Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/vLafL0GwWDvLzC-WXo-ujU2mMjU.roa
File: vLafL0GwWDvLzC-WXo-ujU2mMjU.roa (raw, json)
Hash identifier: WZJnUmwzRASxvhXsgI51USxfQop8j6bDAzzdqadBvsM=
Subject key identifier: BC:B6:9F:2F:41:B0:58:3B:CB:CC:2F:96:5E:8F:AE:8D:4D:A6:32:35
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019FA42325D5D5F12338C778E269B35045DC
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/vLafL0GwWDvLzC-WXo-ujU2mMjU.roa
Signing time: Mon 27 Jul 2026 15:13:14 +0000
ROA not before: Mon 27 Jul 2026 15:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402394
IP address blocks: 2a12:6f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:23:25:d5:d5:f1:23:38:c7:78:e2:69:b3:50:45:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 27 15:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcb69f2f41b0583bcbcc2f965e8fae8d4da63235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:0a:da:bf:ba:36:ca:12:33:cd:81:5c:b6:
78:c9:b8:04:8b:1c:a5:7e:8f:ff:b9:de:1a:d2:08:
8c:b8:2f:7c:a4:d7:34:40:3a:37:9b:74:c4:4e:a4:
43:eb:12:7c:f9:da:ff:21:2d:83:92:e4:9d:2d:79:
2d:bb:52:61:3a:d0:93:b7:26:a1:68:e6:5c:c8:53:
5c:c9:5c:26:3c:16:41:1b:ed:92:d9:11:6e:46:d2:
38:b0:fe:1d:da:7c:c1:82:5b:15:75:0c:14:fd:2b:
28:65:8b:ed:04:47:cc:85:9e:e2:46:97:47:25:ce:
d4:04:35:ba:4d:b7:58:80:d5:87:23:02:06:f0:c7:
ed:c2:ec:02:c6:ce:14:32:96:60:c1:fe:e4:fa:f1:
07:d3:62:a3:d3:74:26:12:b6:61:55:99:f1:6b:be:
fa:02:f3:43:9d:eb:86:49:ba:46:11:cb:a5:63:22:
ab:8d:b1:82:fc:f2:b2:f8:6c:98:c9:f8:24:0f:5c:
2e:33:96:c7:be:0b:f0:df:16:97:c3:af:e4:6e:30:
70:52:6d:bf:5f:89:62:96:aa:44:66:7b:29:97:47:
ae:27:59:d1:6b:0f:fd:05:ad:9e:f0:6b:dd:02:41:
72:b0:c8:2b:39:d3:07:f6:97:f6:b7:d6:b6:4f:cb:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:9F:2F:41:B0:58:3B:CB:CC:2F:96:5E:8F:AE:8D:4D:A6:32:35
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/vLafL0GwWDvLzC-WXo-ujU2mMjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6f80::/29
Signature Algorithm: sha256WithRSAEncryption
b3:de:75:89:af:84:98:40:03:ca:a3:7e:a8:ca:03:cc:a5:c8:
06:d6:8d:da:4c:73:c9:86:15:57:4e:22:49:f1:80:fb:a5:2a:
77:5a:61:6c:0f:b0:20:9b:bf:a7:7e:61:8f:79:f1:5a:4e:f1:
da:70:93:ef:e4:fc:9d:9a:0b:c2:56:5d:b7:3b:a4:49:4a:2e:
ea:b2:c9:fd:c3:56:a8:7e:a2:7b:c3:ee:27:c9:e6:89:cd:de:
ce:77:5f:f1:99:aa:04:06:6d:98:53:5c:16:95:0a:f8:cf:d4:
fd:a0:f7:f9:78:8b:e7:3e:3d:d8:2c:80:94:0d:05:41:6e:b8:
7f:f1:69:cf:bb:f1:cc:15:59:b0:d6:fc:be:59:17:3e:1e:d0:
1e:0e:00:e5:6f:d7:02:30:fb:1f:39:7b:59:fe:99:73:9b:6e:
ab:ac:89:f1:dd:55:c7:93:58:af:b7:a0:e3:c2:58:e4:8f:c4:
c4:58:a9:4e:9b:84:38:9f:25:e9:40:0b:43:81:47:1d:d9:d9:
a4:85:08:57:23:a0:34:6b:66:2a:37:0f:ed:32:10:b3:e0:30:
46:23:44:a9:92:ad:25:47:f1:b3:c7:e8:22:ba:cc:3a:20:55:
13:d2:e8:a5:42:e7:75:b6:08:50:b7:be:07:d2:18:30:d3:bc:
e2:af:3c:50
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ+kIyXV1fEjOMd44mmzUEXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjYwNzI3MTUxMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2I2OWYyZjQxYjA1ODNiY2JjYzJmOTY1ZThmYWU4ZDRkYTYzMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7UK2r+6NsoSM82BXLZ4ybgEixyl
fo//ud4a0giMuC98pNc0QDo3m3TETqRD6xJ8+dr/IS2DkuSdLXktu1JhOtCTtyah
aOZcyFNcyVwmPBZBG+2S2RFuRtI4sP4d2nzBglsVdQwU/SsoZYvtBEfMhZ7iRpdH
Jc7UBDW6TbdYgNWHIwIG8MftwuwCxs4UMpZgwf7k+vEH02Kj03QmErZhVZnxa776
AvNDneuGSbpGEculYyKrjbGC/PKy+GyYyfgkD1wuM5bHvgvw3xaXw6/kbjBwUm2/
X4lilqpEZnspl0euJ1nRaw/9Ba2e8GvdAkFysMgrOdMH9pf2t9a2T8vKjwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLy2ny9BsFg7y8wvll6Pro1NpjI1MB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvdkxhZkwwR3dXRHZMekMtV1hvLXVqVTJtTWpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJvgDAN
BgkqhkiG9w0BAQsFAAOCAQEAs951ia+EmEADyqN+qMoDzKXIBtaN2kxzyYYVV04i
SfGA+6Uqd1phbA+wIJu/p35hj3nxWk7x2nCT7+T8nZoLwlZdtzukSUou6rLJ/cNW
qH6ie8PuJ8nmic3ezndf8ZmqBAZtmFNcFpUK+M/U/aD3+XiL5z492CyAlA0FQW64
f/Fpz7vxzBVZsNb8vlkXPh7QHg4A5W/XAjD7Hzl7Wf6Zc5tuq6yJ8d1Vx5NYr7eg
48JY5I/ExFipTpuEOJ8l6UALQ4FHHdnZpIUIVyOgNGtmKjcP7TIQs+AwRiNEqZKt
JUfxs8foIrrMOiBVE9LopULndbYIULe+B9IYMNO84q88UA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:27 2026 by rpki-client