Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nylH_iNhBL62wC4G_yXzba83K7M.roa
File: nylH_iNhBL62wC4G_yXzba83K7M.roa (raw, json)
Hash identifier: eLCxLqGqmcxxZgsXB3PEs1XdZDps5Y5UofWrJIah5Vw=
Subject key identifier: 9F:29:47:FE:23:61:04:BE:B6:C0:2E:06:FF:25:F3:6D:AF:37:2B:B3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0919A5E6315CC27A5AC6DDFB168A61C3B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nylH_iNhBL62wC4G_yXzba83K7M.roa
Signing time: Fri 11 Sep 2026 17:53:27 +0000
ROA not before: Fri 11 Sep 2026 17:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146883
IP address blocks: 189.31.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:9a:5e:63:15:cc:27:a5:ac:6d:df:b1:68:a6:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 11 17:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f2947fe236104beb6c02e06ff25f36daf372bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:43:59:b4:9d:6a:25:9a:d8:cf:2d:d5:96:
51:c5:7c:fb:be:b0:87:28:d9:bc:0f:50:f4:ad:e0:
a0:c7:eb:24:7a:ff:7b:6b:80:e0:a1:71:f9:cb:b9:
60:0d:1e:28:bb:ed:cc:d9:2f:70:76:f5:b7:89:f3:
50:7a:60:a3:9f:33:07:95:7f:2c:4a:8c:9a:1a:70:
86:eb:4f:ba:e2:ca:86:86:3a:2c:1e:f7:67:55:ae:
14:ea:01:82:c0:29:84:21:15:a2:d1:50:d2:30:92:
87:b4:80:5c:ea:08:7a:c8:b5:8b:19:f8:82:9e:de:
3f:b3:aa:94:aa:98:12:99:0f:04:60:61:19:d1:f6:
b7:09:cc:da:e3:52:a2:76:ca:fd:66:ce:fc:01:47:
fd:f7:a4:06:b5:72:1c:9f:2f:98:59:33:1c:7c:3e:
6c:98:86:42:69:78:c4:cd:18:dc:08:55:02:ea:df:
7a:52:aa:4d:ec:e8:44:9d:21:c4:9d:ad:16:ee:e2:
ab:21:98:f3:62:9d:b1:0c:9b:c8:76:a7:a9:08:0c:
d4:b6:85:7a:29:78:15:73:9b:ef:93:ba:eb:ca:61:
28:36:da:c7:11:12:36:b9:0b:f4:e3:3d:a9:b8:df:
6b:25:08:56:94:2b:8d:fb:c6:d3:02:49:42:a5:e8:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:29:47:FE:23:61:04:BE:B6:C0:2E:06:FF:25:F3:6D:AF:37:2B:B3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nylH_iNhBL62wC4G_yXzba83K7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.213.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:38:34:0c:44:72:75:7a:b0:d4:cc:d6:23:df:55:6e:8b:86:
43:48:ef:c6:94:ef:2f:d7:71:55:79:3c:65:7b:71:3c:50:a8:
73:ba:06:7f:ae:db:22:06:1e:8f:6f:f3:c4:49:6c:c8:fe:e3:
cf:f0:39:b5:7f:36:db:c2:d2:1c:b6:1c:15:54:ca:c9:32:1a:
aa:10:2b:91:24:45:32:cc:68:39:79:46:ab:cf:aa:15:4d:f1:
ab:cb:2c:b4:9e:d0:d3:6e:1a:af:ae:9d:d4:fb:ef:08:77:a9:
29:eb:a4:21:75:31:39:6e:a2:91:b0:b7:38:44:63:dd:10:d2:
6c:f0:65:bd:54:31:eb:28:58:06:bf:32:98:2a:b4:8c:65:98:
0b:96:99:a7:f3:d2:4d:f4:fa:89:22:cb:d0:16:97:ed:24:50:
c5:83:5d:48:94:69:f5:3a:e7:90:cd:e7:fd:53:17:84:4c:d1:
f9:26:52:f6:59:ed:f6:d2:23:c7:f4:af:b6:84:b8:a7:a9:45:
d3:93:ba:05:e6:fc:61:da:81:8a:0c:16:e0:83:92:1e:ab:ae:
b0:1b:7b:e6:7e:18:c8:4a:04:f2:0a:6c:c1:86:85:60:0d:e8:
57:60:8f:37:47:86:90:46:ff:ed:7f:12:0d:0d:4f:7a:67:d8:
52:4e:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:20:58 2026 by rpki-client