Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/302FOD6NWIA3gSTuN-E8rawo4V4.roa
File: 302FOD6NWIA3gSTuN-E8rawo4V4.roa (raw, json)
Hash identifier: jx6cjg+cnJTaLOCRHU8BznRDS3ke5sDOfUq9Jr15bB4=
Subject key identifier: DF:4D:85:38:3E:8D:58:80:37:81:24:EE:37:E1:3C:AD:AC:28:E1:5E
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019D724DE441961D749D87571CE1F87F86E4
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/302FOD6NWIA3gSTuN-E8rawo4V4.roa
Signing time: Thu 09 Apr 2026 12:53:20 +0000
ROA not before: Thu 09 Apr 2026 12:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212249
IP address blocks: 93.190.15.0/24 maxlen: 24
160.20.110.0/24 maxlen: 24
160.20.111.0/24 maxlen: 24
185.85.236.0/24 maxlen: 24
185.87.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:4d:e4:41:96:1d:74:9d:87:57:1c:e1:f8:7f:86:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Apr 9 12:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df4d85383e8d5880378124ee37e13cadac28e15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:5e:be:dd:df:c7:d7:50:63:c1:e5:59:a6:
0f:74:5b:b0:20:7e:06:62:c4:4c:5a:96:ae:7a:fd:
8a:79:d5:9f:54:bc:06:7e:c0:3a:b8:8d:db:00:78:
4a:54:ad:1f:82:e7:53:84:db:65:e4:0c:cc:54:c6:
52:17:ea:17:f7:1b:31:a1:c5:07:f2:a6:95:7d:a9:
9d:eb:2e:60:05:47:15:06:c9:b5:f3:d3:1e:97:df:
03:b6:e0:d9:c4:a7:53:f9:33:d7:51:93:85:e0:5a:
13:e3:be:d8:c1:fe:4e:2e:0a:e7:88:a9:c7:63:34:
1e:48:87:6a:86:84:59:72:ca:2b:6d:93:1d:63:f8:
1d:50:7f:b6:32:b1:97:37:00:4b:10:53:86:06:ab:
3e:d2:27:42:d1:8e:58:70:33:92:7f:f3:e4:85:5a:
34:91:df:30:9e:b3:fd:89:d0:16:82:9e:ab:7e:6c:
7b:39:70:05:a2:91:a2:a4:4d:fe:1d:0a:d7:7d:13:
0b:ef:ea:c8:19:c6:60:c9:87:5a:b1:22:97:13:66:
e6:7e:1e:07:70:45:64:84:0a:9d:77:32:e1:46:21:
ba:3e:30:f8:6e:01:47:3f:20:55:ee:5d:17:c2:2d:
d5:36:ea:6c:36:71:10:86:a8:3f:8c:43:83:6e:f9:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4D:85:38:3E:8D:58:80:37:81:24:EE:37:E1:3C:AD:AC:28:E1:5E
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/302FOD6NWIA3gSTuN-E8rawo4V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.15.0/24
160.20.110.0/23
185.85.236.0/24
185.87.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:69:d8:58:cd:29:e7:89:e2:fc:c8:02:d4:ca:4d:9c:90:44:
e5:76:31:98:ee:b6:e6:88:39:f1:d4:73:70:77:1c:f8:ee:aa:
9c:3b:d2:dd:a1:c6:7f:9a:c1:b4:08:0a:06:09:6a:92:e8:dc:
0a:33:52:27:b9:a8:e2:4e:e1:9e:a0:4d:47:1a:31:69:fa:42:
42:38:db:96:d1:97:fd:f9:89:b3:6a:90:ff:5b:a3:fe:cf:04:
1a:5c:02:6c:91:0c:2a:9e:5b:1c:b4:8c:72:9f:a6:5b:8c:ef:
d2:fc:56:0f:c4:a2:12:15:3f:48:c7:d7:1e:95:fd:78:10:7c:
25:b4:90:6d:5c:6b:90:03:f1:d0:ff:95:3e:de:a1:ff:e4:e5:
eb:51:e2:d3:18:1d:96:c7:7f:a1:f2:4e:fa:af:67:c4:d4:e3:
74:0a:f2:bf:75:0d:60:04:92:d2:ba:b1:8c:be:db:b1:33:a9:
1c:eb:ac:96:ed:9d:60:fe:34:20:29:f6:b9:89:ef:9c:5a:77:
cc:ba:58:fd:7d:9b:d6:fa:5c:73:b7:e4:8a:03:47:3e:3b:08:
9d:3d:47:99:b2:ba:97:bb:c5:24:0a:44:6c:2e:5d:5c:76:3a:
29:d3:bc:01:f9:42:0c:6d:8d:dc:8b:73:5d:0e:4b:67:f7:11:
56:f1:01:f4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ1yTeRBlh10nYdXHOH4f4bkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwNDA5MTI1MzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjRkODUzODNlOGQ1ODgwMzc4MTI0ZWUzN2UxM2NhZGFjMjhlMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeBevt3fx9dQY8HlWaYPdFuwIH4G
YsRMWpauev2KedWfVLwGfsA6uI3bAHhKVK0fgudThNtl5AzMVMZSF+oX9xsxocUH
8qaVfamd6y5gBUcVBsm189Mel98DtuDZxKdT+TPXUZOF4FoT477Ywf5OLgrniKnH
YzQeSIdqhoRZcsorbZMdY/gdUH+2MrGXNwBLEFOGBqs+0idC0Y5YcDOSf/PkhVo0
kd8wnrP9idAWgp6rfmx7OXAFopGipE3+HQrXfRML7+rIGcZgyYdasSKXE2bmfh4H
cEVkhAqddzLhRiG6PjD4bgFHPyBV7l0Xwi3VNupsNnEQhqg/jEODbvlCFQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFN9NhTg+jViAN4Ek7jfhPK2sKOFeMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvMzAyRk9ENk5XSUEzZ1NUdU4tRThyYXdvNFY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXb4PAwQB
oBRuAwQAuVXsAwQAuVcbMA0GCSqGSIb3DQEBCwUAA4IBAQCiadhYzSnnieL8yALU
yk2ckETldjGY7rbmiDnx1HNwdxz47qqcO9LdocZ/msG0CAoGCWqS6NwKM1Inuaji
TuGeoE1HGjFp+kJCONuW0Zf9+YmzapD/W6P+zwQaXAJskQwqnlsctIxyn6ZbjO/S
/FYPxKISFT9Ix9celf14EHwltJBtXGuQA/HQ/5U+3qH/5OXrUeLTGB2Wx3+h8k76
r2fE1ON0CvK/dQ1gBJLSurGMvtuxM6kc66yW7Z1g/jQgKfa5ie+cWnfMulj9fZvW
+lxzt+SKA0c+OwidPUeZsrqXu8UkCkRsLl1cdjop07wB+UIMbY3ci3NdDktn9xFW
8QH0
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:50 2026 by rpki-client