Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/caoVaQQ6_hhxU_4EPaC4DGWonYs.roa
File: caoVaQQ6_hhxU_4EPaC4DGWonYs.roa (raw, json)
Hash identifier: Jkj0fsvwP9t6ClFgp5zppkKjHIXOVf7JZWgJIt+cjtk=
Subject key identifier: 71:AA:15:69:04:3A:FE:18:71:53:FE:04:3D:A0:B8:0C:65:A8:9D:8B
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 01A172E3FA8B85BF2401066CA911D34FA21A
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/caoVaQQ6_hhxU_4EPaC4DGWonYs.roa
Signing time: Sun 25 Oct 2026 11:48:25 +0000
ROA not before: Sun 25 Oct 2026 11:48:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400951
IP address blocks: 64.83.56.0/22 maxlen: 24
64.83.60.0/22 maxlen: 24
64.178.112.0/23 maxlen: 24
64.178.122.0/23 maxlen: 24
64.178.124.0/23 maxlen: 24
64.178.126.0/23 maxlen: 24
189.24.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:e3:fa:8b:85:bf:24:01:06:6c:a9:11:d3:4f:a2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Oct 25 11:48:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71aa1569043afe187153fe043da0b80c65a89d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:24:98:13:f2:8a:3e:c0:e1:bf:70:9b:15:
9f:9c:e2:d5:2e:9a:64:a2:e1:c5:5b:4b:de:81:0e:
e8:43:5d:ef:ea:b7:85:55:1e:d1:22:e9:1f:be:14:
53:b2:1f:bc:07:8f:9d:e3:cd:75:5a:50:37:41:91:
09:e6:b0:f1:93:6d:28:ef:92:df:f7:72:43:a5:48:
5f:09:a0:a2:f6:6a:e1:6b:80:c9:8c:47:0e:60:19:
33:b6:58:22:22:35:59:bf:0f:6e:77:80:63:42:39:
47:05:28:50:d1:15:91:53:61:b7:a9:36:f7:a7:60:
2d:b3:eb:68:ed:d5:8d:68:2e:a1:94:72:42:ec:ff:
88:9b:9c:b0:48:57:5a:a9:e8:b1:27:c3:a5:d0:c4:
b6:32:dd:88:f8:cd:d9:13:26:49:18:74:00:c9:16:
98:f1:be:06:c4:46:41:34:e9:ac:6a:8e:94:8c:d5:
cc:e1:7e:0b:97:3f:4d:b3:b3:aa:de:b6:9f:67:cf:
ad:e9:be:90:e8:70:23:5c:60:b6:0b:db:cf:7e:00:
00:7a:0b:31:6b:9a:82:74:f2:e4:45:c5:21:18:84:
b7:61:dc:21:4f:ff:6c:00:de:25:41:69:81:4a:c4:
7c:df:71:fb:ff:a6:d9:44:ef:ae:28:6c:2d:16:f0:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AA:15:69:04:3A:FE:18:71:53:FE:04:3D:A0:B8:0C:65:A8:9D:8B
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/caoVaQQ6_hhxU_4EPaC4DGWonYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.83.56.0/21
64.178.112.0/23
64.178.122.0-64.178.127.255
189.24.122.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:41:c0:d0:6f:a5:61:5b:fd:3a:25:2f:23:ed:62:1d:fd:d4:
16:30:7f:fa:83:11:86:fc:9a:d9:51:1e:f0:02:9d:b4:81:01:
3b:b1:25:21:bf:ab:3e:12:60:e4:47:55:2f:12:2e:d1:10:30:
32:4c:0e:78:48:c0:21:d7:ed:ae:a2:0a:99:2c:2e:90:6c:95:
c3:53:c1:24:91:16:ad:75:95:f2:d7:86:23:8c:14:77:cf:0c:
c4:19:98:e2:29:ee:57:6d:c3:ae:a9:d9:18:2e:c4:6e:9f:59:
96:51:1f:7a:e8:b3:57:e3:3e:36:0c:a1:57:83:56:7e:af:c0:
41:67:9e:fe:56:8c:ba:35:24:19:53:66:13:d7:b2:aa:8d:2d:
36:83:b4:ca:a9:ba:27:66:e3:c3:d8:b0:08:cb:a6:08:18:d5:
79:a3:07:a2:80:99:4f:8c:75:7b:55:23:5b:a5:c4:16:de:82:
ca:d8:b0:d0:9c:a3:bc:61:1a:31:09:97:14:32:ae:49:7b:ff:
e0:04:f7:45:24:cf:ba:6f:78:6a:5b:d9:51:25:d7:22:e9:7f:
84:5a:b2:1c:d3:c8:7d:46:ed:02:65:ba:81:d9:db:fd:cf:e0:
16:a5:57:8d:8a:72:46:b0:a9:aa:ca:a6:4f:e2:9d:06:ab:04:
3e:89:3a:17
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAaFy4/qLhb8kAQZsqRHTT6IaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYWYwZDIwZjk4ZTNhMjA1NTBjOTk2ZDc0MjkyNjg4ZjBk
MjI3OWQwHhcNMjYxMDI1MTE0ODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWFhMTU2OTA0M2FmZTE4NzE1M2ZlMDQzZGEwYjgwYzY1YTg5ZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R4kmBPyij7A4b9wmxWfnOLVLppk
ouHFW0vegQ7oQ13v6reFVR7RIukfvhRTsh+8B4+d4811WlA3QZEJ5rDxk20o75Lf
93JDpUhfCaCi9mrha4DJjEcOYBkztlgiIjVZvw9ud4BjQjlHBShQ0RWRU2G3qTb3
p2Ats+to7dWNaC6hlHJC7P+Im5ywSFdaqeixJ8Ol0MS2Mt2I+M3ZEyZJGHQAyRaY
8b4GxEZBNOmsao6UjNXM4X4Llz9Ns7Oq3rafZ8+t6b6Q6HAjXGC2C9vPfgAAegsx
a5qCdPLkRcUhGIS3YdwhT/9sAN4lQWmBSsR833H7/6bZRO+uKGwtFvAwYwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFHGqFWkEOv4YcVP+BD2guAxlqJ2LMB8GA1UdIwQY
MBaAFOuvDSD5jjogVQyZbXQpJojw0iedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMt
MzIwOTM2Mjg4ZTk1LzEvY2FvVmFRUTZfaGh4VV80RVBhQzRER1dvbllzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMtMzIwOTM2Mjg4ZTk1
LzEvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDQFM4AwQB
QLJwMAwDBAFAsnoDBAdAsgADBAG9GHowDQYJKoZIhvcNAQELBQADggEBAKlBwNBv
pWFb/TolLyPtYh391BYwf/qDEYb8mtlRHvACnbSBATuxJSG/qz4SYORHVS8SLtEQ
MDJMDnhIwCHX7a6iCpksLpBslcNTwSSRFq11lfLXhiOMFHfPDMQZmOIp7ldtw66p
2RguxG6fWZZRH3ros1fjPjYMoVeDVn6vwEFnnv5WjLo1JBlTZhPXsqqNLTaDtMqp
uidm48PYsAjLpggY1XmjB6KAmU+MdXtVI1ulxBbegsrYsNCco7xhGjEJlxQyrkl7
/+AE90Ukz7pveGpb2VEl1yLpf4RashzTyH1G7QJluoHZ2/3P4BalV42KckawqarK
pk/inQarBD6JOhc=
-----END CERTIFICATE-----
Generated at Mon Oct 26 19:02:17 2026 by rpki-client