Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VizmGeSa2cJTZrWUP6jN4VO2NiM.roa
File: VizmGeSa2cJTZrWUP6jN4VO2NiM.roa (raw, json)
Hash identifier: Y3xiVDCJGgNygDa7BfOjOUnPkJjefgVrZ7FdfVy3XQg=
Subject key identifier: 56:2C:E6:19:E4:9A:D9:C2:53:66:B5:94:3F:A8:CD:E1:53:B6:36:23
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0F084090935C84C316ABA411DE0E8C8D8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VizmGeSa2cJTZrWUP6jN4VO2NiM.roa
Signing time: Wed 30 Sep 2026 04:13:00 +0000
ROA not before: Wed 30 Sep 2026 04:13:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51852
IP address blocks: 9.247.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:84:09:09:35:c8:4c:31:6a:ba:41:1d:e0:e8:c8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 30 04:13:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=562ce619e49ad9c25366b5943fa8cde153b63623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:2e:42:40:c6:1e:ad:43:da:fa:26:f1:4c:
50:0a:fd:9a:f2:34:ba:52:f4:53:fc:6f:8f:01:f6:
e8:9c:08:da:e7:d4:03:58:8c:61:c5:5c:36:0d:ae:
ab:df:ee:f3:e8:08:72:8b:f7:16:96:34:06:49:7f:
5c:63:10:33:20:b9:87:90:70:d8:72:49:48:00:61:
a5:90:1f:18:e8:6a:40:1b:c5:32:7d:cf:fc:f3:ca:
8a:d2:74:89:f8:d3:5b:ed:fe:e5:d1:a8:cf:2f:6e:
1e:32:3a:72:cd:7d:67:c1:36:59:0c:9b:11:67:6c:
58:c6:23:ea:35:43:50:5a:09:4f:9c:5c:6d:93:a8:
d3:7e:d2:cb:37:19:d4:12:0b:a7:71:c8:35:8c:4e:
ee:9d:69:87:bf:f6:ef:9c:6e:fc:66:94:76:19:63:
b1:b9:1f:4e:b4:fe:ed:33:7b:20:1b:5a:e6:ad:b3:
0e:63:b3:ed:8f:29:ea:92:3f:7f:c7:f7:5b:61:e8:
11:98:76:78:8c:f0:10:6a:20:0e:24:bf:38:5e:1b:
c3:ac:a6:ab:64:08:a4:46:19:f6:1a:85:2a:56:65:
79:c8:7f:2c:f6:c5:04:c8:ae:2e:46:06:fe:f6:ea:
f8:44:8c:84:1d:54:7f:e1:d2:02:e3:e0:84:bc:9d:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:E6:19:E4:9A:D9:C2:53:66:B5:94:3F:A8:CD:E1:53:B6:36:23
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VizmGeSa2cJTZrWUP6jN4VO2NiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.18.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2c:d5:66:0f:b6:4e:1c:1d:24:09:3f:2c:4b:d1:07:68:ab:
c1:e8:10:a6:93:f5:cc:21:82:8b:cb:40:1c:cc:65:53:80:5f:
8c:5d:bd:85:bb:89:7e:11:6c:42:74:6a:5c:62:3f:15:79:66:
62:1a:01:00:cc:26:3b:5f:5e:f6:02:32:93:51:5b:f1:56:e0:
d2:20:ed:70:0f:f9:35:68:84:e7:0f:76:b3:8a:49:87:dd:fa:
3f:68:c3:3c:34:6c:b5:f4:8f:72:02:94:d8:7a:a0:de:7b:f6:
a7:dc:0f:6d:e0:6e:81:43:4f:5f:56:b8:66:48:da:50:d3:a8:
1b:89:57:64:a5:a3:c0:dc:51:47:49:3b:13:1b:db:66:89:e9:
4f:3a:4c:00:a5:be:5b:f0:66:61:26:69:eb:6f:a8:24:26:a4:
2f:b8:f7:39:a0:82:e0:d6:0f:ac:9a:e8:ae:03:fa:dc:72:5e:
e6:47:32:8b:9b:80:ac:2a:21:7f:0c:d0:4b:4b:a8:8c:b4:d5:
43:ce:99:d1:de:dd:b6:7a:c5:25:8b:51:48:ff:bf:57:5f:d4:
71:50:ef:2c:73:4d:4c:63:1b:e3:17:20:ad:2c:97:6d:73:d9:
60:94:d8:21:d5:0f:c7:2a:69:5d:64:58:46:5c:94:91:e5:df:
fb:4c:f5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:34:24 2026 by rpki-client