Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/VZOyRy0tzJ2sfmNYjeH9siUXpok.roa
File: VZOyRy0tzJ2sfmNYjeH9siUXpok.roa (raw, json)
Hash identifier: hg8jPOLxAFpxHffAZVtykZM6KfjDO72SPntESUbpkNs=
Subject key identifier: 55:93:B2:47:2D:2D:CC:9D:AC:7E:63:58:8D:E1:FD:B2:25:17:A6:89
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019ED55DB3B7C4DD3DFA754710D25B53E292
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/VZOyRy0tzJ2sfmNYjeH9siUXpok.roa
Signing time: Wed 17 Jun 2026 11:35:48 +0000
ROA not before: Wed 17 Jun 2026 11:35:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199144
IP address blocks: 209.131.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:5d:b3:b7:c4:dd:3d:fa:75:47:10:d2:5b:53:e2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Jun 17 11:35:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5593b2472d2dcc9dac7e63588de1fdb22517a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:9f:35:5a:29:e7:0e:a0:86:d8:39:35:66:
8d:c4:63:21:be:76:fa:ac:42:e7:54:29:5a:34:14:
8f:20:b9:2c:eb:92:99:75:47:8b:73:ef:e8:23:8a:
ad:2f:b7:2d:4d:37:63:11:ed:1f:aa:40:64:ef:55:
49:69:95:ee:55:43:09:d0:37:9c:17:5c:2c:7c:07:
02:6d:ea:c5:e6:50:77:50:b3:4d:31:e1:12:59:2c:
f5:6f:9a:c0:fc:f9:96:9e:fb:ef:59:85:a0:80:e9:
4b:6f:ef:95:6d:75:0d:c8:e0:ad:27:08:20:6e:33:
31:52:66:80:83:4d:5c:de:ba:59:35:d3:c7:4a:94:
b6:42:f7:cf:05:82:85:38:5b:17:f3:68:24:51:32:
f4:cd:ac:03:51:52:c6:9d:14:11:c4:ca:9e:d0:4b:
e9:39:e8:d6:0f:72:86:45:f1:1f:d9:a1:b9:33:7d:
66:15:5b:e3:cf:c2:ed:98:4c:35:bf:c5:c8:69:06:
38:f7:e8:c7:a8:28:52:84:2b:43:03:4c:3d:33:68:
3c:80:20:cb:54:72:0f:52:8a:71:ff:32:cf:31:5a:
56:0a:21:67:20:40:56:ec:3c:4c:fc:57:08:f5:e6:
da:c5:e4:d9:ec:a0:bf:b8:10:cd:60:73:a3:f2:09:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:93:B2:47:2D:2D:CC:9D:AC:7E:63:58:8D:E1:FD:B2:25:17:A6:89
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/VZOyRy0tzJ2sfmNYjeH9siUXpok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.131.70.0/24
Signature Algorithm: sha256WithRSAEncryption
43:61:70:05:9a:80:fd:8c:d4:10:84:e1:c2:a3:d2:ae:82:26:
cd:32:8b:3c:af:ea:4c:08:b2:68:51:12:4f:94:dd:7b:5f:b9:
71:64:57:5a:73:14:48:79:f8:2b:27:65:ff:1a:0b:47:0a:37:
46:c8:6b:ca:5c:ac:8e:34:4c:fe:a0:cd:de:35:30:d3:11:b5:
b7:37:20:60:aa:70:64:85:ea:cb:72:07:e1:ce:56:8f:78:92:
2a:1d:c0:3d:d5:95:a0:e3:5d:a9:1a:d3:1c:3b:14:6b:89:0a:
24:de:9a:ce:08:ca:a5:9a:53:1e:0f:11:35:60:c2:05:f8:cd:
03:d6:31:91:23:16:38:d4:99:9d:d2:17:66:64:c7:65:f3:e7:
21:80:91:3d:db:75:5d:ad:e2:cd:42:46:12:f6:cf:d4:5b:76:
a9:5c:05:83:47:3a:b4:ef:ba:ca:26:8c:fc:5e:3a:89:06:51:
e5:a1:8d:77:08:fd:2c:b1:c0:58:a4:49:46:fb:e8:c6:2d:4a:
ac:59:a6:40:5f:7a:c8:ad:5b:16:84:82:5e:7d:6c:ff:ff:90:
d1:58:ea:c3:2e:79:9b:41:62:88:ad:2a:af:86:87:f1:d8:6f:
07:61:50:81:95:c0:a4:8c:81:77:c6:19:d6:14:80:88:88:14:
7c:be:b7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:27:16 2026 by rpki-client