Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/LtkygBk4X3cQQeLD0MiXX0JuB7s.roa
File: LtkygBk4X3cQQeLD0MiXX0JuB7s.roa (raw, json)
Hash identifier: 0MWFfhFzi0pSQgYD8PRMkSGLrWepuSKjnzFvJ6iwO5Q=
Subject key identifier: 2E:D9:32:80:19:38:5F:77:10:41:E2:C3:D0:C8:97:5F:42:6E:07:BB
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 019DD6577553C94DB354F98299E16C49F00B
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/LtkygBk4X3cQQeLD0MiXX0JuB7s.roa
Signing time: Tue 28 Apr 2026 23:05:49 +0000
ROA not before: Tue 28 Apr 2026 23:05:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205376
IP address blocks: 185.220.148.0/24 maxlen: 24
185.220.149.0/24 maxlen: 24
185.220.150.0/24 maxlen: 24
185.220.151.0/24 maxlen: 24
194.45.71.0/24 maxlen: 24
2a0b:f840::/32 maxlen: 32
2a0b:f841::/32 maxlen: 32
2a0b:f847::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:57:75:53:c9:4d:b3:54:f9:82:99:e1:6c:49:f0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Apr 28 23:05:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ed9328019385f771041e2c3d0c8975f426e07bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:9a:5c:35:38:99:81:6b:d8:b6:24:89:8b:
ea:81:65:8e:39:2f:12:82:37:47:02:af:eb:9d:3a:
01:07:b2:ef:90:ce:71:c4:eb:4d:20:62:44:f2:ff:
e0:7f:56:93:41:dc:be:05:f5:84:52:60:f2:9e:ca:
6b:0c:7f:46:4a:dd:b2:25:6d:c0:e9:10:b8:88:e0:
86:28:f3:0d:a4:a4:24:fa:25:fb:c8:68:f5:c0:99:
d6:98:94:ac:ad:49:7a:b7:4b:f5:37:13:3d:40:54:
3e:cf:43:17:c6:a2:fd:2d:60:3a:fe:b5:0b:2a:b8:
76:18:e2:34:c1:96:57:76:0d:b5:d5:ac:64:87:8e:
e9:43:58:74:7c:86:3c:ef:14:3e:80:7d:6e:64:dc:
aa:11:7b:e3:94:0a:0b:cd:ea:8e:f2:d5:a2:47:01:
8f:da:d8:d6:7d:4c:d8:36:bb:23:04:3e:59:5e:9d:
5f:2d:a3:61:5e:5d:b6:e8:d0:09:3f:77:ef:8b:84:
49:0c:01:72:4e:68:cc:97:6a:96:fe:69:26:3e:0b:
1c:22:ac:94:d0:b3:3d:43:71:cc:e1:6e:39:32:0c:
f7:3e:16:89:ef:39:ed:6c:a8:21:2d:7f:4d:dd:57:
44:35:39:8e:f7:57:c9:e9:cc:f7:d5:96:e2:50:1e:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D9:32:80:19:38:5F:77:10:41:E2:C3:D0:C8:97:5F:42:6E:07:BB
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/LtkygBk4X3cQQeLD0MiXX0JuB7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.148.0/22
194.45.71.0/24
IPv6:
2a0b:f840::/31
2a0b:f847::/32
Signature Algorithm: sha256WithRSAEncryption
47:67:36:a0:bc:1f:91:ea:10:9d:dd:5c:38:91:05:a2:a2:d1:
7e:ec:c2:68:4e:79:68:63:e5:e9:ff:f7:ad:73:e6:42:05:e8:
07:24:91:b8:17:3b:43:8d:d2:67:69:f6:d6:bf:e1:55:da:8d:
32:f5:21:e3:fd:77:b3:fd:85:92:b7:ac:48:2f:02:c2:ae:dc:
1e:df:58:d6:76:56:fd:c2:19:91:81:52:ab:56:01:82:a8:f7:
1b:fb:73:2a:6e:b3:44:22:2f:ce:9f:09:a1:02:fd:dc:9e:d9:
58:59:26:61:64:38:64:56:51:74:7b:47:bd:4a:81:ed:47:e9:
78:43:87:b1:05:67:6c:9b:a2:4d:e8:ff:08:92:4a:b6:8e:e8:
9e:c4:06:16:4d:b7:4f:6a:7a:33:24:91:9b:22:10:50:ef:2a:
da:85:8f:4d:97:93:33:68:65:df:a5:eb:dc:95:47:4f:0b:85:
d3:d9:a6:46:39:ef:9c:27:d1:11:b7:ae:48:b2:e9:03:1d:aa:
bf:e4:ae:63:a5:28:aa:24:79:ee:0c:e9:6f:57:00:b6:b5:67:
3f:99:ab:0b:16:ed:89:a8:b7:78:89:ba:0d:92:8a:cd:38:a2:
c3:ec:e7:44:01:32:74:e3:5a:dc:08:8c:cb:19:77:e6:32:c7:
56:5e:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:17 2026 by rpki-client