Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/N0lzm-3vygtdiWRBn9eXgxBlyZI.roa
File: N0lzm-3vygtdiWRBn9eXgxBlyZI.roa (raw, json)
Hash identifier: 7Y1+rEyMo7py1HRJqnnqE/nkyygO/OisK6QTtH8xA/o=
Subject key identifier: 37:49:73:9B:ED:EF:CA:0B:5D:89:64:41:9F:D7:97:83:10:65:C9:92
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 0199DD0ECA7DEE1AF6FC775A88BF00A9F7EB
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/N0lzm-3vygtdiWRBn9eXgxBlyZI.roa
Signing time: Mon 13 Oct 2025 10:12:38 +0000
ROA not before: Mon 13 Oct 2025 10:12:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.8.0/24 maxlen: 24
140.150.10.0/24 maxlen: 24
140.150.11.0/24 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.14.0/24 maxlen: 24
140.150.15.0/24 maxlen: 24
140.150.16.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.20.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.22.0/24 maxlen: 24
140.150.23.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.26.0/24 maxlen: 24
140.150.27.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
140.150.34.0/24 maxlen: 24
140.150.35.0/24 maxlen: 24
140.150.36.0/24 maxlen: 24
140.150.37.0/24 maxlen: 24
140.150.38.0/24 maxlen: 24
140.150.40.0/24 maxlen: 24
140.150.41.0/24 maxlen: 24
140.150.42.0/24 maxlen: 24
140.150.43.0/24 maxlen: 24
140.150.44.0/24 maxlen: 24
140.150.46.0/24 maxlen: 24
140.150.47.0/24 maxlen: 24
146.103.64.0/24 maxlen: 24
146.103.65.0/24 maxlen: 24
146.103.66.0/24 maxlen: 24
146.103.67.0/24 maxlen: 24
146.103.68.0/24 maxlen: 24
146.103.71.0/24 maxlen: 24
146.103.72.0/24 maxlen: 24
146.103.73.0/24 maxlen: 24
146.103.74.0/24 maxlen: 24
146.103.75.0/24 maxlen: 24
146.103.76.0/24 maxlen: 24
146.103.77.0/24 maxlen: 24
146.103.78.0/24 maxlen: 24
146.103.79.0/24 maxlen: 24
146.103.80.0/24 maxlen: 24
146.103.81.0/24 maxlen: 24
146.103.82.0/24 maxlen: 24
146.103.83.0/24 maxlen: 24
146.103.84.0/24 maxlen: 24
146.103.85.0/24 maxlen: 24
146.103.86.0/24 maxlen: 24
146.103.87.0/24 maxlen: 24
146.103.88.0/24 maxlen: 24
146.103.89.0/24 maxlen: 24
146.103.90.0/24 maxlen: 24
146.103.91.0/24 maxlen: 24
146.103.92.0/24 maxlen: 24
146.103.93.0/24 maxlen: 24
146.103.94.0/24 maxlen: 24
146.103.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:0e:ca:7d:ee:1a:f6:fc:77:5a:88:bf:00:a9:f7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Oct 13 10:12:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3749739bedefca0b5d8964419fd797831065c992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:f3:0c:9e:bb:c7:11:98:64:df:e6:da:54:
f6:d4:f4:40:4f:ee:f3:7f:ae:1d:ec:36:38:f4:7e:
e9:97:1e:68:ad:73:aa:45:76:e3:0a:00:1e:b2:b8:
ed:7e:3b:33:95:b4:86:48:f3:0d:9d:39:f3:3a:ad:
04:4e:e6:fe:1a:b6:bf:a5:d5:62:fb:ec:57:d5:6b:
57:d0:4b:15:68:cd:a2:ab:77:d2:ef:48:f3:c9:73:
3e:a2:78:45:1a:f8:d8:f9:a2:3c:44:bb:93:24:8f:
ff:22:0e:46:64:57:4d:71:01:2c:f4:00:5e:01:f2:
c8:4b:eb:f3:7e:f3:e2:60:8d:60:2f:ef:cc:b8:06:
06:97:2b:1b:d9:d2:fb:6a:39:ae:39:00:30:54:6e:
bd:fe:65:5e:e4:48:7e:76:55:ca:5a:a5:ba:7d:fe:
a8:1c:c1:d1:0a:d8:b0:74:0e:90:cf:0b:9b:a6:e7:
4a:5c:0b:55:1c:12:43:9e:e9:18:28:2a:ed:a2:f0:
d4:36:0e:20:9a:cb:51:f9:37:8e:a8:9f:4b:c5:57:
5e:9c:1a:97:79:f5:48:97:50:7f:4d:b9:18:7a:45:
f3:67:6f:6c:9f:b7:02:10:7a:a4:6b:d8:5d:14:20:
cd:4a:54:94:cd:e1:73:85:cf:a0:cb:af:62:09:60:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:49:73:9B:ED:EF:CA:0B:5D:89:64:41:9F:D7:97:83:10:65:C9:92
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/N0lzm-3vygtdiWRBn9eXgxBlyZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0-140.150.8.255
140.150.10.0-140.150.12.255
140.150.14.0-140.150.16.255
140.150.18.0-140.150.38.255
140.150.40.0-140.150.44.255
140.150.46.0/23
146.103.64.0-146.103.68.255
146.103.71.0-146.103.95.255
Signature Algorithm: sha256WithRSAEncryption
6e:7d:2a:b6:ac:9f:90:ee:fb:82:6b:2a:ea:6c:d4:63:d5:50:
cc:b5:98:0c:5b:38:e1:18:52:1e:35:46:ef:6e:d7:23:73:72:
f8:ba:ba:a1:ea:42:03:ea:49:f3:43:4f:4f:c3:66:4e:45:4f:
20:a8:91:3d:54:c2:71:f5:a3:81:d9:83:d1:54:88:b9:7d:ba:
35:38:b2:1a:3c:a3:09:ed:2b:90:01:80:bd:ac:22:a4:cb:9a:
11:2b:e7:19:f5:e7:ed:cc:1c:57:37:e2:45:3f:04:29:cd:72:
42:97:ac:f4:d1:54:55:e6:7c:db:1e:df:ef:00:94:58:53:d1:
1b:82:66:96:c6:38:60:d3:a5:12:0b:36:3f:58:84:10:be:91:
63:4f:30:35:3b:11:cd:e6:18:41:52:ec:ec:75:9b:1a:87:1c:
78:8c:09:86:10:6f:c1:52:ca:4e:5e:e0:cf:54:e9:60:61:4c:
9d:a6:15:55:7f:3c:52:19:d0:0e:db:45:b5:ab:dc:ad:82:79:
7d:7d:4b:ad:5e:1d:dd:2e:06:88:ff:1e:80:61:40:e5:90:e6:
e7:fd:07:a5:d5:fa:9f:f8:35:35:7b:99:36:8c:cc:4d:15:58:
5e:f4:2f:06:80:31:25:17:eb:42:38:8d:6f:db:84:a8:7f:e4:
16:5c:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:59 2025 by rpki-client