Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/nlp-yymaqYzgw12m1QvoCWjeZIw.roa
File: nlp-yymaqYzgw12m1QvoCWjeZIw.roa (raw, json)
Hash identifier: Yssi7rDTBVMdou6reFU3+Vkw3D/c6F2oI+HGCYZH4Sw=
Subject key identifier: 9E:5A:7E:CB:29:9A:A9:8C:E0:C3:5D:A6:D5:0B:E8:09:68:DE:64:8C
Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial: 01976A2D85FF604E757A2CC7262BB0647919
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/nlp-yymaqYzgw12m1QvoCWjeZIw.roa
Signing time: Fri 13 Jun 2025 16:44:17 +0000
ROA not before: Fri 13 Jun 2025 16:44:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50623
IP address blocks: 195.191.154.0/24 maxlen: 24
195.191.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:2d:85:ff:60:4e:75:7a:2c:c7:26:2b:b0:64:79:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
Validity
Not Before: Jun 13 16:44:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e5a7ecb299aa98ce0c35da6d50be80968de648c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:00:7e:b1:c1:26:9d:3e:1b:e0:d2:ed:c6:
30:95:fc:07:f8:b4:5b:cd:d2:3b:ff:6d:08:37:cf:
80:9a:77:12:11:89:9e:98:9d:02:18:6f:17:0f:45:
fe:34:90:27:db:4c:0b:ef:87:94:42:43:2b:ee:f1:
67:cb:8c:6a:a1:df:ea:d8:24:87:72:1b:c8:c8:59:
99:9e:61:41:9d:c6:09:e9:0e:1f:95:f5:ab:ac:f2:
b1:44:8b:c2:ea:f6:98:f4:9a:cf:f0:50:00:35:bc:
4c:51:fd:89:7d:bf:9d:b3:d7:28:b3:28:70:1b:75:
50:92:b4:75:fe:55:14:40:2c:c7:fb:84:58:a7:6a:
7b:bc:63:33:9b:a3:39:d1:08:f6:64:ac:ac:98:ad:
8f:f2:2c:95:cc:40:f1:2f:9a:38:47:86:25:47:47:
ed:90:ab:ac:17:7b:df:4a:97:63:62:db:e5:f2:f5:
fe:c9:8c:f2:90:13:bb:3f:8f:40:21:6d:02:8a:5e:
1b:b5:07:2f:12:ec:d7:a0:3a:f5:d5:e0:40:33:54:
f4:b7:ff:9e:5a:ca:c5:28:0e:65:53:fd:be:a2:56:
60:f9:91:09:e8:04:15:3d:d8:a9:23:02:85:09:c9:
91:85:e9:5f:6a:0e:44:eb:87:38:ab:c5:32:6b:8d:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5A:7E:CB:29:9A:A9:8C:E0:C3:5D:A6:D5:0B:E8:09:68:DE:64:8C
X509v3 Authority Key Identifier:
keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/nlp-yymaqYzgw12m1QvoCWjeZIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.154.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:1b:ca:9d:bf:1d:9b:f3:32:5b:7e:a8:11:30:fa:51:0c:51:
49:5d:a8:dc:a1:5d:b5:f2:35:07:f2:ae:25:4c:e5:03:b9:91:
e8:3b:36:82:99:07:b9:b9:5f:9a:77:80:d0:4b:8d:67:bd:e3:
4d:15:0a:20:9c:a0:1d:0c:56:f2:85:64:98:35:e8:13:e5:5c:
53:c9:46:bc:6d:39:1f:fd:01:d2:ed:bd:e2:f1:9e:55:57:29:
c7:e0:62:ff:24:f4:85:1a:51:c3:35:5e:2a:59:ed:3d:3b:5b:
56:21:82:73:b2:ad:f3:4e:9e:25:9f:d6:e7:1e:56:db:46:1d:
c8:e5:19:33:6a:43:9a:ab:39:26:51:77:9c:6e:eb:48:a2:99:
98:8e:86:5a:34:cd:4c:7c:e3:e4:bf:77:0f:de:a4:9c:70:4d:
7b:48:2d:7c:05:af:bc:97:41:62:bf:d2:8f:22:b2:14:9a:65:
53:7b:b5:98:66:6a:d0:bf:1a:dc:d8:9d:99:fc:60:e4:92:05:
b6:c9:99:41:ab:e0:f7:cc:d4:72:21:2f:46:7a:97:3e:ef:6e:
bf:6b:ae:fb:9b:7a:57:82:1e:01:77:b9:53:56:c0:38:1f:a3:
d5:13:c9:ce:ab:26:fc:f5:03:a5:ee:c1:2a:a4:1d:a4:cc:01:
de:84:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:47:35 2025 by rpki-client