Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/vzHQ_D0wHXyCOCIg7uUWjxloR6U.roa
File: vzHQ_D0wHXyCOCIg7uUWjxloR6U.roa (raw, json)
Hash identifier: YRe5IFS+MfEgNH/gg6e7eSnNs0179cBp4+mPaKhTpHE=
Subject key identifier: BF:31:D0:FC:3D:30:1D:7C:82:38:22:20:EE:E5:16:8F:19:68:47:A5
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019FF5956C2624205432D7735A155EE51177
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/vzHQ_D0wHXyCOCIg7uUWjxloR6U.roa
Signing time: Wed 12 Aug 2026 10:47:18 +0000
ROA not before: Wed 12 Aug 2026 10:47:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 2a14:5840::/29 maxlen: 32
2a14:72c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:95:6c:26:24:20:54:32:d7:73:5a:15:5e:e5:11:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Aug 12 10:47:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf31d0fc3d301d7c82382220eee5168f196847a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:7d:60:70:ae:3c:fa:41:4d:21:46:fd:fa:
47:34:bb:bc:5a:f8:3b:53:3b:f9:1b:da:2f:6d:a1:
9e:b4:5b:8a:71:c9:15:73:f5:a5:b0:fc:e9:bc:de:
0e:79:75:04:4a:6c:2f:56:b8:a8:0c:1a:4e:5e:6f:
70:bc:8c:9b:92:11:78:a6:da:98:f6:c7:60:9c:eb:
15:31:b1:0a:e4:d3:ec:14:f5:46:52:38:44:43:9a:
92:a8:34:58:29:9d:3f:2f:80:97:ad:b6:b3:6b:42:
7b:bc:02:57:b6:99:8a:e7:f9:35:9f:21:e9:ce:3e:
f9:01:ef:37:eb:da:59:89:8e:89:0e:e0:f7:4e:7f:
d3:58:f8:82:25:81:79:31:22:05:0f:3f:cf:59:ae:
f0:6c:51:bf:d9:4b:78:c5:fa:17:2a:38:23:50:9c:
75:f0:47:59:29:f8:69:f2:cd:8e:76:09:95:a5:76:
a5:bb:94:2b:a5:ff:a0:c3:2d:fc:b0:19:59:e8:0a:
ee:2d:e3:f5:9d:8b:c0:39:2e:d7:67:db:ab:b5:74:
0c:aa:14:82:b5:07:91:d7:b8:14:90:3c:6a:89:19:
2b:b4:d5:b8:3a:49:08:1d:b3:5b:59:cd:64:c9:c8:
a7:3c:31:c7:d4:b0:9c:e9:ac:b0:dd:e1:1b:fb:d3:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:D0:FC:3D:30:1D:7C:82:38:22:20:EE:E5:16:8F:19:68:47:A5
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/vzHQ_D0wHXyCOCIg7uUWjxloR6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5840::/29
2a14:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
85:c7:4c:fe:b1:b4:b9:2b:e0:61:ef:63:ef:ae:04:ad:07:66:
68:ee:97:f1:90:94:43:67:49:83:62:e8:eb:43:f1:c2:fa:c6:
a2:74:cc:40:0e:67:7d:62:54:a3:07:43:85:6a:06:a0:f8:c6:
3a:fb:f4:48:2a:8e:4d:19:5e:36:cc:7c:d8:c8:90:01:91:f4:
a6:a9:b0:62:cb:be:33:6d:32:32:02:d4:d5:0d:5d:8d:d5:87:
f1:d5:64:81:2d:b6:11:d5:c9:b4:c9:21:4f:c6:df:72:5e:2f:
ee:cc:e9:08:b8:34:6a:7e:ef:21:2c:68:61:a6:96:dd:bc:c1:
2a:14:bb:99:c3:87:28:6e:37:69:84:f6:20:c5:06:03:0f:de:
ee:f4:b1:f4:71:0f:45:15:cc:46:63:17:bb:6a:3b:31:5e:b0:
06:1f:d6:cb:26:f6:ca:74:c9:13:c9:74:dd:02:6e:f1:8e:ed:
6e:f9:f0:3f:03:5e:f4:80:c6:ef:aa:33:2b:a8:c1:fd:38:c7:
e2:2d:48:ab:ef:58:99:45:bd:e1:cc:6e:ab:cc:25:9e:56:1f:
ea:95:a7:23:db:51:67:40:83:93:4b:fd:78:e4:05:62:d3:b8:
e6:00:ac:1a:de:8e:0a:6f:69:76:52:4c:81:ae:58:a2:28:aa:
95:b0:a9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:46 2026 by rpki-client