Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/opdAPP4XfkWYA7yU3ItVjBZuv-c.roa
File: opdAPP4XfkWYA7yU3ItVjBZuv-c.roa (raw, json)
Hash identifier: 0Hfm1qyjd3lUos1jStXhOtEuhh/ZjqT6H9OzWUho5SI=
Subject key identifier: A2:97:40:3C:FE:17:7E:45:98:03:BC:94:DC:8B:55:8C:16:6E:BF:E7
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019D66B6C09ACD84E754155BAE94F66D4A75
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/opdAPP4XfkWYA7yU3ItVjBZuv-c.roa
Signing time: Tue 07 Apr 2026 06:52:25 +0000
ROA not before: Tue 07 Apr 2026 06:52:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211665
IP address blocks: 31.13.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:b6:c0:9a:cd:84:e7:54:15:5b:ae:94:f6:6d:4a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Apr 7 06:52:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a297403cfe177e459803bc94dc8b558c166ebfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:11:13:27:c1:31:14:f5:30:b7:07:f0:92:94:
11:bd:6d:e2:7c:91:d7:ae:44:ed:83:ea:88:4e:5c:
db:a6:dd:56:51:b5:11:e4:a6:92:67:b2:60:e2:a1:
a8:45:70:d9:10:ef:f1:6e:98:bb:1d:9d:7e:81:6a:
dc:b2:80:e8:1b:10:1d:5a:eb:79:ac:ae:55:a2:fa:
d4:c3:cb:91:59:fa:2f:59:60:94:62:a6:6a:6c:34:
c0:2d:04:13:40:39:b5:93:0c:0e:8a:25:89:86:f5:
14:60:b0:50:8a:1f:1f:47:c7:65:47:2d:1d:5d:f9:
e8:f2:88:a5:7b:0e:8b:cc:70:59:db:ba:9e:27:96:
54:76:da:ea:c2:6b:0a:0c:54:75:11:4f:1c:65:b9:
8a:10:eb:5d:ad:4b:5c:ed:aa:d5:ca:95:cd:f4:80:
b1:35:b0:1e:23:ca:6e:4a:70:f4:28:62:bc:69:b8:
4f:dd:33:50:9b:d4:45:fd:bc:8e:44:ee:b9:b5:5c:
c9:de:bf:a3:90:cf:3a:c6:e6:e0:08:64:27:a3:e8:
81:b4:e1:0b:a5:b0:f0:aa:c1:ec:08:79:2f:bf:8b:
40:ea:51:d9:f0:68:8d:ae:7e:e7:03:4f:bd:9d:7d:
cf:fa:b3:e7:91:39:7f:19:a6:cc:02:12:04:8c:f9:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:97:40:3C:FE:17:7E:45:98:03:BC:94:DC:8B:55:8C:16:6E:BF:E7
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/opdAPP4XfkWYA7yU3ItVjBZuv-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:67:d7:f6:96:da:e1:28:fd:75:6e:cc:71:ab:ee:d0:61:26:
83:ec:26:f3:c7:7b:fb:e6:45:37:c9:09:2b:75:b0:f9:db:bb:
c9:f8:5e:ff:87:c2:16:0b:9a:9a:51:2e:17:0e:fa:74:d5:42:
25:1e:0d:cf:66:98:de:70:30:de:4a:f9:28:b8:f2:6d:f2:8b:
5e:93:51:3b:66:92:12:fa:e1:e4:b2:43:f7:18:f8:0e:5b:64:
d7:a5:3c:9e:6f:13:dc:40:21:35:c8:55:67:07:2a:51:f6:ef:
df:1e:f7:0c:2c:d7:d4:f9:62:92:ab:fd:b3:38:34:93:f8:5a:
55:75:d5:6c:11:d5:74:2b:53:62:d8:e0:f0:cd:69:b2:a1:8a:
52:bc:33:16:1b:01:3b:48:e5:79:9e:1c:77:88:58:a6:f0:56:
c3:45:4b:f4:29:ab:f2:19:ee:ac:94:ba:03:59:e6:ea:e2:8f:
c7:6a:0a:8a:d1:bc:62:2d:f3:db:7a:5a:da:b1:90:3d:81:bd:
cd:97:93:c5:97:b3:f4:d8:43:92:8b:b6:dc:67:95:c6:c3:df:
02:9a:99:12:42:66:ed:bf:61:98:61:56:f2:c6:0c:ad:d9:6f:
30:52:38:aa:42:9c:72:18:d3:8f:62:e0:4a:bc:cc:2b:29:1c:
93:b0:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:22 2026 by rpki-client