Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NLVnoMWOMa47xYh0YO0l0qmBxw0.roa
File: NLVnoMWOMa47xYh0YO0l0qmBxw0.roa (raw, json)
Hash identifier: oW8p7bllDT8HoUh1dDyzkcw7i+hn6JklRR+g0PxJ4aM=
Subject key identifier: 34:B5:67:A0:C5:8E:31:AE:3B:C5:88:74:60:ED:25:D2:A9:81:C7:0D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A2E8167A305C435A2325FC60DB4D2329C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NLVnoMWOMa47xYh0YO0l0qmBxw0.roa
Signing time: Wed 29 Oct 2025 05:47:03 +0000
ROA not before: Wed 29 Oct 2025 05:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206921
IP address blocks: 151.240.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:81:67:a3:05:c4:35:a2:32:5f:c6:0d:b4:d2:32:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 29 05:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34b567a0c58e31ae3bc5887460ed25d2a981c70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:6f:06:36:5a:ed:3c:68:a6:20:70:ae:0a:
41:b7:fc:ea:ee:9a:df:1d:51:b6:08:17:fe:bb:45:
72:f0:8b:e7:51:b6:88:7e:46:ed:29:67:e2:44:74:
2b:7d:c7:cb:6b:ff:c8:e6:f0:b8:7c:30:6c:43:3c:
63:bd:b0:28:08:19:3b:75:b9:73:f9:a9:5b:4d:37:
b6:b6:3e:2e:80:47:6b:38:8a:d3:77:38:b6:22:31:
4d:49:e1:98:b9:76:c8:72:e4:5d:8a:c4:b6:fb:7a:
b0:79:03:b9:9e:8d:47:c1:ba:16:68:64:db:29:09:
0e:74:70:38:e3:eb:54:e7:d9:e8:db:22:82:45:ac:
d4:f1:ec:a7:a2:f4:d1:e3:02:8b:1c:7b:33:74:24:
c9:5f:c8:27:62:6c:8e:1d:5d:80:ff:54:16:fc:c0:
37:18:59:d6:3c:ff:93:51:0a:c4:a8:ec:87:29:15:
a9:7d:d1:0f:ac:53:8b:0e:de:9c:14:ac:4d:6e:26:
75:27:08:77:6d:db:6d:ef:0d:3b:e4:4e:15:3f:4f:
50:04:a8:84:7b:8e:e9:29:58:ef:46:46:53:41:e8:
ce:ff:97:cd:21:6b:ce:4a:1f:74:a5:e6:00:b8:0a:
31:b6:f7:1b:01:50:52:96:32:47:9f:d7:94:95:04:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B5:67:A0:C5:8E:31:AE:3B:C5:88:74:60:ED:25:D2:A9:81:C7:0D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NLVnoMWOMa47xYh0YO0l0qmBxw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:00:1a:d7:5a:a8:92:6b:01:18:c9:83:1d:3a:60:bb:ce:95:
38:ad:6f:1f:10:98:8d:83:d3:19:af:d8:aa:a2:b7:0d:8f:02:
a2:95:cb:31:b2:51:9d:58:bd:e2:f3:45:9b:12:0f:14:e6:bd:
bd:32:28:a8:61:0c:8a:d2:7b:b2:21:27:68:d1:60:b1:78:8d:
16:dd:87:93:01:ea:72:8a:ca:17:24:e3:af:4b:36:de:b9:f8:
ff:d1:5d:ff:e4:46:d2:00:e0:3b:6c:36:ae:af:30:7a:ae:c3:
ca:64:e9:63:a7:94:e7:55:d3:62:95:df:f5:c4:9c:19:80:54:
9a:6a:95:d9:72:e1:91:d9:58:38:9c:ff:4c:ca:6d:13:86:a0:
73:a8:0d:dc:67:ed:86:1f:0b:cb:1d:67:d7:1d:40:8a:24:53:
be:b8:ad:06:b8:24:c9:75:af:3c:5d:fd:42:d7:9c:eb:45:ec:
e1:01:68:5c:81:98:f3:b5:84:e8:44:c1:1d:c3:60:81:6a:27:
74:a4:86:07:97:d0:e7:01:5d:98:84:b1:63:b7:c0:23:13:3c:
ca:2e:32:c1:85:7e:72:08:b4:ad:8d:9b:5e:21:bf:2e:63:bd:
6f:f4:d3:dd:87:e5:1c:4b:89:e3:6e:e4:b8:f9:fa:80:5c:0b:
e8:86:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:02:26 2025 by rpki-client