Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/vzeKzOkY-DTtAOj_7QBNyv6Yx8g.roa
File: vzeKzOkY-DTtAOj_7QBNyv6Yx8g.roa (raw, json)
Hash identifier: fudVMhp+cSBY7q1Syleky8IDgMK8QLdzt4Ad5bcZsDo=
Subject key identifier: BF:37:8A:CC:E9:18:F8:34:ED:00:E8:FF:ED:00:4D:CA:FE:98:C7:C8
Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial: 01A153447933FC9CDEB1AA904A6B3B353F6C
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/vzeKzOkY-DTtAOj_7QBNyv6Yx8g.roa
Signing time: Mon 19 Oct 2026 08:25:58 +0000
ROA not before: Mon 19 Oct 2026 08:25:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 2a0d:36c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:44:79:33:fc:9c:de:b1:aa:90:4a:6b:3b:35:3f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
Validity
Not Before: Oct 19 08:25:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf378acce918f834ed00e8ffed004dcafe98c7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:4d:1a:ca:d4:78:ae:03:fd:1e:fc:f3:6c:
9c:03:e9:a8:1a:80:4b:f2:88:ed:9e:6d:ae:6b:b2:
e4:ae:02:25:61:5e:f8:a5:7f:ce:82:99:ae:f1:b1:
ee:92:c7:74:ea:6c:2f:4e:08:8a:e7:92:a0:e6:e5:
cc:43:7b:42:7b:27:3d:50:c3:1f:36:ee:a6:78:2c:
a9:9e:02:a4:58:3a:a8:67:5d:0c:0f:5f:49:b7:00:
92:75:10:66:ae:fe:80:52:91:49:47:73:e6:33:81:
02:fe:7f:13:40:6e:55:b3:5b:ed:ba:29:4f:ba:4e:
6a:7a:44:bb:33:fd:3c:a9:05:ce:86:d6:b6:7f:a6:
0f:a3:ef:f1:ca:57:68:24:25:bc:8a:43:49:d4:43:
b8:32:f0:07:20:a2:d8:e8:3e:ef:52:05:c3:f2:84:
0f:23:29:88:df:d2:27:a0:4e:df:35:f9:b2:3f:01:
d1:9e:52:e2:73:10:60:31:d7:71:37:42:fe:79:58:
45:fd:7d:cd:4a:43:28:36:e9:a4:b4:49:1b:40:58:
64:f3:13:1d:85:e8:0c:c1:e0:71:0e:f5:11:3c:c0:
18:4c:e5:43:ad:a0:8d:92:8a:02:b5:72:81:ec:3b:
8a:a3:1a:32:12:54:37:f6:68:3e:ad:99:67:4d:33:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:37:8A:CC:E9:18:F8:34:ED:00:E8:FF:ED:00:4D:CA:FE:98:C7:C8
X509v3 Authority Key Identifier:
keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/vzeKzOkY-DTtAOj_7QBNyv6Yx8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:bf:84:34:7c:9e:02:03:6f:d3:af:39:47:f5:85:8b:e7:2c:
22:7e:72:bd:5f:27:71:19:3f:16:db:cb:e3:f0:12:3a:76:52:
56:9d:54:42:6c:85:ce:3a:2f:f7:7c:b0:bf:1c:b6:e2:a0:ae:
c1:c9:d5:4a:f6:a5:06:93:ae:30:da:cf:71:5d:90:a2:51:aa:
ac:4d:fa:f7:0e:21:52:d8:90:12:36:7e:a4:49:4a:8e:33:28:
85:fa:22:cc:05:a7:28:92:de:d1:7d:18:bd:83:c6:f2:22:e2:
0c:82:9a:56:1d:09:dc:a1:e9:3a:45:86:3c:b1:22:c7:1c:b6:
00:3b:d2:8e:fe:3b:99:04:68:77:4f:29:a8:6b:af:b8:b5:cd:
19:8e:5e:92:f8:3e:bd:8c:ef:35:d6:99:8b:6b:26:2e:27:c2:
99:76:e3:42:67:85:2d:ed:b0:72:dc:44:50:6b:85:d9:6f:90:
93:1a:92:ed:26:03:b0:5a:ad:73:2d:9b:11:34:1e:03:b8:8a:
cb:59:03:6e:8a:79:e3:94:88:89:33:0f:3a:18:a3:17:6e:30:
57:d3:78:a5:1f:b0:d5:f3:3f:60:87:a8:20:c2:cf:ff:4a:f6:
63:01:2f:78:b3:f4:94:02:d6:02:a5:5d:c8:13:ed:21:73:d3:
f9:73:bf:1a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaFTRHkz/JzesaqQSms7NT9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNjljZjY5M2VmYzEwMmM5MzdmYWNhN2JhMDljY2NhZWM1
NzQ5NDgwHhcNMjYxMDE5MDgyNTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjM3OGFjY2U5MThmODM0ZWQwMGU4ZmZlZDAwNGRjYWZlOThjN2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHVNGsrUeK4D/R7882ycA+moGoBL
8ojtnm2ua7LkrgIlYV74pX/Ogpmu8bHuksd06mwvTgiK55Kg5uXMQ3tCeyc9UMMf
Nu6meCypngKkWDqoZ10MD19JtwCSdRBmrv6AUpFJR3PmM4EC/n8TQG5Vs1vtuilP
uk5qekS7M/08qQXOhta2f6YPo+/xyldoJCW8ikNJ1EO4MvAHIKLY6D7vUgXD8oQP
IymI39InoE7fNfmyPwHRnlLicxBgMddxN0L+eVhF/X3NSkMoNumktEkbQFhk8xMd
hegMweBxDvURPMAYTOVDraCNkooCtXKB7DuKoxoyElQ39mg+rZlnTTMHjwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFL83iszpGPg07QDo/+0ATcr+mMfIMB8GA1UdIwQY
MBaAFCNpz2k+/BAsk3+sp7oJzMrsV0lIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEt
MWRmZDVkOTc3YWRiLzEvdnplS3pPa1ktRFR0QU9qXzdRQk55djZZeDhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEtMWRmZDVkOTc3YWRi
LzEvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg02wDAN
BgkqhkiG9w0BAQsFAAOCAQEATL+ENHyeAgNv0685R/WFi+csIn5yvV8ncRk/FtvL
4/ASOnZSVp1UQmyFzjov93ywvxy24qCuwcnVSvalBpOuMNrPcV2QolGqrE369w4h
UtiQEjZ+pElKjjMohfoizAWnKJLe0X0YvYPG8iLiDIKaVh0J3KHpOkWGPLEixxy2
ADvSjv47mQRod08pqGuvuLXNGY5ekvg+vYzvNdaZi2smLifCmXbjQmeFLe2wctxE
UGuF2W+QkxqS7SYDsFqtcy2bETQeA7iKy1kDbop545SIiTMPOhijF24wV9N4pR+w
1fM/YIeoIMLP/0r2YwEveLP0lALWAqVdyBPtIXPT+XO/Gg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 07:58:43 2026 by rpki-client