Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/ca4C5AzdpNKNar2d8IS6G83I0hM.roa
File: ca4C5AzdpNKNar2d8IS6G83I0hM.roa (raw, json)
Hash identifier: BnmHeJGgIqbaAvekP5MH0alnMlpA9Lw+88gexar1FUM=
Subject key identifier: 71:AE:02:E4:0C:DD:A4:D2:8D:6A:BD:9D:F0:84:BA:1B:CD:C8:D2:13
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 01A1A6BA229FE3899EBAED98EF0C9B8B5554
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/ca4C5AzdpNKNar2d8IS6G83I0hM.roa
Signing time: Wed 04 Nov 2026 13:22:58 +0000
ROA not before: Wed 04 Nov 2026 13:22:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203804
IP address blocks: 84.54.13.0/24 maxlen: 24
176.98.41.0/24 maxlen: 24
185.127.42.0/24 maxlen: 24
193.31.116.0/24 maxlen: 24
213.226.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:ba:22:9f:e3:89:9e:ba:ed:98:ef:0c:9b:8b:55:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Nov 4 13:22:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71ae02e40cdda4d28d6abd9df084ba1bcdc8d213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:19:47:84:d3:89:c2:15:0a:3c:ca:4a:b6:c2:
44:ea:5a:2b:c3:f6:86:ab:bd:c1:e0:b0:66:ba:bc:
cb:ed:89:bf:23:11:32:74:fb:83:dd:41:98:fa:89:
f2:f1:06:dc:2c:8a:20:22:df:1d:d7:32:7a:0e:b7:
08:b8:f4:14:0a:f0:cd:5d:e9:1e:03:a6:33:ea:94:
3b:62:1a:50:78:a0:13:ef:fb:4e:5d:67:35:29:9f:
c6:9c:76:01:62:8d:54:12:fb:fe:da:dd:89:d0:05:
13:f7:1c:e5:59:b4:a2:c6:98:ec:ed:20:b0:8a:0e:
22:52:f0:c3:15:95:5b:4d:d4:b2:53:95:3b:43:48:
de:0d:75:fc:22:48:98:4a:5d:c3:43:80:67:d9:68:
a6:5a:48:06:eb:be:0e:55:2c:63:a6:31:e9:74:76:
28:60:c2:58:43:6b:df:cb:33:34:13:53:5e:90:ed:
52:11:b0:0b:3c:63:0b:e5:41:11:cd:88:6e:5d:43:
86:48:0b:d3:26:2e:68:06:84:c1:6f:e2:90:0f:7f:
3f:a1:fd:7b:35:1d:0c:be:52:78:1b:7b:22:46:1c:
1c:55:45:5f:0e:1f:ca:18:04:02:36:06:f4:45:cb:
2f:7e:2a:8f:ad:b1:8d:a6:6e:3f:f5:47:db:a7:a6:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AE:02:E4:0C:DD:A4:D2:8D:6A:BD:9D:F0:84:BA:1B:CD:C8:D2:13
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/ca4C5AzdpNKNar2d8IS6G83I0hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.13.0/24
176.98.41.0/24
185.127.42.0/24
193.31.116.0/24
213.226.119.0/24
Signature Algorithm: sha256WithRSAEncryption
70:49:37:9d:53:c0:00:ce:6a:57:fa:26:2e:37:2d:21:bd:29:
5f:82:6b:c8:63:45:f4:eb:a8:e6:31:f8:a6:da:81:88:33:21:
63:30:8d:be:04:31:c1:43:69:aa:c3:27:b1:e3:be:40:04:a0:
03:fd:00:04:fc:3d:dd:cf:68:e4:22:f1:19:f8:5f:e7:f6:22:
79:b1:71:93:8b:79:c2:48:8e:e4:a9:00:05:91:1c:dd:c4:0d:
e2:36:91:6d:11:9d:ef:76:cb:25:df:f7:40:90:df:48:eb:e7:
8d:c9:7f:1e:f9:80:9f:67:21:d1:97:35:3d:81:8e:cc:33:0e:
d4:31:5a:90:92:ab:03:e3:3f:67:50:5c:c7:eb:22:2c:44:a7:
04:c8:df:fb:6b:e3:3b:c1:3d:79:f1:36:01:d5:60:5b:27:89:
2c:ff:39:37:7a:65:29:83:f2:71:1e:76:1c:00:0c:2a:d1:d7:
41:a2:9c:75:4f:08:b4:ee:8d:e3:a1:11:ec:ab:16:6b:63:10:
77:26:6b:73:d7:00:ad:e2:ba:fa:f9:7d:45:22:9d:8e:d6:d1:
a7:10:a2:3c:18:be:ab:4d:4e:aa:0d:a4:52:18:9d:df:85:e6:
90:95:f3:b2:85:8b:e7:dd:35:51:aa:22:9d:ab:39:ec:16:8a:
c9:e6:a4:2b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaGmuiKf44meuu2Y7wybi1VUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm
MjhmNmMwHhcNMjYxMTA0MTMyMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWFlMDJlNDBjZGRhNGQyOGQ2YWJkOWRmMDg0YmExYmNkYzhkMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hlHhNOJwhUKPMpKtsJE6lorw/aG
q73B4LBmurzL7Ym/IxEydPuD3UGY+ony8QbcLIogIt8d1zJ6DrcIuPQUCvDNXeke
A6Yz6pQ7YhpQeKAT7/tOXWc1KZ/GnHYBYo1UEvv+2t2J0AUT9xzlWbSixpjs7SCw
ig4iUvDDFZVbTdSyU5U7Q0jeDXX8IkiYSl3DQ4Bn2WimWkgG674OVSxjpjHpdHYo
YMJYQ2vfyzM0E1NekO1SEbALPGML5UERzYhuXUOGSAvTJi5oBoTBb+KQD38/of17
NR0MvlJ4G3siRhwcVUVfDh/KGAQCNgb0RcsvfiqPrbGNpm4/9Ufbp6YYBwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHGuAuQM3aTSjWq9nfCEuhvNyNITMB8GA1UdIwQY
MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt
YTM4NTU1MDVlYTJlLzEvY2E0QzVBemRwTktOYXIyZDhJUzZHODNJMGhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl
LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVDYNAwQA
sGIpAwQAuX8qAwQAwR90AwQA1eJ3MA0GCSqGSIb3DQEBCwUAA4IBAQBwSTedU8AA
zmpX+iYuNy0hvSlfgmvIY0X066jmMfim2oGIMyFjMI2+BDHBQ2mqwyex475ABKAD
/QAE/D3dz2jkIvEZ+F/n9iJ5sXGTi3nCSI7kqQAFkRzdxA3iNpFtEZ3vdssl3/dA
kN9I6+eNyX8e+YCfZyHRlzU9gY7MMw7UMVqQkqsD4z9nUFzH6yIsRKcEyN/7a+M7
wT158TYB1WBbJ4ks/zk3emUpg/JxHnYcAAwq0ddBopx1Twi07o3joRHsqxZrYxB3
Jmtz1wCt4rr6+X1FIp2O1tGnEKI8GL6rTU6qDaRSGJ3fheaQlfOyhYvn3TVRqiKd
qznsForJ5qQr
-----END CERTIFICATE-----
Generated at Sun Nov 8 06:51:52 2026 by rpki-client