Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/VhOF_-ZwH-Ij9c572yDNjux4fzw.roa
File: VhOF_-ZwH-Ij9c572yDNjux4fzw.roa (raw, json)
Hash identifier: Nhl3pkPtydmkOvzTuIKFasUFKkUenmuHlPilrVP3JII=
Subject key identifier: 56:13:85:FF:E6:70:1F:E2:23:F5:CE:7B:DB:20:CD:8E:EC:78:7F:3C
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 01A13BC2048375FC7982FEECF37A7837DEB3
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/VhOF_-ZwH-Ij9c572yDNjux4fzw.roa
Signing time: Wed 14 Oct 2026 18:52:13 +0000
ROA not before: Wed 14 Oct 2026 18:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 2a14:15c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c2:04:83:75:fc:79:82:fe:ec:f3:7a:78:37:de:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Oct 14 18:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=561385ffe6701fe223f5ce7bdb20cd8eec787f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:aa:79:fa:81:f0:52:1d:a7:63:d1:bf:f2:
7a:76:52:3c:ee:bf:73:98:4e:32:ce:06:37:4e:3a:
30:bd:a2:98:cb:20:c2:22:8b:dc:6b:26:5c:74:76:
e8:e4:4f:04:44:36:4b:a1:91:cf:cb:5c:48:72:0e:
48:ac:84:73:fc:9d:ed:01:96:3d:be:a2:67:a5:32:
e9:9c:3a:0a:31:98:af:54:78:85:62:4a:73:ab:fc:
9f:e6:bd:08:75:e7:5c:a6:3a:c1:63:14:27:1d:2c:
4b:2b:e1:59:26:1a:8f:a2:c6:af:41:b7:19:2f:3d:
7c:9c:d0:cb:30:2a:28:65:2b:2e:dc:6b:23:6b:36:
7e:04:1c:27:fa:8e:46:3d:4b:47:c4:7c:66:18:af:
16:90:d6:0d:20:8c:40:cd:50:f1:ad:a3:e1:4b:9b:
ac:36:61:59:f2:69:f2:8d:ef:e8:fb:2e:3c:f5:25:
22:ac:42:52:d6:59:0a:4f:11:12:94:be:d3:3f:4d:
81:53:70:80:39:0b:d6:79:48:3a:7b:bc:5f:67:7d:
f1:4d:d2:5b:30:a9:37:f5:a5:ce:04:2e:06:cf:01:
51:72:78:85:a6:7c:12:83:6e:ed:25:39:89:bd:91:
31:19:12:78:fc:e0:d7:f2:94:63:53:85:4b:0b:63:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:13:85:FF:E6:70:1F:E2:23:F5:CE:7B:DB:20:CD:8E:EC:78:7F:3C
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/VhOF_-ZwH-Ij9c572yDNjux4fzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:e6:ee:94:a6:0a:bd:58:9d:b8:d5:6c:f2:ef:27:12:8f:de:
49:be:2b:c0:b4:33:66:5f:59:ff:53:be:5d:e1:90:ca:62:16:
5e:38:74:7c:70:ce:79:57:97:2a:cf:32:a9:e3:45:c1:c6:2e:
a0:6c:28:22:81:02:ab:a5:64:b4:c4:46:36:32:04:e2:b2:84:
f1:8f:9e:b0:97:f0:78:ac:c0:e6:b8:3c:5f:2c:9a:e6:7a:68:
56:51:be:0e:ba:a8:a4:b2:d7:f9:bc:39:74:8b:09:b4:fd:70:
8b:d9:65:f6:79:33:b5:55:70:fc:07:41:fe:6e:9c:41:1b:f8:
68:f2:3a:e8:85:22:19:28:37:ef:01:74:e8:6e:93:e5:81:0b:
e6:5a:22:1a:c3:ba:21:8e:06:d7:0f:64:d3:e2:99:4d:26:d9:
89:11:72:77:43:0c:50:63:35:ba:8a:a5:a5:48:21:f3:0c:1f:
33:b5:bf:7d:ee:18:b1:39:86:ac:49:14:4f:00:d9:cc:bf:3a:
04:0f:e9:09:36:e8:b3:1d:85:c6:4c:21:06:bb:9c:09:4e:57:
1e:7c:db:1a:69:22:cd:6b:c9:8a:9c:a6:92:44:0d:87:8b:a3:
dd:c4:1e:83:89:0b:6e:f1:a0:ed:62:cd:d9:d1:70:97:aa:40:
54:a8:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:06 2026 by rpki-client