Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/nXP-66BB-lhTkGJ5bDEY3WtHQ90.roa
File: nXP-66BB-lhTkGJ5bDEY3WtHQ90.roa (raw, json)
Hash identifier: 4eAVP08xGNqo0tq5xYSbxOtqOcilo/SPrhoncaQ6PLw=
Subject key identifier: 9D:73:FE:EB:A0:41:FA:58:53:90:62:79:6C:31:18:DD:6B:47:43:DD
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019D73A44BF9AA2DF66DC586AF10E006A789
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/nXP-66BB-lhTkGJ5bDEY3WtHQ90.roa
Signing time: Thu 09 Apr 2026 19:07:20 +0000
ROA not before: Thu 09 Apr 2026 19:07:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 87.232.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:a4:4b:f9:aa:2d:f6:6d:c5:86:af:10:e0:06:a7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 9 19:07:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d73feeba041fa58539062796c3118dd6b4743dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:84:8c:b5:f8:90:94:55:13:d7:94:66:8f:
60:9e:ec:4e:38:17:85:56:e7:52:69:84:a4:1a:7d:
ed:23:75:50:3e:41:92:a1:c4:63:d8:9d:85:39:1d:
13:e9:c3:8c:d5:90:57:bd:84:e5:06:89:46:82:87:
5c:ad:ea:03:c0:bc:b7:13:48:e5:7c:e9:80:b3:f7:
a8:19:8d:45:80:97:f9:57:73:75:f7:af:b3:81:f7:
58:a0:12:cd:b9:0b:2e:42:d1:94:97:28:ac:67:48:
8c:b5:19:48:3d:0d:40:78:db:8e:69:20:4e:36:87:
b9:8c:11:cf:9f:7d:ec:87:7f:c7:8f:a4:c1:ca:c8:
c1:73:0f:52:2b:89:23:a0:e5:f4:80:ad:9e:ee:41:
92:f3:0e:0c:0d:6e:ca:2d:9e:b4:60:3c:51:11:92:
f8:ae:7c:23:cb:a0:95:e4:1e:ef:12:04:44:ee:94:
89:16:05:2b:f0:73:d7:52:79:e5:e6:6f:62:00:c5:
94:78:70:61:03:11:d7:8f:ad:d3:75:c8:c0:42:7a:
40:7a:7c:e8:b0:27:81:db:01:71:00:16:2f:62:cb:
67:72:e8:6a:b2:d4:5e:31:98:0c:60:20:05:8a:24:
42:35:a2:22:09:bc:fb:e7:b3:66:09:16:60:d1:7f:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:73:FE:EB:A0:41:FA:58:53:90:62:79:6C:31:18:DD:6B:47:43:DD
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/nXP-66BB-lhTkGJ5bDEY3WtHQ90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.114.0/24
Signature Algorithm: sha256WithRSAEncryption
19:12:02:b2:65:b5:f4:b8:c8:5c:a3:5f:8b:c8:17:46:b6:06:
e0:06:19:84:d3:4f:04:f2:18:2f:3f:3f:24:f6:b0:31:bf:e7:
5e:45:89:1b:db:35:a6:b4:a9:9f:00:fb:fd:23:55:44:59:02:
cc:9f:1c:a4:6e:19:dd:4b:84:70:45:23:27:d2:ba:2f:95:5a:
c2:1f:9c:93:12:66:e6:31:e6:9c:bb:43:e8:b6:99:c4:eb:74:
fe:2c:60:03:60:9a:5c:72:fc:f4:be:b1:cd:40:6a:a5:cc:02:
a3:e5:d4:6b:54:8d:05:36:32:ad:3b:24:7f:f9:78:98:3f:1a:
51:a4:35:d3:30:c9:53:dd:58:69:4a:f5:a6:9a:d6:f1:bb:a2:
de:2a:0e:ae:4d:ed:b7:36:cb:6a:a4:ea:0c:93:4b:95:bb:6e:
e1:88:77:44:fd:49:31:a6:88:8f:8e:e5:96:11:1c:90:cf:a5:
4a:3e:66:8f:bb:6b:f3:ad:a1:64:58:53:6e:1c:c1:8f:17:2d:
ae:25:f4:49:43:a0:ad:a1:81:81:60:3b:92:ad:2b:30:e7:44:
64:f3:a2:29:a6:b9:5d:ed:ea:b9:b0:a2:a2:6b:a8:b7:d6:71:
83:56:77:02:e0:b2:7c:6a:ad:e2:41:55:80:ae:be:35:7c:19:
9a:e3:46:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 03:38:01 2026 by rpki-client