Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/APmi5_jQqBNHThHmvY1hzsLA0jA.roa
File: APmi5_jQqBNHThHmvY1hzsLA0jA.roa (raw, json)
Hash identifier: ZhrgvOuigIGr1xYdUQY9V8djkFIyU3gCvaLql6FsGl0=
Subject key identifier: 00:F9:A2:E7:F8:D0:A8:13:47:4E:11:E6:BD:8D:61:CE:C2:C0:D2:30
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E07DABFE808A8A21413C8EFFD5933EC53
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/APmi5_jQqBNHThHmvY1hzsLA0jA.roa
Signing time: Fri 08 May 2026 13:50:37 +0000
ROA not before: Fri 08 May 2026 13:50:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 222.167.196.0/24 maxlen: 24
222.167.214.0/24 maxlen: 24
222.167.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:da:bf:e8:08:a8:a2:14:13:c8:ef:fd:59:33:ec:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 8 13:50:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00f9a2e7f8d0a813474e11e6bd8d61cec2c0d230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:f1:49:2a:13:53:98:d5:94:25:4b:29:70:
1b:ae:41:dd:cb:19:6f:ad:e5:f3:c4:c5:32:6b:30:
0e:f5:de:e2:3e:d4:a8:9b:a7:f5:d4:6c:44:6d:d8:
56:94:82:fa:73:67:b6:6a:10:15:e7:ee:c1:ba:ef:
56:71:7e:ae:9b:47:98:64:a5:3c:d8:eb:82:a3:fc:
59:1e:7e:c4:6d:cd:7c:5c:e3:2c:20:5e:fb:e2:e5:
5a:51:5a:fc:67:73:27:0a:0f:02:9f:42:c5:4f:78:
fe:3c:2c:34:e3:27:5f:65:72:8d:f9:62:fd:9c:5f:
5e:90:71:99:7a:70:1b:0b:71:91:38:b0:f9:33:95:
86:58:0f:35:06:4c:3b:92:2b:d6:16:1f:14:a6:78:
61:d7:55:6b:82:ad:bb:65:97:8a:31:1c:ad:ea:9f:
db:1c:b3:ef:bf:da:ab:37:e1:99:5f:15:c9:ca:cb:
a2:e8:b7:45:ec:da:03:e3:99:4b:f3:bd:ec:23:99:
a2:c0:05:a9:48:e4:cb:e8:b7:fe:ca:6e:0c:08:a6:
93:a3:2b:d8:62:9a:d8:e3:eb:a1:1a:1f:9b:b9:3d:
43:6d:cd:dd:17:3e:f7:bb:c2:a9:aa:1f:87:67:86:
45:77:fb:c2:91:64:61:77:a6:c8:ec:f9:d1:61:4b:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:A2:E7:F8:D0:A8:13:47:4E:11:E6:BD:8D:61:CE:C2:C0:D2:30
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/APmi5_jQqBNHThHmvY1hzsLA0jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.196.0/24
222.167.214.0/24
222.167.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:93:bb:4b:89:73:86:d5:22:05:47:9e:49:7f:32:c9:8a:a7:
80:90:af:2a:eb:56:d3:48:54:56:96:85:47:c7:24:df:58:0e:
a2:db:70:3e:cd:d5:c3:ce:27:d4:c2:da:4b:3a:dc:04:b8:ff:
4d:55:78:dc:56:5f:75:2d:01:ce:0d:ee:26:e0:d7:65:89:3d:
95:21:5d:50:16:55:c0:6c:26:e3:91:93:16:d5:13:f5:b6:84:
f4:f2:77:e7:2d:22:f7:7e:da:9b:2d:cb:55:f4:06:f5:76:2d:
36:f2:2a:cd:22:5f:73:c1:29:0d:3c:1f:01:ce:e8:ea:58:69:
92:1c:bc:c6:55:a4:db:f7:27:92:94:c9:74:6a:a6:4b:49:b4:
40:3e:34:56:db:2a:7a:83:7d:87:49:10:96:ae:78:6d:3a:00:
67:eb:a0:d8:fe:b8:12:62:5b:1e:01:e4:16:48:fa:26:8b:0b:
08:06:23:1d:45:4e:20:a7:b3:af:84:6f:bc:53:37:96:92:75:
40:ae:53:e6:5d:4f:c5:83:b3:37:ef:88:23:c9:c7:5e:48:1e:
2d:84:dd:11:1c:4f:fc:97:b2:94:b0:28:12:c5:ae:cf:91:bd:
ef:fd:eb:88:21:81:fd:0d:8c:34:cc:ae:54:61:89:45:c8:5e:
e1:5e:02:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:47:44 2026 by rpki-client