Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/LETlz166RFHGtOnMtZqu-hVYTtY.roa
File: LETlz166RFHGtOnMtZqu-hVYTtY.roa (raw, json)
Hash identifier: R/HDeBwYS+y6cI45NJn8rpNKDr4lgvNm8JPFpPhGnoo=
Subject key identifier: 2C:44:E5:CF:5E:BA:44:51:C6:B4:E9:CC:B5:9A:AE:FA:15:58:4E:D6
Certificate issuer: /CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Certificate serial: 0198899E39309C97D2430DD4B0D374F9B9C0
Authority key identifier: 5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/LETlz166RFHGtOnMtZqu-hVYTtY.roa
Signing time: Fri 08 Aug 2025 12:18:24 +0000
ROA not before: Fri 08 Aug 2025 12:18:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50507
IP address blocks: 193.106.180.0/22 maxlen: 22
193.106.180.0/23 maxlen: 23
193.106.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:9e:39:30:9c:97:d2:43:0d:d4:b0:d3:74:f9:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Validity
Not Before: Aug 8 12:18:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c44e5cf5eba4451c6b4e9ccb59aaefa15584ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:5c:00:a1:21:24:b2:dc:4e:51:f6:06:11:
ac:fd:f9:2b:69:3b:5d:c5:6f:58:da:9e:d3:d9:3f:
7e:17:05:a4:5b:83:dc:c5:2c:4b:2d:d9:32:f8:44:
c7:28:0f:17:be:73:84:40:0d:d8:16:80:7e:83:7f:
cb:d8:a0:c0:20:fc:ae:93:fa:50:1d:53:1e:b2:49:
4d:16:cf:bc:26:a5:5b:69:5a:a9:19:78:a2:47:f6:
af:22:d5:a4:73:9a:ea:16:2b:05:fa:6f:ba:62:4f:
6b:11:e0:bb:df:a2:9b:13:91:b3:1b:92:ea:b4:84:
ca:a0:d2:46:b7:14:10:e9:19:6f:19:66:65:2a:5e:
dd:45:33:e5:b7:df:f7:19:1f:25:e0:3f:3e:62:96:
93:9a:e9:24:7e:00:cc:5e:a5:7f:3b:4e:15:d8:b5:
e3:8a:e7:a7:b5:ca:1e:4c:82:e8:83:f4:bc:4a:f9:
c0:ff:96:af:43:83:a6:68:83:88:44:db:cf:4a:a0:
fc:bc:f7:c5:2d:4e:5a:bd:65:26:36:86:c4:3b:e4:
51:6f:91:d4:62:ab:e5:15:46:0f:0b:b5:0b:32:a0:
c4:9a:28:7e:8a:b1:76:ed:4b:14:d0:a2:5d:d1:4a:
05:96:e0:f0:34:fd:ec:42:0a:db:29:d1:4b:31:cc:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:44:E5:CF:5E:BA:44:51:C6:B4:E9:CC:B5:9A:AE:FA:15:58:4E:D6
X509v3 Authority Key Identifier:
keyid:5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/LETlz166RFHGtOnMtZqu-hVYTtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.180.0/22
Signature Algorithm: sha256WithRSAEncryption
45:b6:21:6d:65:f6:b0:dc:e9:39:de:b9:34:bb:12:96:5b:10:
2c:94:cd:7e:8e:78:30:05:76:cf:a7:ed:ec:e4:78:bb:3f:33:
31:01:86:c9:e6:57:72:3c:ca:f5:83:11:94:7b:6f:67:02:37:
f8:59:df:14:6e:42:5f:cd:b8:e3:0b:6b:fc:9a:af:5b:24:e8:
fd:ff:46:da:0d:1c:b5:e7:b3:d1:a1:82:1a:9b:d5:d9:ca:fb:
1c:1e:ee:37:51:4a:76:59:6a:06:d3:a3:13:8b:13:59:11:09:
47:0e:ec:a4:b0:18:55:04:93:4a:7d:fa:ad:21:6b:18:23:34:
db:d6:e0:2a:2f:94:22:47:62:0e:ca:ce:59:59:86:29:8b:ed:
5c:ff:3f:89:0d:af:13:e1:a2:4a:b0:70:db:30:fa:86:c8:bf:
56:d3:5e:a5:f1:a7:fe:61:6b:a9:20:83:76:ed:10:b7:f7:a1:
25:9f:6b:32:2f:a7:64:25:5f:07:74:8d:d6:6b:8e:eb:a7:de:
3c:ba:f6:12:ad:bb:dc:73:5d:a2:fc:cb:f9:c2:f1:14:b1:78:
52:fc:a6:eb:93:ab:2f:09:7a:a6:c1:7d:8d:58:be:7e:7a:15:
82:53:60:6a:ba:29:db:36:7e:d1:d9:06:7b:ea:00:04:9e:d4:
8f:88:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:26 2025 by rpki-client