Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/CEARuHEDqGP1TnwSNVqtvZMZZo0.roa
File: CEARuHEDqGP1TnwSNVqtvZMZZo0.roa (raw, json)
Hash identifier: 3jV/T6URFbF8OSYmQKrrpzlrUhowMqtPjoD9j2TzyaQ=
Subject key identifier: 08:40:11:B8:71:03:A8:63:F5:4E:7C:12:35:5A:AD:BD:93:19:66:8D
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 019FFB1690EC78BF11C83F9322F3E7026AAD
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/CEARuHEDqGP1TnwSNVqtvZMZZo0.roa
Signing time: Thu 13 Aug 2026 12:26:27 +0000
ROA not before: Thu 13 Aug 2026 12:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29256
IP address blocks: 94.252.128.0/22 maxlen: 22
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.160.0/20 maxlen: 20
94.252.176.0/22 maxlen: 22
94.252.180.0/24 maxlen: 24
94.252.181.0/24 maxlen: 24
94.252.182.0/24 maxlen: 24
94.252.183.0/24 maxlen: 24
94.252.184.0/24 maxlen: 24
94.252.185.0/24 maxlen: 24
94.252.186.0/24 maxlen: 24
94.252.187.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
94.252.189.0/24 maxlen: 24
94.252.190.0/24 maxlen: 24
94.252.191.0/24 maxlen: 24
185.136.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:16:90:ec:78:bf:11:c8:3f:93:22:f3:e7:02:6a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Aug 13 12:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=084011b87103a863f54e7c12355aadbd9319668d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:53:e6:41:45:28:4c:e0:85:a6:4a:a0:99:
f7:ec:93:11:bb:f8:88:b4:77:14:0e:89:a2:80:31:
4a:ba:9a:c5:96:a6:17:3c:ab:96:d3:3e:fd:f0:31:
dd:f9:b5:2e:9c:51:ba:dd:c6:44:88:62:43:4f:20:
9f:9b:c3:cd:b8:86:1b:8d:b4:4c:4f:f1:ee:ab:7a:
e3:21:8f:f6:18:33:42:d5:3f:b3:69:33:03:2c:d7:
b2:d4:e5:72:69:e5:ad:5c:cc:4a:94:52:52:d6:50:
d3:59:40:51:af:11:a9:0b:a0:d0:5f:cb:6d:af:c4:
ae:79:e2:3d:0b:f1:20:55:bd:2d:20:11:d4:75:fe:
f9:04:70:84:6e:2c:d1:ca:14:74:70:af:dc:76:ad:
8a:1b:e4:ee:6b:8a:e1:be:32:12:ca:d0:74:ad:5a:
40:4d:9b:59:2b:05:d2:af:48:44:1d:d0:b1:52:64:
52:7b:ad:78:e4:04:0f:e3:da:22:64:0c:41:10:e6:
c9:7b:66:97:fb:4b:32:d6:14:29:ee:d6:ec:dc:4d:
d3:72:39:06:41:b1:de:86:27:d6:ad:33:17:3f:83:
b7:bb:60:34:06:8d:52:ab:74:06:01:3d:24:b8:0b:
d2:f1:57:4d:a0:c6:70:29:df:b2:5d:53:bd:4a:68:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:40:11:B8:71:03:A8:63:F5:4E:7C:12:35:5A:AD:BD:93:19:66:8D
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/CEARuHEDqGP1TnwSNVqtvZMZZo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.252.128.0/20
94.252.160.0/19
185.136.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:31:1d:d4:10:77:e9:71:84:1a:b4:18:2b:7e:b1:f1:cc:c0:
39:c3:96:99:5e:e7:4e:99:46:2f:b6:33:5a:51:d6:5f:38:c4:
56:5f:7c:09:21:3b:d8:58:10:b0:04:4e:18:36:af:14:91:ff:
38:dd:d0:c6:7b:96:8d:e8:c6:e2:6b:9d:e3:ca:d4:cb:a6:aa:
85:1e:93:c8:f2:0b:d3:e3:74:c1:bc:01:49:eb:f1:6c:fa:f4:
a0:67:98:61:d3:cf:d4:0b:1c:4b:c5:60:5c:19:fd:6b:de:0d:
1d:a3:aa:39:cb:46:5d:53:bb:22:88:8b:65:32:86:6a:aa:a5:
2d:6b:d5:5e:71:f4:88:3f:3f:ff:dd:ef:bb:3f:42:5c:9e:02:
b6:ce:48:fa:9c:32:ac:a5:bf:6f:fb:66:e7:4c:19:0e:b0:67:
7c:4a:e3:b1:c3:08:0f:12:18:be:a9:c6:7a:b1:59:88:88:03:
53:d0:39:95:3c:de:ad:f6:60:5a:41:7a:02:44:a2:da:01:6f:
05:23:55:c6:57:c1:1b:3a:e3:f4:70:bb:01:32:65:a1:9e:48:
2e:d8:d7:e4:9e:e6:a9:b5:fb:c3:41:29:71:bf:79:85:4e:ad:
a2:25:9a:6f:d1:aa:5c:fc:c0:ec:3b:44:a3:93:64:3c:b0:69:
9a:bd:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:29:47 2026 by rpki-client