Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ZZY4QUjno5yUu-aUZBfA-J-Y1Zw.roa
File: ZZY4QUjno5yUu-aUZBfA-J-Y1Zw.roa (raw, json)
Hash identifier: SoXL/gw+CMUE69BuTsPHvdy46MtYr2qhRpWn0RsS1YM=
Subject key identifier: 65:96:38:41:48:E7:A3:9C:94:BB:E6:94:64:17:C0:F8:9F:98:D5:9C
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019DD92BA58B8727B4B8E0633A7D6ECE28C0
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ZZY4QUjno5yUu-aUZBfA-J-Y1Zw.roa
Signing time: Wed 29 Apr 2026 12:16:49 +0000
ROA not before: Wed 29 Apr 2026 12:16:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2a14:5840::/29 maxlen: 32
2a14:72c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:2b:a5:8b:87:27:b4:b8:e0:63:3a:7d:6e:ce:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 29 12:16:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6596384148e7a39c94bbe6946417c0f89f98d59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:6c:fa:f6:d4:26:8c:49:7e:fe:1e:7e:45:
da:a8:34:1b:81:f8:ed:b4:6c:b7:f4:0b:c7:c4:68:
7a:6e:7b:d9:95:97:e6:da:0b:8f:07:83:c7:6c:0f:
6f:d0:49:ea:2b:90:6b:fa:ce:14:0e:67:db:72:d5:
2c:b9:81:1c:e1:7a:4c:67:f2:04:b6:20:d7:ba:46:
42:e3:45:9c:d1:59:90:90:04:93:e2:78:8f:cb:22:
b6:5f:4d:ba:76:19:7f:e6:db:e1:40:22:19:54:ab:
60:50:e6:2d:de:5c:be:b7:2b:ff:32:15:1e:4b:bf:
20:11:66:9b:44:77:61:86:8c:66:e3:96:71:a2:62:
b4:44:5d:e7:59:11:e3:92:de:0a:66:b5:82:84:f2:
51:3e:9d:84:27:05:fb:48:5f:c7:f9:5a:dc:0d:31:
76:e6:20:9a:e7:6b:76:b9:79:f6:bf:b2:3f:cd:10:
8d:15:8d:23:36:d5:b6:0e:0e:a9:ce:2c:f2:fb:28:
16:c0:6b:78:77:35:22:a6:6d:90:b8:2c:af:c0:fe:
d4:47:da:41:24:27:ae:e7:a2:bb:19:51:a4:25:06:
24:28:1a:b0:f0:d5:4c:a6:98:76:2e:8e:43:5c:c5:
a2:cd:d4:de:83:d0:61:e1:94:47:df:14:cf:50:c7:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:96:38:41:48:E7:A3:9C:94:BB:E6:94:64:17:C0:F8:9F:98:D5:9C
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ZZY4QUjno5yUu-aUZBfA-J-Y1Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5840::/29
2a14:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
50:3c:8c:48:52:7b:12:59:4f:73:f9:0a:39:54:08:53:5d:8f:
67:d9:f0:7e:f4:d4:6e:d7:5d:00:05:e1:83:78:da:a7:20:34:
54:68:17:f2:83:dd:c1:d2:f3:86:ef:f0:36:e3:12:36:67:6d:
b5:03:3f:be:89:be:8d:0f:ae:17:dd:09:63:d7:4e:ec:2d:7f:
c7:e3:b4:dc:25:01:27:de:ff:e9:8a:81:c3:9e:d5:b1:c7:ba:
d5:9f:6d:2a:ec:3b:11:52:ed:b8:99:0b:26:7b:be:3a:48:ec:
8e:00:76:8a:3c:b7:11:ce:df:3e:dc:16:58:06:44:9f:f1:da:
2c:fa:8e:d7:30:7a:01:e4:ae:20:dd:0c:c9:58:8b:d5:e1:28:
03:00:be:a6:99:b4:b1:1d:fb:90:01:bf:86:63:d0:bb:d8:a4:
9d:bb:f7:56:27:bd:2e:ea:d1:b9:d2:2c:70:45:ca:95:ab:d1:
74:bb:75:fc:f5:68:1b:54:b9:ec:fa:42:5e:11:55:3d:5a:37:
c8:a7:88:e4:da:d8:e6:0d:2c:3b:86:65:92:90:c6:a5:c8:96:
11:2d:6f:43:81:05:15:3d:5e:a3:e3:da:e3:c0:33:ed:6b:64:
78:ea:f0:d2:e3:b3:36:c8:42:de:a5:c9:f6:7f:cc:98:ee:69:
73:a7:4e:65
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ3ZK6WLhye0uOBjOn1uzijAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwNDI5MTIxNjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTk2Mzg0MTQ4ZTdhMzljOTRiYmU2OTQ2NDE3YzBmODlmOThkNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Zs+vbUJoxJfv4efkXaqDQbgfjt
tGy39AvHxGh6bnvZlZfm2guPB4PHbA9v0EnqK5Br+s4UDmfbctUsuYEc4XpMZ/IE
tiDXukZC40Wc0VmQkAST4niPyyK2X026dhl/5tvhQCIZVKtgUOYt3ly+tyv/MhUe
S78gEWabRHdhhoxm45ZxomK0RF3nWRHjkt4KZrWChPJRPp2EJwX7SF/H+VrcDTF2
5iCa52t2uXn2v7I/zRCNFY0jNtW2Dg6pzizy+ygWwGt4dzUipm2QuCyvwP7UR9pB
JCeu56K7GVGkJQYkKBqw8NVMpph2Lo5DXMWizdTeg9Bh4ZRH3xTPUMdKmwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGWWOEFI56OclLvmlGQXwPifmNWcMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvWlpZNFFVam5vNXlVdS1hVVpCZkEtSi1ZMVp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhRYQAMF
AyoUcsAwDQYJKoZIhvcNAQELBQADggEBAFA8jEhSexJZT3P5CjlUCFNdj2fZ8H70
1G7XXQAF4YN42qcgNFRoF/KD3cHS84bv8DbjEjZnbbUDP76Jvo0PrhfdCWPXTuwt
f8fjtNwlASfe/+mKgcOe1bHHutWfbSrsOxFS7biZCyZ7vjpI7I4Adoo8txHO3z7c
FlgGRJ/x2iz6jtcwegHkriDdDMlYi9XhKAMAvqaZtLEd+5ABv4Zj0LvYpJ2791Yn
vS7q0bnSLHBFypWr0XS7dfz1aBtUuez6Ql4RVT1aN8iniOTa2OYNLDuGZZKQxqXI
lhEtb0OBBRU9XqPj2uPAM+1rZHjq8NLjszbIQt6lyfZ/zJjuaXOnTmU=
-----END CERTIFICATE-----
Generated at Wed May 13 10:39:51 2026 by rpki-client