Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/AzVaz8Wv4zmV7ZBOoRzO4yPctdE.roa
File: AzVaz8Wv4zmV7ZBOoRzO4yPctdE.roa (raw, json)
Hash identifier: yYSVYxBpq8wewCw4ExeSk//aRdqOHQHDWwbP/VWRcds=
Subject key identifier: 03:35:5A:CF:C5:AF:E3:39:95:ED:90:4E:A1:1C:CE:E3:23:DC:B5:D1
Certificate issuer: /CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Certificate serial: 019F236945015869F1B4DFB6AF9E00E4D7A9
Authority key identifier: F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/AzVaz8Wv4zmV7ZBOoRzO4yPctdE.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48767
IP address blocks: 92.42.97.0/24 maxlen: 24
2a07:1a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:45:01:58:69:f1:b4:df:b6:af:9e:00:e4:d7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03355acfc5afe33995ed904ea11ccee323dcb5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:82:51:36:a2:db:9f:89:eb:48:9b:25:fc:
b7:41:1c:14:7c:dd:09:ae:b2:62:59:7a:c2:37:e0:
a9:27:75:9c:52:ef:67:d7:f9:4f:3b:3c:72:c9:e2:
f8:99:80:7c:96:13:9d:d2:f4:c5:18:32:bf:4c:4b:
0b:92:58:87:31:36:45:49:7c:26:9f:e3:b5:04:27:
15:6e:44:99:35:89:66:af:bb:54:1c:52:c4:74:dc:
50:25:ea:c7:c3:9d:b0:40:84:bf:ca:81:68:c9:81:
fc:99:45:f4:a8:6b:71:1b:a8:d0:06:db:6b:35:7b:
29:8a:73:af:69:ae:d0:ca:34:b5:c4:e1:35:41:27:
65:c6:71:b0:18:8e:22:b9:98:ed:08:a0:08:fa:8c:
14:17:8f:12:cd:2a:cd:93:fc:cc:c3:84:3f:f5:29:
88:68:74:7b:9e:a2:c9:73:eb:8a:d8:39:c2:e9:5d:
8d:36:2f:36:f7:d5:ef:83:da:f6:c4:3e:8d:ae:81:
2a:45:78:44:03:17:47:75:56:6b:84:8c:03:0a:71:
85:52:7c:d2:0c:74:73:9c:1e:82:25:94:84:f6:5a:
66:3f:a4:b3:10:c3:3b:3c:d7:4d:64:fb:d4:de:f7:
2c:d8:d6:c3:e1:2d:f9:e8:31:af:2c:ad:d5:44:76:
91:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:35:5A:CF:C5:AF:E3:39:95:ED:90:4E:A1:1C:CE:E3:23:DC:B5:D1
X509v3 Authority Key Identifier:
keyid:F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/AzVaz8Wv4zmV7ZBOoRzO4yPctdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.97.0/24
IPv6:
2a07:1a80::/48
Signature Algorithm: sha256WithRSAEncryption
10:68:ef:f1:de:c5:d0:62:90:23:bf:07:bc:ee:66:65:02:25:
82:a8:f4:0e:c8:38:cc:5f:98:65:bc:6d:00:25:0a:f1:dc:35:
07:92:5a:b7:a4:5d:a7:44:ee:30:80:f0:ef:b3:b5:aa:2f:6f:
3b:24:83:67:31:30:f9:c5:4f:ec:97:c0:14:23:70:78:d0:85:
e2:5e:0f:cd:52:ca:cf:a2:25:05:d9:22:a1:6d:75:67:3f:c2:
0f:33:8b:5b:a7:46:00:2c:7e:da:b6:da:15:6d:dc:3c:b2:4c:
b9:3c:01:17:ee:a8:41:d6:ec:e7:84:73:9a:99:9b:d1:5f:41:
0f:ec:77:62:b0:e6:ed:78:ed:9d:b6:11:74:d7:b1:db:f5:0c:
c3:6c:f2:68:b4:6e:e9:bd:57:b6:c8:71:dc:d8:c9:01:db:4e:
c7:0a:69:2a:d3:e6:52:f1:84:87:96:95:d0:d2:73:92:5a:72:
e1:36:25:3b:c7:ff:9e:0f:23:be:39:25:1b:20:65:fb:f3:06:
ea:f8:78:ed:a9:2f:77:58:f6:a9:d5:81:51:23:aa:18:9c:da:
99:15:ff:e4:dd:1b:80:fd:7b:f0:49:3b:30:e4:99:68:23:a1:
21:a3:87:a3:3a:aa:fb:2a:a0:2b:9a:e0:d9:52:18:72:bb:9d:
10:a7:71:55
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZ8jaUUBWGnxtN+2r54A5NepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MGNmZmNiMjllYzc1OGNhZTNmNTRjNmY1MGFiM2JmNjk1
MzBmMWEwHhcNMjYwNzAyMTUxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzM1NWFjZmM1YWZlMzM5OTVlZDkwNGVhMTFjY2VlMzIzZGNiNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt+CUTai25+J60ibJfy3QRwUfN0J
rrJiWXrCN+CpJ3WcUu9n1/lPOzxyyeL4mYB8lhOd0vTFGDK/TEsLkliHMTZFSXwm
n+O1BCcVbkSZNYlmr7tUHFLEdNxQJerHw52wQIS/yoFoyYH8mUX0qGtxG6jQBttr
NXspinOvaa7QyjS1xOE1QSdlxnGwGI4iuZjtCKAI+owUF48SzSrNk/zMw4Q/9SmI
aHR7nqLJc+uK2DnC6V2NNi8299Xvg9r2xD6NroEqRXhEAxdHdVZrhIwDCnGFUnzS
DHRznB6CJZSE9lpmP6SzEMM7PNdNZPvU3vcs2NbD4S356DGvLK3VRHaR7wIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFAM1Ws/Fr+M5le2QTqEczuMj3LXRMB8GA1UdIwQY
MBaAFPkM/8sp7HWMrj9UxvUKs79pUw8aMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Rel95eW5zZFl5dVAxVEc5UXF6djJsVER4by5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvOTcxMzExLWY0N2YtNDZkYi04YzU3
LWU5NzgyMDQxY2MyNC8xL0F6VmF6OFd2NHptVjdaQk9vUnpPNHlQY3RkRS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGQvOTcxMzExLWY0N2YtNDZkYi04YzU3LWU5NzgyMDQxY2My
NC8xLzEtUXpfeXluc2RZeXVQMVRHOVFxenYybFREeG8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABcKmEw
DwQCAAIwCQMHACoHGoAAADANBgkqhkiG9w0BAQsFAAOCAQEAEGjv8d7F0GKQI78H
vO5mZQIlgqj0Dsg4zF+YZbxtACUK8dw1B5Jat6Rdp0TuMIDw77O1qi9vOySDZzEw
+cVP7JfAFCNweNCF4l4PzVLKz6IlBdkioW11Zz/CDzOLW6dGACx+2rbaFW3cPLJM
uTwBF+6oQdbs54Rzmpmb0V9BD+x3YrDm7XjtnbYRdNex2/UMw2zyaLRu6b1Xtshx
3NjJAdtOxwppKtPmUvGEh5aV0NJzklpy4TYlO8f/ng8jvjklGyBl+/MG6vh47akv
d1j2qdWBUSOqGJzamRX/5N0bgP178Ek7MOSZaCOhIaOHozqq+yqgK5rg2VIYcrud
EKdxVQ==
-----END CERTIFICATE-----
Generated at Fri Jul 10 19:52:05 2026 by rpki-client