Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/NLokuyayf_xTBz620eUda7ND62Y.roa
File: NLokuyayf_xTBz620eUda7ND62Y.roa (raw, json)
Hash identifier: wnbXZXqLcKm2LPuwdWnQJhZT1lgCNXU3KAjP4hIxaAc=
Subject key identifier: 34:BA:24:BB:26:B2:7F:FC:53:07:3E:B6:D1:E5:1D:6B:B3:43:EB:66
Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial: 019A2B688BC3A18F159BB116430D7A910293
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/NLokuyayf_xTBz620eUda7ND62Y.roa
Signing time: Tue 28 Oct 2025 15:21:03 +0000
ROA not before: Tue 28 Oct 2025 15:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209823
IP address blocks: 195.24.245.0/24 maxlen: 24
2a12:5541:1::/48 maxlen: 48
2a12:5541:2::/48 maxlen: 48
2a12:5541:a::/48 maxlen: 48
2a12:5541:100::/48 maxlen: 48
2a12:5541:200::/48 maxlen: 48
2a12:5541:331::/48 maxlen: 48
2a12:5541:5541::/48 maxlen: 48
2a12:5542::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:68:8b:c3:a1:8f:15:9b:b1:16:43:0d:7a:91:02:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Validity
Not Before: Oct 28 15:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34ba24bb26b27ffc53073eb6d1e51d6bb343eb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:82:36:a1:33:3b:fb:2d:d2:32:70:00:a4:
7b:19:4a:00:99:37:4e:4f:9d:e5:f8:2e:76:20:15:
26:b5:4d:8f:1b:74:a5:d8:7e:73:e5:0a:f7:dc:3e:
62:39:9d:30:cb:b6:88:58:e1:e1:8a:f9:55:77:d3:
41:2f:44:4d:ad:09:44:91:99:fe:63:19:2b:6d:26:
25:10:0f:4b:26:cd:70:8a:5a:46:24:09:46:94:10:
b4:89:5e:b8:15:a5:13:2c:bf:a8:11:12:ba:81:a0:
64:42:a1:23:c7:0c:0c:73:ad:08:ac:cf:01:45:8f:
13:ac:58:3d:22:73:5a:ba:d3:c7:d4:be:64:f1:eb:
2f:1f:cc:26:d9:57:5a:15:c4:93:a2:01:cb:75:fb:
14:05:3a:e9:c5:c4:ca:e0:f8:c7:82:cd:a1:3d:88:
c2:57:b4:f8:32:48:23:6d:02:e8:fe:6f:a9:ae:94:
fc:1b:58:ce:b2:48:ef:f8:c1:da:4e:a0:c0:24:89:
ac:52:68:eb:93:26:59:03:a2:ff:16:06:fb:de:63:
83:c4:48:ea:7f:b1:cc:b5:37:60:84:b3:be:d1:c1:
65:f0:8c:b1:43:ef:b2:b4:c2:62:c3:47:a3:d4:a6:
46:9e:a1:a5:78:06:16:54:45:1d:be:67:31:89:8a:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:24:BB:26:B2:7F:FC:53:07:3E:B6:D1:E5:1D:6B:B3:43:EB:66
X509v3 Authority Key Identifier:
keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/NLokuyayf_xTBz620eUda7ND62Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.245.0/24
IPv6:
2a12:5541:1::-2a12:5541:2:ffff:ffff:ffff:ffff:ffff
2a12:5541:a::/48
2a12:5541:100::/48
2a12:5541:200::/48
2a12:5541:331::/48
2a12:5541:5541::/48
2a12:5542::/32
Signature Algorithm: sha256WithRSAEncryption
18:db:ae:2d:cb:6f:32:55:f0:56:24:88:95:7d:76:de:8b:5e:
72:6d:e1:94:56:88:aa:d3:b0:16:2d:27:7a:ed:8c:f6:27:e5:
8c:a4:ae:dc:46:b0:87:03:fe:e4:a3:87:78:66:ce:4b:b1:f6:
40:c0:25:ad:6a:50:35:43:e8:4e:b1:00:fb:7e:64:d6:ac:aa:
9e:14:aa:6f:92:13:4e:fb:9c:b3:e6:61:5f:d6:1d:a5:fb:35:
68:69:a8:42:21:9a:a3:1d:9f:4c:d1:98:ab:05:26:1b:ca:94:
58:7b:4d:03:30:9b:89:ec:80:64:fd:c8:ec:e4:1f:f2:61:49:
6a:f2:df:ef:c3:cf:0f:21:e5:4a:6f:1b:34:c4:02:3c:6e:1e:
3b:cc:3e:14:74:63:91:7b:06:ad:10:c3:25:ae:68:80:9f:ff:
8e:79:f0:ea:2d:a5:7a:56:a0:f7:48:3e:72:cc:73:5a:bd:04:
41:80:df:66:66:f1:2e:ce:ad:54:70:ca:54:d7:28:3c:22:0a:
3d:3d:4d:8b:18:b0:ed:07:cd:70:fd:38:97:05:4d:a1:9a:fa:
bb:ce:48:19:8b:77:df:e8:f1:e5:53:0c:32:fb:5c:a0:db:4b:
88:d6:b6:67:62:3d:74:d9:d9:9e:54:c5:31:b4:f8:24:90:ca:
9b:fa:b3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:03:11 2025 by rpki-client