Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fVA8N_BZWsnz9Cne0sFvCLaIPJo.roa
File: fVA8N_BZWsnz9Cne0sFvCLaIPJo.roa (raw, json)
Hash identifier: MzIrxqUWk4RSuddUDsInha7V5fZceuYUtUB6jBmzD8Q=
Subject key identifier: 7D:50:3C:37:F0:59:5A:C9:F3:F4:29:DE:D2:C1:6F:08:B6:88:3C:9A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019DD41A58688DB6E2D274AA6BF230C67DC2
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fVA8N_BZWsnz9Cne0sFvCLaIPJo.roa
Signing time: Tue 28 Apr 2026 12:39:49 +0000
ROA not before: Tue 28 Apr 2026 12:39:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:8cc0::/29 maxlen: 29
2a0d:ad40::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:9040::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:e8c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:e80::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:6480::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:bc80::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:d800::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:1a:58:68:8d:b6:e2:d2:74:aa:6b:f2:30:c6:7d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 28 12:39:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d503c37f0595ac9f3f429ded2c16f08b6883c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:fe:b9:4a:db:9c:70:00:67:3c:7d:fa:c8:
2f:05:69:eb:96:4f:ba:55:86:5b:c3:6f:8e:d6:4c:
5c:b9:58:4f:2a:9c:5d:fc:1a:8d:9e:e2:3b:d7:f5:
56:e3:ee:b1:dd:1b:36:ef:29:f6:5a:21:e4:b8:33:
a9:5e:6b:23:e4:44:93:a6:c7:16:70:25:fa:fb:c5:
9c:00:38:1f:70:3f:6c:87:25:04:ba:9d:97:eb:c2:
80:60:27:3a:3b:67:17:27:1f:9a:a6:7e:a3:c2:a1:
33:e7:75:a7:0c:e5:1a:ae:5b:31:ea:1d:8a:6f:61:
28:2c:3c:94:3a:fc:7f:a1:a0:05:d7:b7:09:93:d3:
fd:6c:75:67:c6:7d:5f:3c:7e:37:96:bc:40:71:8a:
b6:6a:58:ca:01:65:53:75:f1:d9:91:fd:f3:a1:36:
88:1e:a1:02:be:cb:6b:36:3c:0f:08:97:54:fa:62:
99:4f:72:4c:28:38:13:13:b4:f3:76:02:e9:1d:13:
ae:ad:b4:2e:4f:be:71:0d:11:61:56:86:3b:ea:7a:
01:8c:fd:e0:c6:8e:76:14:89:41:be:e3:a6:31:90:
00:27:e2:21:6f:b6:a2:a6:51:93:75:67:b6:9d:d4:
d4:db:63:a3:89:2d:d3:c4:92:1e:0f:75:68:7d:6d:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:50:3C:37:F0:59:5A:C9:F3:F4:29:DE:D2:C1:6F:08:B6:88:3C:9A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fVA8N_BZWsnz9Cne0sFvCLaIPJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8cc0::/29
2a0d:ad40::/29
2a0d:b840::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:e180::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:2d00::/29
2a11:4540::/29
2a11:4f00::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:9040::/29
2a11:9580::/29
2a11:9640::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:b0c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:e8c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a11:ff40::/29
2a12:580::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:e80::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2b80::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:6480::/29
2a12:8380::/29
2a12:8480::/29
2a12:8a00::/29
2a12:9200::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:bc80::/29
2a12:c980::/29
2a12:d080::/29
2a12:d200::/29
2a12:d800::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
85:c8:e2:c9:b4:b5:13:22:1c:36:99:43:89:4d:e1:b9:b7:e5:
6f:90:2f:34:af:a6:98:b5:a3:7c:94:8f:b8:76:a1:a2:33:35:
08:22:73:0c:91:a2:be:77:01:a8:c9:23:65:7f:5e:bb:53:5a:
3a:71:a3:b4:b7:f1:a3:21:28:03:1a:dc:d1:e2:0f:ac:ae:8d:
ec:6c:6a:91:94:2d:25:56:46:73:6d:66:2d:78:32:f9:07:b9:
b4:d0:e4:50:55:4a:56:10:5f:90:d5:86:96:d3:0e:ca:9b:ab:
00:5a:0e:ea:95:f3:61:00:1a:06:60:35:4b:58:84:2f:b9:1d:
ad:ed:39:89:f3:b2:a0:be:7f:14:7a:d7:07:97:10:54:90:a5:
d1:2d:d1:36:14:8a:4a:77:48:ff:e9:37:12:ff:86:62:69:74:
23:e1:a7:2b:60:ed:b8:9f:5e:0c:c3:88:74:b9:91:16:44:1c:
d6:50:37:71:40:ef:4f:a7:1e:6e:1c:3f:92:2d:b1:ba:b3:3d:
3c:2d:44:cc:65:3e:c0:44:18:2d:9f:e6:96:4c:bf:e6:dd:97:
47:a3:4f:ae:2b:2a:3b:f2:bc:a1:ec:cd:17:5a:34:3b:7e:fa:
5c:98:15:de:90:83:48:83:41:79:72:3a:dd:16:7f:59:c6:b8:
01:a4:a8:5c
-----BEGIN CERTIFICATE-----
MIIHADCCBeigAwIBAgISAZ3UGlhojbbi0nSqa/Iwxn3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNDI4MTIzOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDUwM2MzN2YwNTk1YWM5ZjNmNDI5ZGVkMmMxNmYwOGI2ODgzYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f/+uUrbnHAAZzx9+sgvBWnrlk+6
VYZbw2+O1kxcuVhPKpxd/BqNnuI71/VW4+6x3Rs27yn2WiHkuDOpXmsj5ESTpscW
cCX6+8WcADgfcD9shyUEup2X68KAYCc6O2cXJx+apn6jwqEz53WnDOUarlsx6h2K
b2EoLDyUOvx/oaAF17cJk9P9bHVnxn1fPH43lrxAcYq2aljKAWVTdfHZkf3zoTaI
HqECvstrNjwPCJdU+mKZT3JMKDgTE7TzdgLpHROurbQuT75xDRFhVoY76noBjP3g
xo52FIlBvuOmMZAAJ+Ihb7aiplGTdWe2ndTU22OjiS3TxJIeD3VofW3l6QIDAQAB
o4IEDDCCBAgwHQYDVR0OBBYEFH1QPDfwWVrJ8/Qp3tLBbwi2iDyaMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvZlZBOE5fQlpXc256OUNuZTBzRnZDTGFJUEpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICIAYIKwYBBQUHAQcBAf8EggIPMIICCzCCAgcEAgACMIIB
/wMFAyoNjMADBQMqDa1AAwUDKg24QAMFAyoOr0ADBQMqDunAAwUDKg/hgAMFAyoR
F8ADBQMqERyAAwUDKhEtAAMFAyoRRUADBQMqEU8AAwUDKhFkwAMFAyoRa4ADBQMq
EXfAAwUDKhGBwAMFAyoRhsADBQMqEYdAAwUDKhGJgAMFAyoRkEADBQMqEZWAAwUD
KhGWQAMFAyoRnwADBQMqEaBAAwUDKhGhQAMFAyoRsMADBQMqEbcAAwUDKhG7AAMF
AyoRu8ADBQMqEb3AAwUDKhG+QAMFAyoRv4ADBQMqEcJAAwUDKhHFgAMFAyoRxoAD
BQMqEc7AAwUDKhHTQAMFAyoR2IADBQMqEdrAAwUDKhHfAAMFAyoR5kADBQMqEebA
AwUDKhHowAMFAyoR6sADBQMqEfpAAwUDKhH8QAMFAyoR/0ADBQMqEgWAAwUDKhIJ
AAMFAyoSDcADBQMqEg5AAwUDKhIOgAMFAyoSEcADBQMqEhLAAwUDKhIagAMFAyoS
K4ADBQMqEi6AAwUDKhI8AAMFAyoSZIADBQMqEoOAAwUDKhKEgAMFAyoSigADBQMq
EpIAAwUDKhKqAAMFAyoSrwADBQMqErQAAwUDKhK3AAMFAyoSuwADBQMqEryAAwUD
KhLJgAMFAyoS0IADBQMqEtIAAwUDKhLYAAMFAyoS+YAwDQYJKoZIhvcNAQELBQAD
ggEBAIXI4sm0tRMiHDaZQ4lN4bm35W+QLzSvppi1o3yUj7h2oaIzNQgicwyRor53
AajJI2V/XrtTWjpxo7S38aMhKAMa3NHiD6yujexsapGULSVWRnNtZi14MvkHubTQ
5FBVSlYQX5DVhpbTDsqbqwBaDuqV82EAGgZgNUtYhC+5Ha3tOYnzsqC+fxR61weX
EFSQpdEt0TYUikp3SP/pNxL/hmJpdCPhpytg7bifXgzDiHS5kRZEHNZQN3FA70+n
Hm4cP5ItsbqzPTwtRMxlPsBEGC2f5pZMv+bdl0ejT64rKjvyvKHszRdaNDt++lyY
Fd6Qg0iDQXlyOt0Wf1nGuAGkqFw=
-----END CERTIFICATE-----
Generated at Wed May 13 01:07:29 2026 by rpki-client