Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/APlmnKHZODCNSunvzWMmlebxZbo.roa
File: APlmnKHZODCNSunvzWMmlebxZbo.roa (raw, json)
Hash identifier: QAoewBI2F8XDmieB1npAXSt/XAawfhTLWLPzLSSKEr8=
Subject key identifier: 00:F9:66:9C:A1:D9:38:30:8D:4A:E9:EF:CD:63:26:95:E6:F1:65:BA
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 019F41050E755550C359B5F9F6EEF95E1B25
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/APlmnKHZODCNSunvzWMmlebxZbo.roa
Signing time: Wed 08 Jul 2026 09:17:58 +0000
ROA not before: Wed 08 Jul 2026 09:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3215
IP address blocks: 185.179.192.0/22 maxlen: 22
2a0c:4140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:05:0e:75:55:50:c3:59:b5:f9:f6:ee:f9:5e:1b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Jul 8 09:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00f9669ca1d938308d4ae9efcd632695e6f165ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:1a:75:1f:ca:48:96:ef:75:29:6e:1c:8c:
bb:db:05:c5:5d:39:91:75:48:e5:2a:62:f3:cc:99:
af:01:df:0c:29:31:db:0e:1b:e6:da:56:2c:d2:9c:
03:cc:d7:61:7b:90:ce:fc:12:47:1c:aa:2a:24:41:
62:00:b4:85:3e:d5:7c:21:b0:ab:05:3c:10:a6:c4:
70:2d:b7:9a:47:db:46:be:47:7e:0e:04:55:09:a8:
a1:00:25:a5:ce:ae:cd:92:a6:6d:65:cf:e6:3d:7d:
73:1d:69:2e:9e:1c:49:68:46:33:26:63:51:c1:b4:
19:c5:4e:4e:79:43:6c:37:bf:69:3f:47:c5:a8:12:
8b:3d:6d:a6:31:66:f3:e7:7b:72:b7:79:60:62:bf:
86:f4:df:30:8d:50:8d:be:50:4c:cc:32:f7:56:be:
57:a2:62:4a:90:92:b2:c7:14:0e:62:52:95:21:18:
bf:34:e9:ca:bc:86:05:ff:ad:bd:c4:01:bd:6f:5c:
8c:1d:24:99:31:d3:57:8a:93:77:0d:7b:b8:3f:55:
59:d3:9a:2b:82:66:e2:b6:18:a4:74:53:be:4c:8f:
48:4e:ba:ff:59:55:58:8b:25:b7:9d:f9:5e:d1:26:
46:82:46:cc:58:de:e0:98:19:97:e3:19:9a:37:8c:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:66:9C:A1:D9:38:30:8D:4A:E9:EF:CD:63:26:95:E6:F1:65:BA
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/APlmnKHZODCNSunvzWMmlebxZbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.192.0/22
IPv6:
2a0c:4140::/32
Signature Algorithm: sha256WithRSAEncryption
b1:f0:be:3b:4d:ed:47:dd:36:9d:f7:d9:56:81:93:d0:48:17:
c5:ac:4e:7e:0d:db:24:1e:7d:7e:93:1c:e4:dd:be:07:5e:77:
2f:c1:a3:75:10:3b:39:69:34:e5:5d:6d:8d:c5:a5:b1:e1:81:
36:b2:40:57:e0:bd:0b:69:ec:76:6a:d0:e5:a6:dc:b1:dc:1e:
1e:28:17:fd:d2:bd:ba:4e:2f:95:e6:f3:48:52:bf:d3:dc:d1:
ed:81:44:a8:a7:67:9d:1d:33:a5:0b:f2:e3:39:c4:71:fd:bd:
8c:7d:c3:66:2b:d1:c8:06:e6:49:e9:15:ff:cb:1c:fc:57:35:
db:e7:c4:54:2a:f3:8a:e3:5d:ba:33:cd:4b:ee:b5:c1:25:15:
e7:cd:2d:53:98:8a:03:76:db:7f:09:af:03:a2:5c:fe:e8:95:
9d:7f:65:25:0d:45:2d:d7:88:d0:14:7a:e0:a2:76:13:6b:33:
0b:34:db:3f:3a:86:c7:e4:5e:23:42:4b:4a:f6:45:41:a3:83:
4b:04:71:62:bb:bc:ce:a1:bb:1d:0f:d1:32:9e:83:ef:4a:9d:
fd:e2:b1:e5:ee:11:9a:e0:a3:a1:19:88:ce:fc:f1:11:11:36:
77:9d:c5:a3:76:56:81:7d:c9:fd:11:8c:a7:a1:fc:8f:fc:45:
15:fb:6d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:48:27 2026 by rpki-client