Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/1--vzy1e-ka0R2VffB1Cs0T0nvBI.roa
File: 1--vzy1e-ka0R2VffB1Cs0T0nvBI.roa (raw, json)
Hash identifier: BXk8ninGeDuuF8CYBQR72p10jh3CVqnPWA05JGML8xw=
Subject key identifier: FB:EB:F3:CB:57:BE:91:AD:11:D9:57:DF:07:50:AC:D1:3D:27:BC:12
Certificate issuer: /CN=bf07fa84498913cd0af247b98fc2e4daf147f7e9
Certificate serial: 019FB360CFBA48D4E3A6E3A87654D31BB1AD
Authority key identifier: BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/1--vzy1e-ka0R2VffB1Cs0T0nvBI.roa
Signing time: Thu 30 Jul 2026 14:14:53 +0000
ROA not before: Thu 30 Jul 2026 14:14:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48803
IP address blocks: 2001:67c:2ddc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:60:cf:ba:48:d4:e3:a6:e3:a8:76:54:d3:1b:b1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf07fa84498913cd0af247b98fc2e4daf147f7e9
Validity
Not Before: Jul 30 14:14:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbebf3cb57be91ad11d957df0750acd13d27bc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:8d:c6:d8:a1:9c:f4:71:9e:10:36:ca:44:
66:33:ad:ad:eb:0b:ab:f6:aa:0f:cd:c5:23:f9:fa:
8c:30:f6:98:c4:6c:93:49:74:0c:5a:6d:a0:c7:3f:
a5:f4:5f:16:83:c6:78:81:8a:0c:4d:ad:91:12:f8:
8d:a8:b7:d6:09:81:e2:31:d1:30:13:69:54:a8:9d:
81:f3:88:2f:00:12:b8:48:3a:c2:78:49:00:82:62:
cf:49:4b:9e:fb:14:60:98:80:5d:fe:bc:36:34:9b:
04:3d:72:1e:bf:1c:87:af:36:18:b8:b5:f4:2f:0c:
18:fb:6f:af:db:3d:8e:3e:8e:2d:1f:d8:d7:b1:c5:
27:3f:6b:16:4e:a3:9f:a8:c5:a0:b9:d4:ba:43:32:
42:ed:4d:b8:df:31:48:72:9b:02:3f:be:77:15:e3:
08:23:3f:35:9d:fd:2a:e3:3f:da:a7:e4:bd:6d:87:
b3:28:e0:54:fe:43:ad:3c:9a:16:1f:47:99:00:9e:
69:a0:d7:4b:8b:f8:36:64:74:3a:0d:3e:32:a6:06:
ce:7b:5e:bf:b5:25:c1:24:51:f0:c0:e6:9d:72:72:
c2:cd:59:fb:1f:b1:41:b1:06:dc:a7:61:d3:b8:1f:
19:32:88:3e:45:34:bf:94:66:6a:cc:87:6d:42:7b:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EB:F3:CB:57:BE:91:AD:11:D9:57:DF:07:50:AC:D1:3D:27:BC:12
X509v3 Authority Key Identifier:
keyid:BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/1--vzy1e-ka0R2VffB1Cs0T0nvBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ddc::/48
Signature Algorithm: sha256WithRSAEncryption
21:96:ba:e7:65:e6:9f:d2:f4:cf:61:d6:33:a2:e3:a4:1b:0e:
35:18:9a:04:55:e3:d8:92:c6:7d:1f:56:fa:80:61:7b:f5:54:
2f:5b:af:c8:ce:02:f7:f3:6a:b9:38:86:92:62:62:3e:3f:1a:
92:a5:67:da:66:6c:14:ec:f4:b3:0e:aa:4c:f2:7e:ef:44:fb:
bb:5c:d4:99:38:9e:6b:da:b9:ff:15:cc:1b:87:ca:2a:ed:c9:
84:48:39:50:0b:db:8c:f4:7d:eb:59:46:ff:05:5e:20:c8:c1:
67:ec:13:66:0a:ba:45:42:3b:71:17:42:3c:a2:91:bf:ad:67:
90:bf:cd:c2:07:0c:57:e9:2d:e9:73:76:49:9d:31:e1:0b:67:
10:34:f4:49:98:94:dd:37:33:ca:01:67:5d:5f:f9:fb:5e:82:
07:75:5d:14:1c:17:83:25:20:25:fa:e6:d7:8f:65:bb:70:10:
de:a2:0c:4c:53:37:1c:32:bd:92:21:3d:c8:5d:53:d9:67:65:
05:98:f9:bc:9c:f8:99:a0:63:db:e1:a7:6c:4e:65:65:c7:83:
25:19:7f:6b:57:36:f3:e3:f7:48:3c:1d:6a:26:69:2e:68:5c:
c4:ca:83:20:b5:6f:0c:06:c4:6a:8a:f8:82:e3:0d:f4:72:c6:
f2:c3:6a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:03:46 2026 by rpki-client