Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/vk3vIZrZ9FMklVLLHWzL1-UixoU.roa
File: vk3vIZrZ9FMklVLLHWzL1-UixoU.roa (raw, json)
Hash identifier: tn/h/KlQHmIkGxmpVq1uDx8JRv/7qIwfuJJhsLuiJGY=
Subject key identifier: BE:4D:EF:21:9A:D9:F4:53:24:95:52:CB:1D:6C:CB:D7:E5:22:C6:85
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019F11E4D15A8103BDB2C436D52EE0E87BC0
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/vk3vIZrZ9FMklVLLHWzL1-UixoU.roa
Signing time: Mon 29 Jun 2026 05:40:36 +0000
ROA not before: Mon 29 Jun 2026 05:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 979
IP address blocks: 64.83.0.0/18 maxlen: 24
64.90.0.0/19 maxlen: 24
64.178.96.0/19 maxlen: 24
189.24.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:e4:d1:5a:81:03:bd:b2:c4:36:d5:2e:e0:e8:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Jun 29 05:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be4def219ad9f453249552cb1d6ccbd7e522c685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:82:d0:55:dd:2f:85:d4:19:ae:f9:11:d0:
63:6f:0a:c3:58:b3:6f:b9:5f:7f:1b:aa:a7:e5:78:
60:07:e4:d6:85:38:7d:cb:07:dd:28:38:11:1e:4a:
20:44:1c:40:88:74:32:27:4f:a4:b3:d6:4f:04:37:
3e:25:51:ab:b2:3b:96:1f:87:59:94:a1:7e:ad:fb:
c3:3e:5f:a9:ec:ba:8c:76:5e:96:ee:2c:4e:a8:e4:
bb:9d:94:de:24:5d:8c:92:fc:d7:f5:35:ca:84:8c:
55:a2:00:56:5f:8e:54:7c:31:fa:7a:e9:4a:b1:13:
65:e0:57:af:8f:aa:e7:c2:68:57:a4:0a:1c:f7:03:
22:2d:09:e7:4a:2e:3d:19:71:6b:72:cd:0b:a0:5e:
75:a2:c8:f6:5a:1d:28:d8:14:d6:db:6d:8d:8e:9a:
24:c1:88:b1:2d:b1:ab:a1:b2:50:21:1b:a5:27:c2:
8f:0c:0f:5b:54:a6:8a:b4:dc:2b:5a:6a:9c:45:64:
70:e6:48:38:1f:69:5d:ec:9c:ce:0a:6e:9c:17:34:
2a:09:25:75:8c:88:f2:5f:0c:38:27:b2:14:f8:4f:
fd:e6:1c:0c:0c:2d:3a:1b:cc:df:47:e3:af:ba:e4:
a9:1f:44:2b:09:7f:81:b5:6a:4e:36:a3:4b:fd:f7:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:EF:21:9A:D9:F4:53:24:95:52:CB:1D:6C:CB:D7:E5:22:C6:85
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/vk3vIZrZ9FMklVLLHWzL1-UixoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.83.0.0/18
64.90.0.0/19
64.178.96.0/19
189.24.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7f:56:d2:fc:3c:4c:34:92:ae:63:7e:39:97:ca:65:fa:45:74:
16:3b:9b:a1:b6:cc:76:16:6c:30:02:60:f1:fc:d9:9a:b2:1c:
b6:cf:20:33:08:89:4a:24:ae:ba:fe:74:e1:f9:16:7f:97:f4:
4e:1e:22:33:e0:d2:e3:0b:95:eb:62:14:0b:35:5c:c9:8b:5b:
bf:08:13:a5:77:e6:61:f2:2e:88:5a:72:0c:42:03:88:ba:c1:
92:8b:5b:71:72:47:72:3d:fb:21:df:56:17:aa:3a:c5:e3:64:
41:69:e4:d9:0d:10:d5:a0:0d:82:c4:c0:6b:81:2f:7d:41:cf:
c1:8b:e6:73:44:74:e4:2a:82:51:de:3f:47:38:1a:85:19:f6:
29:42:da:ac:72:2c:72:6f:80:d6:de:82:a0:25:53:fb:e2:0d:
85:1a:3b:d6:79:ac:50:55:2f:ed:62:51:6b:6e:ce:35:c8:35:
ab:29:71:07:65:28:60:80:e6:8e:59:7c:d4:2a:c7:7c:0c:bf:
42:66:d0:c7:a0:27:cc:79:12:b8:f6:de:8a:9f:17:ff:22:96:
0b:be:f2:b1:af:dc:53:38:e5:0c:c0:df:1e:87:ac:2f:56:9a:
ed:da:de:02:3b:0e:bc:9d:8b:f7:1f:b1:47:d7:ef:aa:af:6c:
51:c6:f7:e2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8R5NFagQO9ssQ21S7g6HvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYWYwZDIwZjk4ZTNhMjA1NTBjOTk2ZDc0MjkyNjg4ZjBk
MjI3OWQwHhcNMjYwNjI5MDU0MDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTRkZWYyMTlhZDlmNDUzMjQ5NTUyY2IxZDZjY2JkN2U1MjJjNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1iC0FXdL4XUGa75EdBjbwrDWLNv
uV9/G6qn5XhgB+TWhTh9ywfdKDgRHkogRBxAiHQyJ0+ks9ZPBDc+JVGrsjuWH4dZ
lKF+rfvDPl+p7LqMdl6W7ixOqOS7nZTeJF2MkvzX9TXKhIxVogBWX45UfDH6eulK
sRNl4Fevj6rnwmhXpAoc9wMiLQnnSi49GXFrcs0LoF51osj2Wh0o2BTW222Njpok
wYixLbGrobJQIRulJ8KPDA9bVKaKtNwrWmqcRWRw5kg4H2ld7JzOCm6cFzQqCSV1
jIjyXww4J7IU+E/95hwMDC06G8zfR+OvuuSpH0QrCX+BtWpONqNL/fdGFQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFL5N7yGa2fRTJJVSyx1sy9flIsaFMB8GA1UdIwQY
MBaAFOuvDSD5jjogVQyZbXQpJojw0iedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMt
MzIwOTM2Mjg4ZTk1LzEvdmszdklaclo5Rk1rbFZMTEhXekwxLVVpeG9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMtMzIwOTM2Mjg4ZTk1
LzEvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQGQFMAAwQF
QFoAAwQFQLJgAwQGvRhAMA0GCSqGSIb3DQEBCwUAA4IBAQB/VtL8PEw0kq5jfjmX
ymX6RXQWO5uhtsx2FmwwAmDx/Nmashy2zyAzCIlKJK66/nTh+RZ/l/ROHiIz4NLj
C5XrYhQLNVzJi1u/CBOld+Zh8i6IWnIMQgOIusGSi1txckdyPfsh31YXqjrF42RB
aeTZDRDVoA2CxMBrgS99Qc/Bi+ZzRHTkKoJR3j9HOBqFGfYpQtqscixyb4DW3oKg
JVP74g2FGjvWeaxQVS/tYlFrbs41yDWrKXEHZShggOaOWXzUKsd8DL9CZtDHoCfM
eRK49t6Knxf/IpYLvvKxr9xTOOUMwN8eh6wvVprt2t4COw68nYv3H7FH1++qr2xR
xvfi
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:59 2026 by rpki-client