Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ApgnzHr4DQ9vcmm_DUOowAM9xhs.roa
File: ApgnzHr4DQ9vcmm_DUOowAM9xhs.roa (raw, json)
Hash identifier: DYef+mFVI3HjlMLAD+JC+ktGZuxZSd95JEYFb4cjnTM=
Subject key identifier: 02:98:27:CC:7A:F8:0D:0F:6F:72:69:BF:0D:43:A8:C0:03:3D:C6:1B
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A1788F8EA9B079DD69DB2DB313705ACE6B
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ApgnzHr4DQ9vcmm_DUOowAM9xhs.roa
Signing time: Mon 26 Oct 2026 14:13:56 +0000
ROA not before: Mon 26 Oct 2026 14:13:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44620
IP address blocks: 37.221.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:8f:8e:a9:b0:79:dd:69:db:2d:b3:13:70:5a:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 26 14:13:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=029827cc7af80d0f6f7269bf0d43a8c0033dc61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:b9:7a:1c:27:39:97:81:02:17:6d:97:de:
05:40:fb:d6:e2:a1:c5:8c:c5:9d:1d:9c:29:e8:11:
f5:fb:b9:6e:32:5d:2d:77:a8:d3:43:bd:e9:02:06:
fd:03:5e:4b:1a:50:b5:8a:81:8a:c2:d0:8c:12:39:
5a:e9:e7:32:81:d9:4d:d7:ca:70:7f:f8:2f:a8:56:
d3:75:45:b2:a1:ee:f7:3f:ae:12:be:41:7d:3a:e1:
2d:c8:a6:9e:38:8b:4f:e1:7e:7b:60:4e:01:de:31:
41:23:69:0a:20:35:51:6c:ca:93:3e:20:bc:6c:85:
b1:51:ac:02:81:9e:93:2a:9a:b5:b2:69:17:e0:0a:
c4:2b:dd:70:cf:02:50:62:be:54:75:30:71:3a:da:
c2:a7:a8:d8:16:16:5d:7a:06:26:69:2b:02:fa:46:
6a:ea:8c:e3:5c:cc:4d:ce:75:4f:91:21:c2:8f:14:
47:0f:f0:5f:79:a8:a5:9e:c2:bd:44:bb:9e:3f:3f:
83:43:4e:95:de:22:25:ec:3c:2f:9a:5c:4a:b0:5c:
8b:f0:ce:72:9a:d3:f0:72:5e:60:d8:aa:3d:83:88:
59:ed:5c:1f:e4:b3:b2:8d:49:9a:f4:8a:4f:f8:ff:
4a:a7:7d:2e:7c:7b:92:58:44:73:e3:67:60:bf:d0:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:27:CC:7A:F8:0D:0F:6F:72:69:BF:0D:43:A8:C0:03:3D:C6:1B
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/ApgnzHr4DQ9vcmm_DUOowAM9xhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ab:1f:da:b9:5d:8e:08:3d:ab:0f:85:95:94:34:d4:4d:a0:
ac:75:c2:b1:f1:c4:2c:6c:46:59:eb:57:9d:56:0f:a6:00:8c:
bb:8c:1f:12:b0:71:25:16:18:5e:29:4d:ad:8a:6b:31:1b:64:
9f:0c:1b:b7:fa:af:48:0a:7b:46:11:aa:06:cb:f2:31:06:14:
63:28:b3:d1:19:ae:0f:e1:fa:cb:a4:9e:6f:89:05:aa:f9:ed:
65:59:36:83:81:98:f1:49:fe:6d:4c:cf:09:d7:70:76:85:e8:
76:73:4f:47:27:e8:a7:28:b8:bb:b4:3c:42:6c:b8:c8:78:7a:
3c:74:36:f7:2d:f8:2d:a5:77:d2:88:8a:85:36:f6:fe:2f:c5:
7c:7e:20:b6:f6:d9:d4:42:0d:41:f5:bc:ad:a3:fe:1e:46:92:
5d:4b:e3:a5:4f:ba:b9:27:6b:b7:49:ae:94:bb:1a:a2:4c:55:
11:55:ac:6a:24:8c:14:55:d1:1e:b8:98:99:41:75:01:0c:6e:
6d:da:23:e7:97:93:e7:3d:d4:30:4c:70:a7:06:dc:b7:87:69:
ef:fe:6a:a5:40:61:44:95:8d:94:44:6e:01:c6:24:bf:58:72:
a7:34:36:22:6d:4f:b2:ae:fc:85:c9:f6:57:d4:9f:18:0b:9a:
7d:e2:b5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:09:41 2026 by rpki-client