Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nneKuyGudgnv0PN8n2dZjphyBVE.roa
File: nneKuyGudgnv0PN8n2dZjphyBVE.roa (raw, json)
Hash identifier: KIC2+ZKN98r/9K20gCZWzWZI9OqGxcTSO8qEwBBgPA4=
Subject key identifier: 9E:77:8A:BB:21:AE:76:09:EF:D0:F3:7C:9F:67:59:8E:98:72:05:51
Certificate issuer: /CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Certificate serial: 01A0C64B6DB04E1EBFF65D90F66F2A7465A5
Authority key identifier: 9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nneKuyGudgnv0PN8n2dZjphyBVE.roa
Signing time: Mon 21 Sep 2026 23:27:07 +0000
ROA not before: Mon 21 Sep 2026 23:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209464
IP address blocks: 185.216.40.0/22 maxlen: 22
185.216.40.0/24 maxlen: 24
185.216.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:4b:6d:b0:4e:1e:bf:f6:5d:90:f6:6f:2a:74:65:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Validity
Not Before: Sep 21 23:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e778abb21ae7609efd0f37c9f67598e98720551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:8e:f9:7d:bd:bb:19:f5:9c:9b:20:a8:58:
50:25:2a:89:97:8d:39:17:b9:25:db:e3:b6:ac:b2:
2e:4c:ba:7c:be:ec:e1:4a:a5:5a:92:14:5d:aa:81:
94:1a:0a:45:45:8f:2e:40:cc:b8:ca:e9:e8:02:41:
05:b3:f6:da:a0:dd:fa:f1:cd:74:1b:05:da:82:ca:
ec:97:6e:1c:4a:1a:55:5d:cf:58:70:23:99:8e:99:
65:f8:9e:f1:0f:20:73:f9:ec:63:d4:63:a3:62:4e:
dc:70:de:10:03:e9:0d:23:01:76:84:96:6a:97:48:
97:98:a9:09:61:98:99:70:b6:91:56:15:77:5f:04:
e3:2a:d2:d8:8d:d2:52:34:2b:b2:07:4f:cc:ba:b0:
28:da:93:6e:1c:79:70:e3:8a:bc:08:63:7e:e1:d3:
dd:bd:07:a3:10:54:61:c2:65:dc:53:5c:7a:53:22:
49:4b:4d:67:52:11:22:f2:b8:16:8c:be:89:2c:77:
b1:85:5f:6a:21:ac:60:43:71:25:72:b2:87:0b:82:
9a:91:59:9b:86:60:d7:e5:2a:81:d2:83:09:3c:a5:
be:73:60:02:0d:3e:5b:8e:4a:54:75:48:f6:93:f8:
cf:00:36:89:bd:87:d1:1a:dc:e7:03:5f:f6:0d:f9:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:77:8A:BB:21:AE:76:09:EF:D0:F3:7C:9F:67:59:8E:98:72:05:51
X509v3 Authority Key Identifier:
keyid:9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nneKuyGudgnv0PN8n2dZjphyBVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.40.0/22
Signature Algorithm: sha256WithRSAEncryption
03:9c:cc:b4:c8:54:fc:46:aa:9b:0f:07:f3:31:76:b1:ff:ce:
34:02:6a:25:f1:34:b0:b8:21:41:2d:8f:68:ad:3b:97:f6:c9:
32:2d:40:ad:f8:e8:2c:05:df:b7:19:2d:41:ee:67:05:b5:94:
8e:6c:a6:71:39:db:dd:43:19:14:7a:37:3f:9f:f9:29:29:fc:
cc:ab:10:f7:98:45:47:15:82:d8:46:cd:c0:fe:0c:61:41:25:
11:44:a9:f8:ff:f1:a0:c9:f8:74:f2:29:6c:7a:c7:a6:a2:bb:
c6:92:2b:9a:4a:08:e2:fa:25:71:e2:04:45:db:17:55:0c:08:
5a:10:b4:6e:f0:1f:8f:99:3a:1f:61:d7:89:5b:16:9c:1b:7c:
bd:22:42:fb:6a:d9:59:7d:34:b2:0d:67:1d:93:b2:a3:02:66:
e7:74:f0:27:68:7f:4e:36:e1:99:ad:38:19:e6:23:53:dd:71:
ae:67:e7:4e:22:6c:4a:8a:a1:46:2b:99:07:3b:ea:73:58:b3:
f3:3e:e4:a0:ea:79:4b:33:42:7a:7c:a7:d6:da:fb:ca:46:0c:
23:52:04:41:02:66:4b:14:38:42:7a:34:a7:d2:37:fc:cb:8a:
f8:cd:9d:d4:2e:e8:b6:41:6a:1a:93:d8:ee:7a:41:6e:aa:04:
93:34:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:22:10 2026 by rpki-client