Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/vsgn5QJjV5nunN_PCpNGwgV6a9o.roa
File: vsgn5QJjV5nunN_PCpNGwgV6a9o.roa (raw, json)
Hash identifier: wLO8tqv8K/6aZXIfixuUDJ/NV/2S2GgETxQc9LoyLCo=
Subject key identifier: BE:C8:27:E5:02:63:57:99:EE:9C:DF:CF:0A:93:46:C2:05:7A:6B:DA
Certificate issuer: /CN=56b4a5a161b3b9ba0eeaec2a0456017866339739
Certificate serial: 019F6463A66A5D2361ED81B9455BD01888C2
Authority key identifier: 56:B4:A5:A1:61:B3:B9:BA:0E:EA:EC:2A:04:56:01:78:66:33:97:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrSloWGzuboO6uwqBFYBeGYzlzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/vsgn5QJjV5nunN_PCpNGwgV6a9o.roa
Signing time: Wed 15 Jul 2026 06:08:00 +0000
ROA not before: Wed 15 Jul 2026 06:08:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212900
IP address blocks: 2001:67c:abc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrSloWGzuboO6uwqBFYBeGYzlzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:63:a6:6a:5d:23:61:ed:81:b9:45:5b:d0:18:88:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b4a5a161b3b9ba0eeaec2a0456017866339739
Validity
Not Before: Jul 15 06:08:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bec827e502635799ee9cdfcf0a9346c2057a6bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:78:28:a9:eb:66:93:a2:9c:6c:6a:85:16:
2d:41:de:dc:26:8b:05:22:2a:85:6c:bf:ec:ed:2c:
2e:44:c4:c8:8b:9c:ea:8b:42:13:45:1e:96:98:3b:
cc:44:e3:d0:c9:db:8c:0f:16:13:38:ae:86:9c:2f:
95:a6:5d:0b:dd:d5:46:a1:ba:a6:eb:81:bc:bc:2a:
9d:47:f3:12:0d:20:51:0d:6f:93:38:95:7e:51:76:
14:e1:29:c8:22:01:a5:54:ed:3f:3d:e0:ab:6a:00:
95:c9:63:2a:7d:83:04:64:d6:66:0a:a1:57:40:b4:
f2:9d:58:1d:6b:ab:c7:5f:82:ee:af:68:d0:d9:d9:
cf:1f:77:da:b0:4b:a8:fe:d6:26:db:5f:29:41:03:
d7:32:35:22:2b:a0:e5:fd:5d:6a:64:37:86:09:41:
d3:89:03:69:0a:48:b5:8f:f9:e7:8f:9d:d7:28:b3:
af:7d:1f:f6:32:4b:65:1b:d9:7b:01:a6:24:eb:ad:
69:18:95:88:1d:92:b7:09:31:cf:2b:f5:c2:47:4e:
37:97:62:bc:db:8e:49:6e:1e:f2:4e:c4:cd:94:9b:
37:91:0f:a6:95:44:93:f6:23:55:e2:af:4c:ea:55:
c1:cf:9d:c5:d7:2c:0e:2b:64:c2:33:7f:8c:2c:e6:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:27:E5:02:63:57:99:EE:9C:DF:CF:0A:93:46:C2:05:7A:6B:DA
X509v3 Authority Key Identifier:
keyid:56:B4:A5:A1:61:B3:B9:BA:0E:EA:EC:2A:04:56:01:78:66:33:97:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrSloWGzuboO6uwqBFYBeGYzlzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/vsgn5QJjV5nunN_PCpNGwgV6a9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:abc::/48
Signature Algorithm: sha256WithRSAEncryption
ad:9d:0f:ca:e3:e5:8d:7f:32:82:9e:dd:f7:2f:4f:b0:2d:0c:
c6:8e:d5:e4:42:a7:a8:45:19:27:c7:d8:10:18:77:29:f9:12:
c7:16:40:3b:86:60:47:4d:6f:3c:00:b3:51:12:0f:3b:33:3b:
25:87:1e:1f:77:43:aa:2e:45:7b:24:d5:60:6f:d0:d7:d6:d9:
eb:2f:ac:67:2c:4b:9b:f7:76:d3:d9:54:e5:b8:2a:4b:e1:c8:
e0:f1:32:7b:b1:f1:60:f4:78:84:f5:44:eb:f4:24:fd:57:f1:
9b:bb:90:12:37:60:ea:20:d5:cf:9e:7d:a3:7b:a2:3a:54:04:
58:53:fa:d3:33:e1:55:e7:75:71:41:76:e0:0a:31:ca:21:84:
3f:96:7f:8c:11:8b:19:73:87:ce:ae:77:a3:5b:aa:b0:8b:20:
4c:94:38:b9:18:63:06:0a:ce:d9:4d:3f:60:de:ac:79:05:ac:
61:24:12:c6:a6:df:ab:02:dc:42:ce:e3:de:ad:d5:c9:48:08:
e2:e2:a3:95:bf:c3:05:f2:83:69:78:07:37:44:b0:4d:49:bc:
5d:ad:52:0c:73:e8:dc:a8:6e:3d:c2:3d:fc:8f:30:61:a2:53:
75:5a:91:bc:81:19:89:b9:be:ab:97:04:65:bd:95:d0:59:1c:
03:72:b7:ee
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ9kY6ZqXSNh7YG5RVvQGIjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YjRhNWExNjFiM2I5YmEwZWVhZWMyYTA0NTYwMTc4NjYz
Mzk3MzkwHhcNMjYwNzE1MDYwODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWM4MjdlNTAyNjM1Nzk5ZWU5Y2RmY2YwYTkzNDZjMjA1N2E2YmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnod4KKnrZpOinGxqhRYtQd7cJosF
IiqFbL/s7SwuRMTIi5zqi0ITRR6WmDvMROPQyduMDxYTOK6GnC+Vpl0L3dVGobqm
64G8vCqdR/MSDSBRDW+TOJV+UXYU4SnIIgGlVO0/PeCragCVyWMqfYMEZNZmCqFX
QLTynVgda6vHX4Lur2jQ2dnPH3fasEuo/tYm218pQQPXMjUiK6Dl/V1qZDeGCUHT
iQNpCki1j/nnj53XKLOvfR/2MktlG9l7AaYk661pGJWIHZK3CTHPK/XCR043l2K8
245Jbh7yTsTNlJs3kQ+mlUST9iNV4q9M6lXBz53F1ywOK2TCM3+MLOaq4wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL7IJ+UCY1eZ7pzfzwqTRsIFemvaMB8GA1UdIwQY
MBaAFFa0paFhs7m6DursKgRWAXhmM5c5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJTbG9XR3p1Ym9PNnV3cUJGWUJlR1l6bHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zYzY0YzQtMWIxOC00YmRlLTkxMzIt
ZjZkMjY2NzJlOTUwLzEvdnNnbjVRSmpWNW51bk5fUENwTkd3Z1Y2YTlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zYzY0YzQtMWIxOC00YmRlLTkxMzItZjZkMjY2NzJlOTUw
LzEvVnJTbG9XR3p1Ym9PNnV3cUJGWUJlR1l6bHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAq8
MA0GCSqGSIb3DQEBCwUAA4IBAQCtnQ/K4+WNfzKCnt33L0+wLQzGjtXkQqeoRRkn
x9gQGHcp+RLHFkA7hmBHTW88ALNREg87Mzslhx4fd0OqLkV7JNVgb9DX1tnrL6xn
LEub93bT2VTluCpL4cjg8TJ7sfFg9HiE9UTr9CT9V/Gbu5ASN2DqINXPnn2je6I6
VARYU/rTM+FV53VxQXbgCjHKIYQ/ln+MEYsZc4fOrnejW6qwiyBMlDi5GGMGCs7Z
TT9g3qx5BaxhJBLGpt+rAtxCzuPerdXJSAji4qOVv8MF8oNpeAc3RLBNSbxdrVIM
c+jcqG49wj38jzBholN1WpG8gRmJub6rlwRlvZXQWRwDcrfu
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:38 2026 by rpki-client