Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d3e8a8-58ef-4630-bf35-cee64195533c/1/OPpSZm1jWTTBpqUrYsOO8HLZeBs.roa
File: OPpSZm1jWTTBpqUrYsOO8HLZeBs.roa (raw, json)
Hash identifier: bb6q72W6oNvno2eLB+s2W9k1FAddahs3TD0hpCigXCI=
Subject key identifier: 38:FA:52:66:6D:63:59:34:C1:A6:A5:2B:62:C3:8E:F0:72:D9:78:1B
Certificate issuer: /CN=4501e85c0025c4ae29528058e232d737c2f495ce
Certificate serial: 019CFBB2911D28FA768AF0DDFA352FB74528
Authority key identifier: 45:01:E8:5C:00:25:C4:AE:29:52:80:58:E2:32:D7:37:C2:F4:95:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQHoXAAlxK4pUoBY4jLXN8L0lc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d3e8a8-58ef-4630-bf35-cee64195533c/1/OPpSZm1jWTTBpqUrYsOO8HLZeBs.roa
Signing time: Tue 17 Mar 2026 12:08:29 +0000
ROA not before: Tue 17 Mar 2026 12:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57035
IP address blocks: 91.230.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d3e8a8-58ef-4630-bf35-cee64195533c/1/RQHoXAAlxK4pUoBY4jLXN8L0lc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d3e8a8-58ef-4630-bf35-cee64195533c/1/RQHoXAAlxK4pUoBY4jLXN8L0lc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQHoXAAlxK4pUoBY4jLXN8L0lc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:b2:91:1d:28:fa:76:8a:f0:dd:fa:35:2f:b7:45:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4501e85c0025c4ae29528058e232d737c2f495ce
Validity
Not Before: Mar 17 12:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38fa52666d635934c1a6a52b62c38ef072d9781b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:b3:59:bd:4f:cb:82:c0:08:74:99:d1:f1:
14:d1:2d:47:8b:ca:ef:bb:ad:58:47:10:b6:3c:8e:
ee:5a:ad:83:4f:90:a0:0e:41:42:0e:f3:3f:38:30:
26:5d:a9:b7:ba:91:00:36:3b:f3:08:13:0e:c2:26:
3e:c6:3f:3d:e9:2e:24:6d:f4:13:fc:4d:86:25:75:
f0:f2:b0:ca:89:b3:ee:65:89:b0:e2:83:5b:a1:92:
e7:dc:8a:da:85:d1:91:30:b7:13:b1:19:41:47:b4:
09:db:e6:ec:7d:da:7b:8d:78:c7:86:9f:57:8b:d6:
6e:ff:45:7a:8f:a0:7c:b2:95:af:70:aa:66:29:f9:
47:4e:b5:94:17:85:b5:53:8c:0b:e3:09:8b:28:2c:
8a:93:22:0c:e3:43:bf:d7:66:9f:8e:50:a2:97:d7:
79:42:a1:a2:98:90:f8:17:7d:07:fc:57:b7:bb:03:
31:98:81:d7:f4:fb:76:2f:7f:e3:4a:ba:28:c8:b0:
b1:7d:65:9d:e5:4a:50:b8:35:07:6e:8c:2b:23:10:
13:31:57:51:18:e0:ba:6e:d4:f6:91:f7:b2:34:83:
36:33:e8:40:c7:85:a5:75:f5:fc:6b:bd:dd:50:06:
66:af:76:c1:0e:95:29:fe:d7:d4:ca:13:c1:ae:e0:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FA:52:66:6D:63:59:34:C1:A6:A5:2B:62:C3:8E:F0:72:D9:78:1B
X509v3 Authority Key Identifier:
keyid:45:01:E8:5C:00:25:C4:AE:29:52:80:58:E2:32:D7:37:C2:F4:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQHoXAAlxK4pUoBY4jLXN8L0lc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d3e8a8-58ef-4630-bf35-cee64195533c/1/OPpSZm1jWTTBpqUrYsOO8HLZeBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d3e8a8-58ef-4630-bf35-cee64195533c/1/RQHoXAAlxK4pUoBY4jLXN8L0lc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.79.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7c:9a:93:ab:53:68:e1:68:b9:76:8d:bb:fb:aa:b5:a9:d6:
39:5c:59:40:dd:60:2e:32:a2:ac:40:99:4d:44:f8:0e:ef:aa:
7b:a1:08:9a:db:cd:24:13:3b:67:48:59:fd:96:1b:99:00:2c:
93:43:33:3f:2a:61:ac:f8:50:35:a3:6e:f4:8d:fd:e3:60:1c:
49:b1:f3:d2:2f:ee:0a:ce:a4:43:c0:bc:47:30:50:7f:38:82:
51:00:c8:79:27:e0:e5:51:20:86:52:63:46:8a:1f:f4:b8:5d:
e8:7e:b5:98:12:a5:40:d0:87:f4:64:f7:9b:d7:c0:56:94:df:
ad:8c:8c:40:2f:72:09:2b:9f:6d:f9:5b:04:19:a8:d3:9f:e9:
24:10:e2:bb:63:20:06:59:ac:ff:97:a1:fa:85:e9:09:20:d0:
a6:a7:e5:a8:3a:89:0b:08:d1:e7:ea:4d:a9:fd:b8:52:eb:7b:
9a:1d:01:a2:bc:76:cd:3d:47:07:43:91:3b:1a:4a:59:c4:e1:
0a:e1:fd:81:25:6c:d4:88:0d:fd:a2:eb:10:af:ee:85:f5:4c:
09:41:d2:47:4b:94:8d:2e:a3:6b:76:06:32:b5:82:1e:70:e6:
e1:89:e8:2c:00:c6:29:1d:c0:f0:2b:60:a8:2f:bc:81:e6:3f:
bd:fd:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:52 2026 by rpki-client