Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vzFrzwKendBgHvVSbr7e0SKbKnk.roa
File: vzFrzwKendBgHvVSbr7e0SKbKnk.roa (raw, json)
Hash identifier: ITSORwFhp/+J2zb7lpuTT78kxpy2pcHWnDV0ziZK8Ks=
Subject key identifier: BF:31:6B:CF:02:9E:9D:D0:60:1E:F5:52:6E:BE:DE:D1:22:9B:2A:79
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019CD285D6303C6D4ECCB361805DE7AC2F34
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vzFrzwKendBgHvVSbr7e0SKbKnk.roa
Signing time: Mon 09 Mar 2026 12:15:12 +0000
ROA not before: Mon 09 Mar 2026 12:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202610
IP address blocks: 194.55.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:85:d6:30:3c:6d:4e:cc:b3:61:80:5d:e7:ac:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 9 12:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf316bcf029e9dd0601ef5526ebeded1229b2a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:39:47:c7:74:26:46:08:86:99:00:5d:54:
21:1d:19:7b:6f:ec:3a:b5:e5:b2:ee:c0:50:64:ca:
e3:e5:51:05:a1:ba:b1:c8:79:04:17:9b:36:cc:dc:
23:8c:83:94:f3:11:e0:de:22:9c:ef:8c:db:1f:eb:
26:2d:97:11:35:71:fd:fc:b3:e8:90:23:f2:98:12:
af:6f:19:4d:b4:27:0a:9b:60:6a:5d:db:6c:55:6e:
bb:37:32:e4:3d:e0:b4:78:78:a9:06:b2:90:98:b9:
31:51:27:bc:5f:87:bc:ee:a9:09:60:a3:7d:e6:8e:
d1:4c:eb:a5:6f:92:bc:94:0f:cd:26:53:32:48:d4:
4f:ed:97:43:5a:a4:34:7e:f0:df:c3:f6:cd:8c:a7:
a3:ce:85:ba:a8:6c:9c:ac:19:c9:bd:ed:1a:0c:ff:
fd:a5:e9:1b:37:ac:0a:85:50:e7:75:4a:b6:df:67:
68:16:df:0a:76:bb:e8:79:cb:77:b3:13:32:08:90:
3c:b8:72:6e:29:b0:c5:53:b8:1b:66:08:a8:28:0b:
74:bd:0d:ab:79:58:78:29:fd:69:fd:1c:08:28:ee:
a5:ce:7b:ca:f9:12:7c:06:d6:50:86:8b:f3:9d:63:
ca:34:02:6b:c8:61:90:06:24:11:ef:03:91:87:1e:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:6B:CF:02:9E:9D:D0:60:1E:F5:52:6E:BE:DE:D1:22:9B:2A:79
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vzFrzwKendBgHvVSbr7e0SKbKnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
26:37:b2:21:89:0f:29:dd:b2:e5:dd:ad:1e:4d:a2:7d:09:cd:
99:f1:7d:bb:7e:41:12:65:d9:10:9e:54:e7:79:c1:52:bd:63:
a5:b1:cd:00:7e:35:06:34:39:e4:41:77:a8:55:68:b2:55:a6:
33:4c:11:13:51:fd:0c:2b:b8:4a:4f:10:5e:66:00:dc:fe:eb:
cf:85:f7:45:9b:aa:5e:8b:03:59:7c:ce:5a:23:ae:c7:2a:8b:
8c:ab:87:d2:c8:21:69:4c:8c:60:0b:33:ac:ea:15:ff:c5:92:
80:a6:f2:9a:ff:01:8f:08:1d:43:0f:61:4b:a4:88:09:fe:35:
11:60:31:ff:14:dd:b2:6a:2c:93:ea:07:8f:c4:07:3a:75:3d:
28:d8:55:0f:ef:2e:0e:ad:0e:cc:f8:88:d2:56:5e:35:08:2a:
ee:ba:3a:99:09:9a:71:26:40:ca:2c:a4:20:86:61:96:eb:bf:
ca:66:17:92:f4:5b:57:0a:17:97:9c:96:52:20:b2:1c:cb:76:
db:0c:89:43:d7:bc:67:0a:f7:5a:f1:3a:f2:df:6e:a4:77:20:
17:1f:15:65:75:9d:af:66:fc:a0:3b:d6:90:3b:a2:95:a9:fc:
4e:5e:65:56:71:49:dd:fb:df:6f:d4:07:d4:78:1d:9a:6a:8a:
4d:81:f4:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzShdYwPG1OzLNhgF3nrC80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwMzA5MTIxNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjMxNmJjZjAyOWU5ZGQwNjAxZWY1NTI2ZWJlZGVkMTIyOWIyYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUQ5R8d0JkYIhpkAXVQhHRl7b+w6
teWy7sBQZMrj5VEFobqxyHkEF5s2zNwjjIOU8xHg3iKc74zbH+smLZcRNXH9/LPo
kCPymBKvbxlNtCcKm2BqXdtsVW67NzLkPeC0eHipBrKQmLkxUSe8X4e87qkJYKN9
5o7RTOulb5K8lA/NJlMySNRP7ZdDWqQ0fvDfw/bNjKejzoW6qGycrBnJve0aDP/9
pekbN6wKhVDndUq232doFt8Kdrvoect3sxMyCJA8uHJuKbDFU7gbZgioKAt0vQ2r
eVh4Kf1p/RwIKO6lznvK+RJ8BtZQhovznWPKNAJryGGQBiQR7wORhx4M6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL8xa88Cnp3QYB71Um6+3tEimyp5MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdnpGcnp3S2VuZEJnSHZWU2JyN2UwU0tiS25rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjfgMA0G
CSqGSIb3DQEBCwUAA4IBAQAmN7IhiQ8p3bLl3a0eTaJ9Cc2Z8X27fkESZdkQnlTn
ecFSvWOlsc0AfjUGNDnkQXeoVWiyVaYzTBETUf0MK7hKTxBeZgDc/uvPhfdFm6pe
iwNZfM5aI67HKouMq4fSyCFpTIxgCzOs6hX/xZKApvKa/wGPCB1DD2FLpIgJ/jUR
YDH/FN2yaiyT6gePxAc6dT0o2FUP7y4OrQ7M+IjSVl41CCruujqZCZpxJkDKLKQg
hmGW67/KZheS9FtXCheXnJZSILIcy3bbDIlD17xnCvda8Try326kdyAXHxVldZ2v
ZvygO9aQO6KVqfxOXmVWcUnd+99v1AfUeB2aaopNgfRl
-----END CERTIFICATE-----
Generated at Tue Mar 10 19:59:50 2026 by rpki-client