Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nxpt_7ShJGUJB90LM3AKn-baBgU.roa
File: nxpt_7ShJGUJB90LM3AKn-baBgU.roa (raw, json)
Hash identifier: SH1BIfEFaQqanVSvf0L/MCa6knS5FlApNNxEMjl3XPc=
Subject key identifier: 9F:1A:6D:FF:B4:A1:24:65:09:07:DD:0B:33:70:0A:9F:E6:DA:06:05
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197A600D57AFF2A3B16D3A816D3A3978EAD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nxpt_7ShJGUJB90LM3AKn-baBgU.roa
Signing time: Wed 25 Jun 2025 07:32:41 +0000
ROA not before: Wed 25 Jun 2025 07:32:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 151.240.25.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.241.32.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.39.0/24 maxlen: 24
151.241.41.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.241.51.0/24 maxlen: 24
151.241.164.0/24 maxlen: 24
151.244.72.0/24 maxlen: 24
151.244.203.0/24 maxlen: 24
151.244.240.0/24 maxlen: 24
151.245.76.0/24 maxlen: 24
151.245.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:00:d5:7a:ff:2a:3b:16:d3:a8:16:d3:a3:97:8e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 25 07:32:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f1a6dffb4a124650907dd0b33700a9fe6da0605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:dc:e9:a2:71:11:dd:fb:e3:fa:62:be:a5:
f1:76:c9:88:56:37:b7:11:2b:a6:87:2f:08:6b:32:
74:17:49:d6:cd:f6:3e:ab:37:2d:eb:01:f5:13:52:
c0:f5:9f:47:41:b7:cb:79:af:5b:f0:6c:be:1a:64:
9a:98:38:00:cc:00:a4:48:e0:e2:74:5f:ae:a6:79:
86:ec:82:f9:79:3e:42:86:7e:18:8a:00:7c:42:43:
0e:1c:7a:ad:9f:f5:37:fc:9f:6d:ab:01:26:71:e4:
ba:43:cd:d0:ad:e9:27:22:5f:40:6d:8e:4f:dc:42:
a6:72:9d:b3:3e:6a:df:3e:f1:27:6d:e0:cb:58:54:
e1:ff:2c:af:5a:b6:be:77:bb:7e:60:99:8d:23:a5:
b7:bd:d9:4e:ad:0b:2b:76:3e:ab:c0:6e:aa:41:15:
2b:1e:71:4e:87:be:f8:7d:1d:a3:d6:29:0a:9a:83:
ce:2c:43:ae:42:bd:cb:34:65:5a:74:bc:82:35:76:
77:2e:32:15:2d:26:c0:78:79:51:6b:d6:2f:c7:5d:
bc:4e:42:5b:cd:35:a1:3c:17:17:b7:e6:ae:e2:c4:
66:50:36:93:b7:02:0e:2c:d3:77:fe:59:3f:bd:2e:
64:cf:7b:4e:3c:5c:9b:d1:8a:01:04:c7:5c:d2:fc:
9d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1A:6D:FF:B4:A1:24:65:09:07:DD:0B:33:70:0A:9F:E6:DA:06:05
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nxpt_7ShJGUJB90LM3AKn-baBgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.25.0/24
151.240.30.0/24
151.240.158.0/24
151.240.161.0/24
151.240.169.0/24
151.241.32.0/23
151.241.39.0/24
151.241.41.0/24
151.241.43.0/24
151.241.48.0/24
151.241.51.0/24
151.241.164.0/24
151.244.72.0/24
151.244.203.0/24
151.244.240.0/24
151.245.76.0/24
151.245.203.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e9:9b:9f:f2:03:ee:a2:27:72:38:2c:bc:d9:6e:e2:4a:69:
0e:f6:cc:9d:fb:c2:89:87:4c:ec:3b:28:e7:73:58:4f:9d:e2:
6f:3e:4d:55:63:b8:93:bf:e0:1f:75:a4:23:ed:f2:ee:37:18:
a2:b5:86:a9:4d:a7:ce:b2:29:af:d5:08:6f:6e:09:38:06:45:
69:7a:f1:87:b3:fb:7d:dc:b2:43:06:ac:61:46:21:34:cf:d7:
5f:45:12:dc:bc:a7:5d:02:3e:80:30:fc:c0:79:7c:5b:9a:6c:
5f:e5:22:a1:a1:41:4c:45:58:22:97:c4:13:92:34:92:07:9f:
61:8a:28:c1:4f:48:fb:00:f6:2d:ee:a6:91:ca:57:5e:ab:4b:
24:c6:61:d1:bb:5c:f2:47:89:fb:76:cc:77:32:33:6b:c8:fb:
95:18:04:b0:03:e1:42:b2:26:57:74:24:2d:58:a0:49:d0:4b:
d7:70:ca:f1:c9:c6:d8:62:f3:a7:67:ac:6f:52:08:69:f7:8c:
e9:c4:6b:15:15:74:f1:a2:76:f5:1f:de:e9:c1:d6:93:01:71:
fe:21:bd:01:e7:73:e6:89:58:a6:1a:83:ff:7e:f0:90:c3:94:
9c:9b:8b:b7:b0:a0:33:66:7d:18:54:12:92:06:2d:7b:b6:93:
06:e4:56:ba
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAZemANV6/yo7FtOoFtOjl46tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjI1MDczMjQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjFhNmRmZmI0YTEyNDY1MDkwN2RkMGIzMzcwMGE5ZmU2ZGEwNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS7c6aJxEd374/pivqXxdsmIVje3
ESumhy8IazJ0F0nWzfY+qzct6wH1E1LA9Z9HQbfLea9b8Gy+GmSamDgAzACkSODi
dF+upnmG7IL5eT5Chn4YigB8QkMOHHqtn/U3/J9tqwEmceS6Q83QreknIl9AbY5P
3EKmcp2zPmrfPvEnbeDLWFTh/yyvWra+d7t+YJmNI6W3vdlOrQsrdj6rwG6qQRUr
HnFOh774fR2j1ikKmoPOLEOuQr3LNGVadLyCNXZ3LjIVLSbAeHlRa9Yvx128TkJb
zTWhPBcXt+au4sRmUDaTtwIOLNN3/lk/vS5kz3tOPFyb0YoBBMdc0vydjQIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFJ8abf+0oSRlCQfdCzNwCp/m2gYFMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvbnhwdF83U2hKR1VKQjkwTE0zQUtuLWJhQmdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAl/AZAwQA
l/AeAwQAl/CeAwQAl/ChAwQAl/CpAwQBl/EgAwQAl/EnAwQAl/EpAwQAl/ErAwQA
l/EwAwQAl/EzAwQAl/GkAwQAl/RIAwQAl/TLAwQAl/TwAwQAl/VMAwQAl/XLMA0G
CSqGSIb3DQEBCwUAA4IBAQAT6Zuf8gPuoidyOCy82W7iSmkO9syd+8KJh0zsOyjn
c1hPneJvPk1VY7iTv+AfdaQj7fLuNxiitYapTafOsimv1Qhvbgk4BkVpevGHs/t9
3LJDBqxhRiE0z9dfRRLcvKddAj6AMPzAeXxbmmxf5SKhoUFMRVgil8QTkjSSB59h
iijBT0j7APYt7qaRyldeq0skxmHRu1zyR4n7dsx3MjNryPuVGASwA+FCsiZXdCQt
WKBJ0EvXcMrxycbYYvOnZ6xvUghp94zpxGsVFXTxonb1H97pwdaTAXH+Ib0B53Pm
iVimGoP/fvCQw5Scm4u3sKAzZn0YVBKSBi17tpMG5Fa6
-----END CERTIFICATE-----
Generated at Wed Jul 2 23:35:06 2025 by rpki-client