Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/CebmfOyJooUILNEUMAUtfKAJLCU.roa
File: CebmfOyJooUILNEUMAUtfKAJLCU.roa (raw, json)
Hash identifier: tT4ZAroQOrt1qZ326uguhBeA8FqTIhJoHz+vyYdSKJs=
Subject key identifier: 09:E6:E6:7C:EC:89:A2:85:08:2C:D1:14:30:05:2D:7C:A0:09:2C:25
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A1D1241970FFB1013B7D426F4C717A578C
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/CebmfOyJooUILNEUMAUtfKAJLCU.roa
Signing time: Thu 12 Nov 2026 19:02:46 +0000
ROA not before: Thu 12 Nov 2026 19:02:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 87.232.81.0/24 maxlen: 24
89.126.224.0/24 maxlen: 24
89.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 11:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d1:24:19:70:ff:b1:01:3b:7d:42:6f:4c:71:7a:57:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Nov 12 19:02:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09e6e67cec89a285082cd11430052d7ca0092c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:4f:98:3d:57:df:0f:c5:95:36:79:4b:4b:
83:e9:d5:82:86:9b:fe:cf:1d:f1:47:d8:20:fd:37:
b2:01:c5:91:13:d6:33:19:4b:5e:82:89:14:79:30:
5a:7d:bb:9a:5d:06:77:90:af:d8:32:ab:e5:89:10:
9c:6c:4b:3b:2f:97:5a:72:70:a3:de:1e:9c:3e:d9:
f2:b1:df:bb:eb:c6:a7:3b:44:b5:e2:5e:ad:08:33:
5c:ba:3d:f4:e2:54:20:c8:21:dd:cb:47:a3:d2:2c:
60:46:47:6a:b4:d7:8e:83:75:af:0c:25:84:ca:5f:
91:be:33:c4:bc:32:cc:89:00:44:c1:3d:8e:87:a6:
be:03:12:b7:70:de:a6:76:19:ed:74:16:d7:08:e3:
35:94:43:06:48:5e:9c:e0:08:9c:07:3c:fd:8d:53:
62:13:24:15:63:ef:f4:9f:3b:55:e9:e8:23:e9:3c:
ce:6c:0e:b3:92:75:ee:31:99:c9:9d:f4:ea:f7:6c:
16:c7:fa:69:02:ab:97:88:dc:8c:63:b3:bf:a8:88:
30:c6:4f:bf:21:db:c0:b0:79:45:e8:d6:28:b1:f4:
15:94:be:7b:45:12:9b:44:88:d1:08:9d:d8:e1:1f:
08:c5:06:45:65:8a:69:f3:1b:8a:c5:ab:f3:28:21:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:E6:7C:EC:89:A2:85:08:2C:D1:14:30:05:2D:7C:A0:09:2C:25
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/CebmfOyJooUILNEUMAUtfKAJLCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.81.0/24
89.126.224.0/24
89.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b0:27:d1:02:c0:94:fe:84:8c:ee:4e:e5:76:6c:d2:7f:1f:
06:9a:e2:c5:50:15:bb:9c:89:46:b6:e7:15:db:21:8b:38:46:
a7:ec:a5:33:9a:5b:7e:9b:fd:ab:11:c6:e0:da:cc:75:e9:63:
f0:79:0a:2a:26:6f:1b:cb:04:86:d0:07:1b:60:1b:f4:77:2d:
8a:c5:6d:68:61:f5:2c:c5:11:97:67:b5:46:9d:c8:a3:b6:e3:
b2:8a:0d:ea:dd:05:3e:ca:99:d7:04:21:49:a1:80:80:9f:04:
7a:41:c3:1d:6e:ed:a7:76:f2:1e:48:60:b8:d0:04:6e:ad:67:
20:64:74:22:16:ec:86:31:29:02:b0:ca:e0:38:d8:12:2b:ae:
e2:2c:28:85:87:ad:34:b6:86:0d:bc:4f:c8:28:78:5f:57:c3:
c6:54:d9:bd:5b:02:8f:0f:9e:8d:c9:f4:f4:f1:48:d2:aa:b7:
7d:9e:d4:8d:47:97:ff:86:ae:ec:3e:44:24:1f:20:93:e0:ae:
da:99:f7:c3:8e:5b:ff:20:8e:3a:1f:06:45:0f:ab:a8:7f:61:
4f:8b:a9:6b:94:37:59:15:73:fd:fe:ed:10:57:b4:34:25:a3:
19:51:1c:31:ff:ec:de:0d:e5:ac:99:28:1d:27:bd:f1:c8:23:
1b:ec:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:32:52 2026 by rpki-client