Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa
File: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (raw, json)
Hash identifier: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=
Subject key identifier: 00:B5:38:96:B7:F1:9E:19:79:9B:6A:0F:75:0F:A8:1C:96:F6:FA:90
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019C95E6F58B91C58A9C6E8EE52D290F243A
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa
Signing time: Wed 25 Feb 2026 17:44:27 +0000
ROA not before: Wed 25 Feb 2026 17:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213430
IP address blocks: 216.195.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:e6:f5:8b:91:c5:8a:9c:6e:8e:e5:2d:29:0f:24:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Feb 25 17:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00b53896b7f19e19799b6a0f750fa81c96f6fa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:69:c1:6c:ed:2e:db:f7:bf:f5:7c:c8:44:
62:32:3d:62:2e:f6:62:f5:9c:39:e5:4a:d6:bd:d6:
ba:b4:35:a3:e8:1f:96:b4:73:6f:4e:d0:68:5d:db:
9e:73:94:67:12:ae:38:2d:66:32:ca:b2:b7:b3:6e:
8a:3e:9c:2e:62:9f:63:b4:95:62:bf:44:42:90:a6:
9e:89:a3:39:7d:f6:30:32:06:10:f8:f8:36:31:c8:
31:4d:2d:13:5b:53:01:ef:6d:c4:30:4b:45:9f:ff:
f6:82:db:fa:02:48:80:93:8a:9e:24:38:ca:fc:64:
1f:32:ef:95:2a:86:a6:d9:36:29:7e:3f:8d:03:03:
74:85:8f:c6:23:ed:34:c4:44:38:29:f2:b0:76:7f:
06:63:4b:ea:3a:75:26:21:a4:c7:ae:3a:1c:44:86:
90:cc:35:a4:74:20:6b:29:df:90:ed:ef:64:3c:52:
21:80:2f:f4:f6:e1:54:37:12:64:91:99:6b:5d:18:
8d:1b:c8:88:23:05:fd:d4:1d:5f:95:a2:a2:75:fc:
40:1b:74:0e:be:20:62:02:cb:13:1b:3f:0e:b8:98:
14:b0:63:aa:04:36:dc:09:6d:37:e5:4e:92:48:1b:
a2:a4:c6:fc:ad:d2:a6:42:4c:f5:43:1e:c0:7e:c0:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B5:38:96:B7:F1:9E:19:79:9B:6A:0F:75:0F:A8:1C:96:F6:FA:90
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.220.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:55:50:f0:ec:89:22:8c:1b:b8:82:35:67:fa:82:05:31:da:
90:92:47:b6:a9:4c:24:65:8a:fd:50:5c:9e:01:8a:04:f3:c0:
97:3a:d6:04:0e:b4:aa:49:62:f4:c8:c8:d8:0e:ad:68:b6:fb:
8c:fe:59:a5:26:c2:60:7d:8b:71:41:51:77:e1:f9:a0:fc:70:
78:2a:b1:5a:a0:44:bf:08:c1:1d:ca:00:4e:e7:37:65:c2:9a:
2a:fa:3d:4d:fb:4d:2b:bd:e2:08:34:c7:d7:5c:e2:0f:8d:0a:
7d:8c:90:26:3b:6c:1a:c0:f8:f1:f3:91:80:c4:4e:b5:05:2d:
bf:4b:04:3a:b4:1d:ca:52:35:16:be:83:e1:7b:fa:d8:98:46:
63:1a:89:de:44:25:3c:46:92:6a:4a:6d:d1:70:5d:3e:bb:92:
24:f1:e4:8a:51:7e:a1:00:b5:39:ed:ad:76:67:a3:5f:16:18:
69:76:11:8f:22:ce:f2:6e:ee:a0:35:71:23:8a:8f:30:de:7d:
ff:99:80:96:4f:61:a8:6a:46:ad:bd:63:d0:04:2d:03:6c:ed:
68:7c:ff:04:0b:50:e0:87:c8:94:8f:df:56:80:9a:0f:cf:e5:
a5:40:09:d9:c1:97:59:36:5f:00:2b:ad:25:b9:68:e1:ce:90:
23:0a:5e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:13 2026 by rpki-client