Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KuME14rByfBQ9KhepX6_nqj4Ylo.roa
File: KuME14rByfBQ9KhepX6_nqj4Ylo.roa (raw, json)
Hash identifier: MoO6a+GTnNJm8wDObqXafhuus/oWua527WThP/mTmaI=
Subject key identifier: 2A:E3:04:D7:8A:C1:C9:F0:50:F4:A8:5E:A5:7E:BF:9E:A8:F8:62:5A
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019D67E79F02DB826DB3C82980775F778065
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KuME14rByfBQ9KhepX6_nqj4Ylo.roa
Signing time: Tue 07 Apr 2026 12:25:25 +0000
ROA not before: Tue 07 Apr 2026 12:25:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15924
IP address blocks: 93.190.15.0/24 maxlen: 24
160.20.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:e7:9f:02:db:82:6d:b3:c8:29:80:77:5f:77:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Apr 7 12:25:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ae304d78ac1c9f050f4a85ea57ebf9ea8f8625a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:dd:dc:35:f4:06:6f:84:29:75:c9:fd:99:
b4:14:19:82:b4:b8:dd:de:69:cd:77:17:5e:1e:d9:
e5:9e:6d:a4:a1:54:34:2c:c6:3d:c3:9b:83:f6:7a:
42:45:4e:06:5d:6e:6b:54:0c:b9:1e:44:cd:7b:d3:
0f:be:7a:74:ab:a8:72:b2:1b:84:1d:c1:4c:11:d5:
3f:34:7c:30:d8:e1:eb:47:df:63:85:6f:3c:70:5d:
2d:26:9c:48:36:10:5d:33:df:66:72:8c:2c:38:cf:
5d:38:6a:fd:76:cd:0a:b4:66:7a:aa:0d:57:da:a6:
65:06:b5:89:55:b3:bf:ee:c5:7d:b9:66:9d:cd:4b:
c5:96:c1:f3:84:c1:56:79:40:f1:5e:98:30:48:6b:
ac:89:63:bc:d1:c2:ff:ae:7a:b2:f4:2c:74:b3:8c:
a7:35:d2:c6:1d:f1:8a:39:44:ee:39:38:d2:0d:3c:
1e:b7:c7:93:f0:16:61:bd:0a:91:bd:2b:9e:d9:2b:
4f:28:3c:e1:77:0c:30:a8:3c:13:15:da:77:5e:f2:
cd:88:58:74:3e:bb:3d:28:5b:fd:2c:37:a0:24:ad:
48:bd:ab:f9:0b:f4:73:17:70:96:62:fb:db:f2:35:
c0:16:63:e8:8a:8b:03:60:ea:6d:87:7c:c2:2e:33:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E3:04:D7:8A:C1:C9:F0:50:F4:A8:5E:A5:7E:BF:9E:A8:F8:62:5A
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KuME14rByfBQ9KhepX6_nqj4Ylo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.15.0/24
160.20.110.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e6:b2:60:3c:38:35:77:dc:c1:2f:53:d7:c5:bd:44:41:2e:
2e:0b:7f:87:75:0a:30:13:4e:94:50:f9:f1:24:78:28:f0:5d:
33:26:33:86:37:0d:11:30:89:bd:8f:6b:04:20:c1:7b:00:0b:
a0:ef:f1:50:34:90:38:e7:e9:cd:06:38:8d:c4:49:94:8c:30:
8e:58:0e:8b:8b:ea:99:53:92:2c:07:42:69:32:4d:a1:06:8c:
94:2d:c2:49:e5:ea:30:00:ee:b2:da:f2:c9:00:91:89:89:56:
15:4f:f1:f3:68:30:14:0a:38:71:65:85:b7:26:a5:ba:ba:2a:
4d:c5:d4:c1:bc:ee:4e:e0:c0:a3:f6:51:1d:72:26:85:94:41:
ce:88:1d:6e:36:4a:7b:2e:e9:d1:bf:08:1e:3f:74:62:25:b7:
f1:5b:d7:cb:54:e4:bd:38:e6:39:46:f1:bc:d0:89:dd:6f:41:
37:d1:4d:3f:e3:4a:e3:6c:f3:f1:6c:41:d1:3e:1d:67:22:81:
f2:70:6f:02:ba:0f:f6:60:41:e8:17:9d:ea:f4:0f:12:75:c2:
da:87:16:76:6b:73:4d:f9:60:c6:51:31:19:27:4b:54:db:01:
ee:5a:42:2b:e6:9b:d3:51:bd:de:09:7b:59:4c:f1:7e:16:17:
33:2e:e9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:25 2026 by rpki-client