Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/vzb1cm789RV9UhtIEcUhdqV0JqY.roa
File: vzb1cm789RV9UhtIEcUhdqV0JqY.roa (raw, json)
Hash identifier: Go4C2CoiSYGGVFQL1D/38S3jyZWdC+julMl+cPO1OJU=
Subject key identifier: BF:36:F5:72:6E:FC:F5:15:7D:52:1B:48:11:C5:21:76:A5:74:26:A6
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019EAD795A135DBDF366701682E4957049EA
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/vzb1cm789RV9UhtIEcUhdqV0JqY.roa
Signing time: Tue 09 Jun 2026 17:41:11 +0000
ROA not before: Tue 09 Jun 2026 17:41:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 194.147.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:79:5a:13:5d:bd:f3:66:70:16:82:e4:95:70:49:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jun 9 17:41:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf36f5726efcf5157d521b4811c52176a57426a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:2a:2f:32:ef:db:7c:dc:1c:c3:f5:82:ef:
df:a6:91:d5:3c:9f:94:01:3b:25:7d:77:94:99:dc:
95:86:b0:56:f9:bd:76:c3:4a:01:c1:06:b3:0a:1a:
57:08:b6:49:b7:cf:9e:a8:13:89:49:72:5a:16:bf:
1f:2e:4a:15:46:4b:d5:d6:da:93:d9:47:61:ce:60:
7f:83:e8:cf:52:2a:88:a3:e8:ce:1e:0a:b0:5c:ca:
c8:df:b8:f4:6e:02:2b:13:14:9b:db:c5:08:7f:cd:
ae:1a:c4:ce:07:a5:53:ed:f5:33:4b:c0:9f:27:cf:
6f:28:b4:7f:66:8a:48:40:1b:0c:1e:17:9a:1c:51:
ec:f3:3d:e3:2e:f3:f9:7f:c6:15:5c:42:3c:9b:27:
92:37:b5:40:d7:bc:92:13:e9:88:59:7a:1c:47:e9:
6b:69:2d:0d:58:cc:ef:60:a6:9f:23:ec:71:03:fe:
b4:08:20:1d:d7:a9:d7:15:66:9c:82:19:b8:c4:c0:
ec:3e:09:2b:05:fa:6e:08:d0:6e:e7:c0:c7:ba:b4:
ba:a7:15:b7:44:38:04:b9:c3:63:fd:ed:b8:87:67:
b2:59:02:40:02:55:da:de:a8:f4:b0:44:72:53:e8:
d4:ab:f5:9e:34:ad:a7:23:83:a5:54:eb:c3:38:91:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:36:F5:72:6E:FC:F5:15:7D:52:1B:48:11:C5:21:76:A5:74:26:A6
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/vzb1cm789RV9UhtIEcUhdqV0JqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.88.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b0:d4:76:54:63:1c:b6:2c:f3:7d:75:a3:8b:cc:86:42:a9:
0e:19:16:23:ef:6c:1d:00:f8:41:af:8a:73:b2:71:ca:04:d4:
c2:73:37:7b:d8:11:45:87:51:7f:93:9f:7f:fc:76:25:cd:d9:
47:55:0b:2b:55:d4:f6:fa:74:4c:f5:00:33:54:6e:00:30:0b:
f0:5f:d6:ce:38:82:28:67:5c:42:9c:92:a6:81:6b:e8:1b:fd:
8a:8a:b0:65:c6:c2:65:a3:a1:61:7e:67:22:97:93:18:c7:4e:
df:a4:06:6c:0d:b3:20:76:e4:ac:e5:1b:e3:0b:e9:df:e7:9a:
2e:29:8c:0c:c0:1f:00:74:22:72:27:0d:80:aa:41:2e:f4:e4:
a5:85:e0:ad:d8:06:79:54:75:54:0e:e9:cd:43:31:f1:98:e1:
3a:85:1c:0d:ae:55:93:82:88:16:b3:85:91:d9:98:c6:66:78:
e5:06:66:4b:06:a8:13:43:15:1f:c7:73:45:55:8c:15:8c:6e:
d5:db:78:a2:f7:61:b2:ac:d3:b7:54:86:eb:6e:7b:d8:28:5d:
b4:a4:82:c8:08:5c:0f:a2:9d:52:ce:ff:f5:9c:50:b4:d0:fc:
4e:97:23:eb:65:89:94:75:f9:b8:16:41:87:dc:86:6e:a5:9a:
74:36:3c:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6teVoTXb3zZnAWguSVcEnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjYwNjA5MTc0MTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjM2ZjU3MjZlZmNmNTE1N2Q1MjFiNDgxMWM1MjE3NmE1NzQyNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcwqLzLv23zcHMP1gu/fppHVPJ+U
ATslfXeUmdyVhrBW+b12w0oBwQazChpXCLZJt8+eqBOJSXJaFr8fLkoVRkvV1tqT
2UdhzmB/g+jPUiqIo+jOHgqwXMrI37j0bgIrExSb28UIf82uGsTOB6VT7fUzS8Cf
J89vKLR/ZopIQBsMHheaHFHs8z3jLvP5f8YVXEI8myeSN7VA17ySE+mIWXocR+lr
aS0NWMzvYKafI+xxA/60CCAd16nXFWacghm4xMDsPgkrBfpuCNBu58DHurS6pxW3
RDgEucNj/e24h2eyWQJAAlXa3qj0sERyU+jUq/WeNK2nI4OlVOvDOJGhrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL829XJu/PUVfVIbSBHFIXaldCamMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvdnpiMWNtNzg5UlY5VWh0SUVjVWhkcVYwSnFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNYMA0G
CSqGSIb3DQEBCwUAA4IBAQB8sNR2VGMctizzfXWji8yGQqkOGRYj72wdAPhBr4pz
snHKBNTCczd72BFFh1F/k59//HYlzdlHVQsrVdT2+nRM9QAzVG4AMAvwX9bOOIIo
Z1xCnJKmgWvoG/2KirBlxsJlo6Fhfmcil5MYx07fpAZsDbMgduSs5RvjC+nf55ou
KYwMwB8AdCJyJw2AqkEu9OSlheCt2AZ5VHVUDunNQzHxmOE6hRwNrlWTgogWs4WR
2ZjGZnjlBmZLBqgTQxUfx3NFVYwVjG7V23ii92GyrNO3VIbrbnvYKF20pILICFwP
op1Szv/1nFC00PxOlyPrZYmUdfm4FkGH3IZupZp0NjyO
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:19:37 2026 by rpki-client