Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/W68hFODp_YtpWmt1oMmh6ym8JE4.roa
File: W68hFODp_YtpWmt1oMmh6ym8JE4.roa (raw, json)
Hash identifier: kfWSRnQ/EP4hGIaCz20/BrHw2/sY7DyFe4rlnpfCVKM=
Subject key identifier: 5B:AF:21:14:E0:E9:FD:8B:69:5A:6B:75:A0:C9:A1:EB:29:BC:24:4E
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019F2ED737753FD5AFF326AFEF5FABAEC9A0
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/W68hFODp_YtpWmt1oMmh6ym8JE4.roa
Signing time: Sat 04 Jul 2026 20:34:44 +0000
ROA not before: Sat 04 Jul 2026 20:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 93.190.13.0/24 maxlen: 24
185.85.191.0/24 maxlen: 24
185.141.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:d7:37:75:3f:d5:af:f3:26:af:ef:5f:ab:ae:c9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 4 20:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5baf2114e0e9fd8b695a6b75a0c9a1eb29bc244e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:c2:5c:34:f1:24:1a:66:12:8d:1f:15:42:
e5:95:5b:18:f6:3e:26:a4:5d:23:06:fc:b3:f8:1d:
0d:91:93:2c:0f:de:c9:75:60:1b:84:2a:0a:4a:7f:
36:55:76:44:dc:59:1d:78:1d:7c:bb:86:0e:a7:7b:
94:1d:6f:cc:d5:b8:6d:49:29:2d:50:64:4f:99:38:
e7:70:f3:97:e1:83:3b:77:8b:c9:07:38:20:96:d4:
81:25:16:2c:0c:c5:a7:df:91:f8:d6:97:16:b0:83:
97:d3:23:00:6d:ab:1f:69:35:25:98:93:72:35:65:
43:f6:60:d8:9a:5c:5e:96:a1:ac:b3:6d:62:5a:4e:
48:70:17:fc:d9:b4:3c:f3:27:4d:e0:2a:8c:7d:ed:
45:5f:b8:9c:1e:ba:55:04:04:0a:ce:87:92:2b:16:
da:93:75:19:96:9c:43:91:a6:60:6e:de:ee:9f:1d:
0b:a6:f7:37:2e:b9:6c:12:bf:ee:65:64:58:5b:41:
2b:c6:87:56:fe:0f:e9:62:68:1f:26:4a:e3:79:1b:
9e:86:5d:81:88:1b:1c:a4:04:6e:27:d1:23:a0:e8:
47:7b:2a:c8:9f:37:7f:44:fe:c1:b9:48:8b:a1:dd:
75:e6:d6:4e:3c:17:05:9c:2a:e4:4d:b5:dd:a1:d8:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AF:21:14:E0:E9:FD:8B:69:5A:6B:75:A0:C9:A1:EB:29:BC:24:4E
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/W68hFODp_YtpWmt1oMmh6ym8JE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.13.0/24
185.85.191.0/24
185.141.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:25:d6:ce:b7:0c:81:71:01:20:80:58:1e:42:b2:18:43:19:
55:a1:6f:e6:0f:70:f0:7f:b9:5d:1a:91:25:f1:22:b6:30:b7:
17:aa:f8:40:92:21:81:a5:10:53:e8:72:24:2c:16:d4:e6:f0:
66:28:eb:4d:d4:3a:79:19:f6:5c:47:c6:3d:f1:b9:62:4f:0c:
80:07:ed:d7:a1:66:3c:bf:e5:32:13:55:ca:38:0f:86:e9:52:
75:b5:63:3a:23:96:a5:98:e5:bf:63:60:96:88:ab:fe:1c:94:
97:88:4e:97:bd:50:4f:61:75:cf:5b:9b:bc:5e:0b:4d:94:73:
25:d4:9a:e3:67:a8:32:8f:60:64:e7:18:b5:ae:cb:cd:d3:4b:
38:6b:ac:19:ad:11:62:eb:40:65:42:3f:e4:39:bb:5e:bf:0b:
ad:33:f3:e4:f3:16:75:91:16:3b:bf:9b:c3:d9:0b:16:30:03:
e4:e9:d8:dd:d8:88:16:a1:5e:42:cb:89:89:65:02:39:cc:33:
9b:04:33:76:29:98:ca:d1:b0:a9:27:26:bc:31:0c:db:04:20:
19:14:c1:03:a2:22:68:bd:7d:81:71:6f:a4:5a:05:fe:2f:cb:
58:23:b0:2b:fc:6d:77:4d:5e:3f:ab:35:a4:39:67:96:a0:9e:
28:7c:dc:e2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8u1zd1P9Wv8yav71+rrsmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwNzA0MjAzNDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmFmMjExNGUwZTlmZDhiNjk1YTZiNzVhMGM5YTFlYjI5YmMyNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTLCXDTxJBpmEo0fFULllVsY9j4m
pF0jBvyz+B0NkZMsD97JdWAbhCoKSn82VXZE3FkdeB18u4YOp3uUHW/M1bhtSSkt
UGRPmTjncPOX4YM7d4vJBzggltSBJRYsDMWn35H41pcWsIOX0yMAbasfaTUlmJNy
NWVD9mDYmlxelqGss21iWk5IcBf82bQ88ydN4CqMfe1FX7icHrpVBAQKzoeSKxba
k3UZlpxDkaZgbt7unx0Lpvc3LrlsEr/uZWRYW0ErxodW/g/pYmgfJkrjeRuehl2B
iBscpARuJ9EjoOhHeyrInzd/RP7BuUiLod115tZOPBcFnCrkTbXdodjRGwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFuvIRTg6f2LaVprdaDJoespvCROMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvVzY4aEZPRHBfWXRwV210MW9NbWg2eW04SkU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXb4NAwQA
uVW/AwQAuY0jMA0GCSqGSIb3DQEBCwUAA4IBAQB+JdbOtwyBcQEggFgeQrIYQxlV
oW/mD3Dwf7ldGpEl8SK2MLcXqvhAkiGBpRBT6HIkLBbU5vBmKOtN1Dp5GfZcR8Y9
8bliTwyAB+3XoWY8v+UyE1XKOA+G6VJ1tWM6I5almOW/Y2CWiKv+HJSXiE6XvVBP
YXXPW5u8XgtNlHMl1JrjZ6gyj2Bk5xi1rsvN00s4a6wZrRFi60BlQj/kObtevwut
M/Pk8xZ1kRY7v5vD2QsWMAPk6djd2IgWoV5Cy4mJZQI5zDObBDN2KZjK0bCpJya8
MQzbBCAZFMEDoiJovX2BcW+kWgX+L8tYI7Ar/G13TV4/qzWkOWeWoJ4ofNzi
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:18 2026 by rpki-client