QnUrwzkGghBmm/1aDPCqsE3S5D4o+6dwbvRIHY9oUXsn
Lsyou5zxkymTngfQNhPAOqJspkVCzyJf+XGICcNgG9YAEEn85w+FQzCOArnnsmQd
eI1WD4+EmSzRuaeFhNOWbzQl8ScvhRkasmup5ck7XiEljXbJpO6/ixyJklzqWPWV
wMBRSH9m7FHPtYDo0wUSbTCOnrHu/ZT7icsED3sXRozwbuEk65jm7LzrKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ5WFQIZ2R4fJSDMoQlp74DnEA+TMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvbmxZVkFoblpIaDhsSU15aENXbnZnT2NRRDVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAhv/AwQA
s/2zMA0GCSqGSIb3DQEBCwUAA4IBAQAL7s3GwYXdr4Q81nb03iejeUHRDV2IhJY8
eICxU+UX6NUdYOl6fGuO/ItLGNced1JRxCubidsWFSnvKL15crSpmZ2VHReRcNuo
zWhNTOmKUEJ7eHadlbDXEjgRau3gfRyLw11PSfsRq5eph5wn80LXpgfMAt+9EfEe
nd5qJR/IIJH0dcWChwtWB5/Dp/Uc0VUVceLMgYAUIWvqUCs3vHRx62um1obn/B8n
uZzXaqhhVLKfO/xBknT+F0kp2ICJZAAwrZpVggm18HmjpsduTWHihTHHzY7kmt+1
UaRut7RBnwk99CYhFm6yP6YawDDRJMBLPjxVjo8gfIxOvFuItkOb
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:30:08 2026 by rpki-client