Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/nu8XADsimCod0_uWl8egJ3aFHEw.roa
File: nu8XADsimCod0_uWl8egJ3aFHEw.roa (raw, json)
Hash identifier: H55dZSXKTNI4+9o7BFR1/GCpspjJcbHLdvt5EmFjk+U=
Subject key identifier: 9E:EF:17:00:3B:22:98:2A:1D:D3:FB:96:97:C7:A0:27:76:85:1C:4C
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019F270D30E93FBF7DE3090407A963C28CF4
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/nu8XADsimCod0_uWl8egJ3aFHEw.roa
Signing time: Fri 03 Jul 2026 08:16:43 +0000
ROA not before: Fri 03 Jul 2026 08:16:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59920
IP address blocks: 31.13.212.0/24 maxlen: 24
136.175.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:0d:30:e9:3f:bf:7d:e3:09:04:07:a9:63:c2:8c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Jul 3 08:16:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9eef17003b22982a1dd3fb9697c7a02776851c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:ac:20:6b:e1:ae:d3:fc:a5:21:1c:82:82:
ca:69:84:16:ed:b9:e7:59:4a:6b:76:78:51:33:93:
f5:90:c9:c9:1c:00:07:8e:21:86:15:14:df:0c:d3:
78:6d:3f:cf:02:a7:29:93:9d:a6:18:f7:9e:e9:16:
bb:0b:9f:77:97:d8:73:d6:43:80:87:7b:dc:c4:7b:
af:b4:d4:a2:d6:14:1f:b9:25:5c:db:c8:72:3e:6b:
c4:09:c6:f3:e5:2c:c9:6c:60:9e:5d:28:5d:2e:57:
75:14:b4:e7:84:a0:49:54:38:2d:04:72:9b:de:7d:
e0:f3:b3:bd:77:91:70:20:8b:e8:cf:9b:25:d2:47:
64:55:89:92:e8:88:7d:52:7e:db:6c:19:49:c4:9f:
fa:1c:47:86:ba:8d:5f:4d:f7:36:52:07:a9:4f:40:
63:92:07:9a:37:95:9f:1f:15:cc:c5:c6:07:9a:f4:
35:ad:9c:4d:f9:05:05:30:8c:2e:71:29:78:1f:82:
3e:74:84:c5:d0:3c:1f:98:d2:d9:5b:d6:8e:2d:1f:
46:99:dc:c5:18:12:d5:25:24:18:9f:f0:2b:db:79:
da:b7:ae:a1:5c:b7:f3:e5:8a:c4:6c:69:5e:96:96:
72:ec:af:23:1c:6d:63:19:cd:e6:1e:7f:5a:56:2f:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:17:00:3B:22:98:2A:1D:D3:FB:96:97:C7:A0:27:76:85:1C:4C
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/nu8XADsimCod0_uWl8egJ3aFHEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.212.0/24
136.175.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:cb:03:8e:2e:d6:9e:a9:80:75:95:df:73:90:7f:3c:f5:8d:
1a:a3:13:3c:b9:45:ac:c2:f9:60:7a:36:eb:b9:4a:da:13:1d:
c3:2d:cd:f3:1b:76:cd:7b:42:09:91:37:0d:cb:ca:63:d7:7f:
64:e4:bb:92:88:0c:4c:6c:81:3e:d4:5f:c6:b2:78:08:bb:f2:
4b:aa:68:79:bd:4f:34:fb:3d:4e:a0:ae:56:c8:76:96:2e:1d:
14:fa:f5:21:88:85:db:c9:1d:b6:2c:ba:e1:93:d0:a8:9e:08:
07:51:89:62:eb:67:fe:98:6f:57:cc:fd:90:0d:c5:2f:40:bb:
5a:d1:62:25:c4:7f:b0:2d:7d:85:97:2e:e6:94:f5:4e:5c:41:
6f:f5:80:81:c0:c0:56:e7:31:6a:25:b9:f3:f9:ef:0a:83:d2:
ea:b8:8a:64:eb:2b:15:f1:1d:fe:0c:32:ed:37:59:a4:a5:17:
40:c4:ba:d6:a8:c9:a9:b8:7e:a4:c0:d1:74:06:55:45:81:b6:
4c:44:de:fa:a1:ba:ec:f4:de:e0:ea:8c:d5:5a:bd:85:80:25:
0c:79:fc:c1:2e:36:e5:7c:9f:13:26:4a:69:63:79:6e:55:2a:
e1:04:75:62:66:33:4f:d8:ea:59:d4:91:f2:60:b3:8b:f2:ed:
b8:5f:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:49 2026 by rpki-client