Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CeaYJaKNPEpRhsRnTcafWttXiNA.roa
File: CeaYJaKNPEpRhsRnTcafWttXiNA.roa (raw, json)
Hash identifier: P8GsnLb5utdZZiuCAkWAFnwhaHAY4KMquX84a1q9ajc=
Subject key identifier: 09:E6:98:25:A2:8D:3C:4A:51:86:C4:67:4D:C6:9F:5A:DB:57:88:D0
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019D874774F0B6E75EDE021E7A89CF3D489B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CeaYJaKNPEpRhsRnTcafWttXiNA.roa
Signing time: Mon 13 Apr 2026 14:38:20 +0000
ROA not before: Mon 13 Apr 2026 14:38:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29262
IP address blocks: 91.194.55.0/24 maxlen: 24
93.190.13.0/24 maxlen: 24
93.190.14.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.191.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.85.238.0/24 maxlen: 24
185.85.239.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.86.153.0/24 maxlen: 24
185.86.154.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.24.0/24 maxlen: 24
185.87.26.0/24 maxlen: 24
185.87.121.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.119.81.0/24 maxlen: 24
185.119.82.0/24 maxlen: 24
185.119.83.0/24 maxlen: 24
185.141.32.0/24 maxlen: 24
185.250.210.0/24 maxlen: 24
2a0b:6780::/29 maxlen: 29
2a0c:46c0::/29 maxlen: 29
2a0c:67c0::/29 maxlen: 29
2a10:8b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:47:74:f0:b6:e7:5e:de:02:1e:7a:89:cf:3d:48:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Apr 13 14:38:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09e69825a28d3c4a5186c4674dc69f5adb5788d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:4e:08:cf:3c:41:e4:e7:33:51:8a:cb:6f:
5a:88:05:e4:a3:5a:16:32:f4:46:15:34:c3:4a:19:
b1:cd:4d:a7:fd:10:4d:db:bf:3b:d8:b6:2c:84:4e:
c1:ef:df:c3:84:18:c5:b8:6a:2a:7f:b1:f6:3e:2b:
ae:14:c2:18:61:e5:42:8e:06:a0:c4:ed:f3:cf:26:
d0:80:78:51:16:af:c8:94:03:c7:7f:1c:6d:51:32:
b1:82:53:47:2d:18:77:02:b4:5c:3c:28:34:61:b2:
84:5c:76:72:fa:70:d2:fa:1e:8c:7b:19:cc:29:82:
89:de:30:9a:5e:a4:20:70:7f:13:b6:c2:67:36:4c:
ae:09:9f:b6:e2:ce:cf:c6:0f:64:97:f6:b6:91:bf:
88:be:69:8e:51:22:b9:57:6f:c9:14:fe:68:03:8c:
27:f4:1d:3d:79:48:61:fa:69:85:15:03:ee:cb:50:
15:2f:5f:50:9a:b9:b2:a0:4d:28:2f:60:3b:4f:2f:
3f:1d:db:fa:83:63:97:2d:17:d3:3c:25:a0:02:f4:
52:63:6d:45:91:8b:b5:90:3f:ef:35:30:52:81:33:
3c:94:8b:0e:67:b4:0b:92:0f:f1:d6:fc:9d:2e:66:
63:b8:6c:82:dc:4c:a6:fd:47:25:5f:9e:32:08:64:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:98:25:A2:8D:3C:4A:51:86:C4:67:4D:C6:9F:5A:DB:57:88:D0
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CeaYJaKNPEpRhsRnTcafWttXiNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.55.0/24
93.190.13.0-93.190.14.255
185.85.188.0/22
185.85.237.0-185.85.239.255
185.86.5.0-185.86.6.255
185.86.13.0/24
185.86.153.0-185.86.154.255
185.86.164.0/22
185.87.24.0/24
185.87.26.0/24
185.87.121.0-185.87.123.255
185.98.61.0/24
185.98.63.0/24
185.119.80.0/22
185.141.32.0/24
185.250.210.0/24
IPv6:
2a0b:6780::/29
2a0c:46c0::/29
2a0c:67c0::/29
2a10:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
31:0a:9a:27:23:c5:b1:87:b8:00:0f:e5:69:9a:3a:64:77:b3:
f4:42:1e:7c:54:b9:cf:5b:b3:e5:20:8f:e5:7b:9f:28:c1:22:
7d:82:28:d8:a2:f5:7e:3d:46:a8:c2:90:6e:85:9f:6e:65:ba:
97:b9:0d:73:0f:b1:40:81:8c:d0:de:9d:29:f3:00:16:13:4d:
83:02:19:7e:9a:56:48:d4:05:04:67:10:17:43:5f:2c:a4:bc:
de:87:c0:3a:14:a8:d2:9d:3c:ec:4e:33:a8:2c:b3:48:0e:a6:
f5:f6:d2:ec:96:4e:0b:cc:43:6c:6d:e8:88:0a:b8:ff:23:4e:
39:58:b0:a6:b4:1d:8c:df:9d:dd:0f:8f:9e:11:ee:08:31:24:
05:65:86:b3:f3:aa:b1:d9:bf:2d:27:5b:b2:ca:75:41:7a:03:
39:89:a6:e0:a1:87:28:d3:ae:a9:c2:4d:a3:10:77:b1:63:f8:
16:32:4f:a2:1b:f2:bd:92:2f:44:2b:73:d4:d6:be:55:a3:e2:
ac:5c:30:15:b4:4d:7b:2a:ab:99:60:a2:c0:a0:46:24:0d:0b:
38:74:33:59:50:01:0b:bc:c0:f5:b4:cd:08:97:8e:5e:46:78:
d1:61:d4:b5:ce:cf:3d:2f:d0:a4:86:f7:c1:23:80:e5:72:83:
34:f7:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:46 2026 by rpki-client