Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VeaZsYNc7Ez8GQ4xkm_rQd08BAs.roa
File: VeaZsYNc7Ez8GQ4xkm_rQd08BAs.roa (raw, json)
Hash identifier: ZTQv30EpORq9VlQcofNtqs1Ddyhr+Nk2Pu7GO8QhhIo=
Subject key identifier: 55:E6:99:B1:83:5C:EC:4C:FC:19:0E:31:92:6F:EB:41:DD:3C:04:0B
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019ECC655683E08345D7C12F0D0317EF2688
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VeaZsYNc7Ez8GQ4xkm_rQd08BAs.roa
Signing time: Mon 15 Jun 2026 17:47:33 +0000
ROA not before: Mon 15 Jun 2026 17:47:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 91.227.114.0/24 maxlen: 24
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cc:65:56:83:e0:83:45:d7:c1:2f:0d:03:17:ef:26:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 15 17:47:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55e699b1835cec4cfc190e31926feb41dd3c040b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:95:4b:e9:18:72:1b:ba:1a:cd:d5:6f:86:
3d:79:80:37:7a:f6:2e:80:f8:44:05:3c:4b:08:23:
b0:f7:ad:38:2d:73:40:0a:b1:15:23:b2:81:b0:69:
0a:9e:0d:b4:cf:ab:de:e8:a9:f4:82:3a:f5:81:5c:
a1:cd:19:5f:08:0f:ef:3d:ca:3b:2f:8c:d3:e5:db:
70:82:1f:34:7d:07:b7:cf:63:90:ae:5f:de:78:9b:
48:6d:ad:3c:dd:14:e6:7f:b7:75:a2:79:61:75:2a:
34:1b:7f:d0:6e:3b:c0:43:a2:b6:fb:35:66:76:d5:
b6:07:84:ab:cb:b6:91:19:17:cb:c8:10:f5:20:1f:
80:9e:da:bf:b8:d7:cf:9d:03:25:0a:ed:12:6c:fc:
63:7f:f9:7d:74:18:45:3d:d4:e9:01:97:64:04:19:
96:b1:f7:bf:28:9b:16:5f:64:00:78:66:f0:84:e1:
bc:f1:48:f8:a2:f2:50:05:cb:c7:0a:fc:bd:59:20:
8b:e9:2f:a5:54:74:6a:37:36:80:dc:56:0e:37:ee:
58:41:fb:f6:13:45:09:46:1f:93:47:67:3e:3e:57:
39:71:a6:5f:a2:d6:47:78:5a:de:a6:1a:d8:c8:8d:
00:88:f1:aa:49:57:a2:9f:80:ab:a5:55:f3:40:1a:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E6:99:B1:83:5C:EC:4C:FC:19:0E:31:92:6F:EB:41:DD:3C:04:0B
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VeaZsYNc7Ez8GQ4xkm_rQd08BAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.114.0/24
IPv6:
2a13:bb40::/29
2a13:c240::/29
Signature Algorithm: sha256WithRSAEncryption
50:40:e4:1f:f9:a3:d7:ea:65:4e:5d:f4:c1:ad:fa:e9:65:b5:
70:4b:0a:24:c7:d2:df:83:49:77:e5:1f:a4:ba:89:18:a3:50:
30:5f:ac:6e:84:17:58:94:ad:f1:97:ff:f0:9b:2b:70:4d:84:
67:51:df:ec:78:71:8f:db:4d:a2:5a:15:be:61:31:a8:72:d9:
04:ac:3c:b3:3a:88:27:8c:4b:f5:8a:c1:8d:44:1b:cc:f7:2c:
1f:f8:8a:86:5e:dd:b1:4f:3e:9f:cf:ea:a7:48:3e:7b:22:f6:
62:2e:46:2a:4f:51:17:13:cc:c5:3f:d5:4c:01:88:58:7d:07:
04:e1:a8:eb:a0:97:a8:ba:09:c9:e5:b1:eb:fb:21:d1:1b:c7:
62:b6:85:15:6d:f0:c7:a1:50:e3:15:09:c9:bf:b3:89:45:ea:
0b:24:08:71:8b:ed:47:dc:85:49:66:9f:b6:03:fa:2a:6a:03:
d8:3b:d6:3f:f2:7a:f1:08:77:f6:95:5f:d7:5c:8a:ed:6d:33:
74:69:a6:a7:74:ec:41:5e:ec:22:26:28:e7:9b:f8:d3:20:14:
24:29:9d:19:6d:07:3f:59:8d:89:94:44:e6:4b:ab:1a:f8:21:
91:eb:90:da:db:45:9d:1e:d3:c3:19:3e:a1:48:44:a0:0a:cc:
8d:b9:8f:fd
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZ7MZVaD4INF18EvDQMX7yaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNjE1MTc0NzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWU2OTliMTgzNWNlYzRjZmMxOTBlMzE5MjZmZWI0MWRkM2MwNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnKVS+kYchu6Gs3Vb4Y9eYA3evYu
gPhEBTxLCCOw9604LXNACrEVI7KBsGkKng20z6ve6Kn0gjr1gVyhzRlfCA/vPco7
L4zT5dtwgh80fQe3z2OQrl/eeJtIba083RTmf7d1onlhdSo0G3/QbjvAQ6K2+zVm
dtW2B4Sry7aRGRfLyBD1IB+Antq/uNfPnQMlCu0SbPxjf/l9dBhFPdTpAZdkBBmW
sfe/KJsWX2QAeGbwhOG88Uj4ovJQBcvHCvy9WSCL6S+lVHRqNzaA3FYON+5YQfv2
E0UJRh+TR2c+Plc5caZfotZHeFrephrYyI0AiPGqSVein4CrpVXzQBroCQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFFXmmbGDXOxM/BkOMZJv60HdPAQLMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvVmVhWnNZTmM3RXo4R1E0eGttX3JRZDA4QkFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAW+NyMBQE
AgACMA4DBQMqE7tAAwUDKhPCQDANBgkqhkiG9w0BAQsFAAOCAQEAUEDkH/mj1+pl
Tl30wa366WW1cEsKJMfS34NJd+UfpLqJGKNQMF+sboQXWJSt8Zf/8JsrcE2EZ1Hf
7Hhxj9tNoloVvmExqHLZBKw8szqIJ4xL9YrBjUQbzPcsH/iKhl7dsU8+n8/qp0g+
eyL2Yi5GKk9RFxPMxT/VTAGIWH0HBOGo66CXqLoJyeWx6/sh0RvHYraFFW3wx6FQ
4xUJyb+ziUXqCyQIcYvtR9yFSWaftgP6KmoD2DvWP/J68Qh39pVf11yK7W0zdGmm
p3TsQV7sIiYo55v40yAUJCmdGW0HP1mNiZRE5kurGvghkeuQ2ttFnR7Twxk+oUhE
oArMjbmP/Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 01:59:52 2026 by rpki-client