Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ltLsBfGQArgFTwEJnxowuwYINmQ.roa
File: ltLsBfGQArgFTwEJnxowuwYINmQ.roa (raw, json)
Hash identifier: L78GTriIbxxRLspWQQO5fmxXcJp+UgccdnRCJHJ1oFM=
Subject key identifier: 96:D2:EC:05:F1:90:02:B8:05:4F:01:09:9F:1A:30:BB:06:08:36:64
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019D6D12DAD0045E346BF7288FA0A17278AF
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ltLsBfGQArgFTwEJnxowuwYINmQ.roa
Signing time: Wed 08 Apr 2026 12:30:45 +0000
ROA not before: Wed 08 Apr 2026 12:30:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208258
IP address blocks: 45.141.204.0/23 maxlen: 24
45.144.244.0/23 maxlen: 24
45.144.246.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.156.0/24 maxlen: 24
45.151.158.0/24 maxlen: 24
45.151.159.0/24 maxlen: 24
45.154.238.0/24 maxlen: 24
45.154.239.0/24 maxlen: 24
45.159.192.0/23 maxlen: 23
45.159.194.0/24 maxlen: 24
109.206.248.0/22 maxlen: 22
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
195.26.6.0/24 maxlen: 24
195.26.7.0/24 maxlen: 24
195.88.226.0/23 maxlen: 23
213.185.86.0/23 maxlen: 23
213.185.88.0/22 maxlen: 22
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:7::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0b:3c40:25::/48 maxlen: 48
2a0b:3c40:f1::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:12:da:d0:04:5e:34:6b:f7:28:8f:a0:a1:72:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Apr 8 12:30:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96d2ec05f19002b8054f01099f1a30bb06083664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:0b:29:ba:a5:18:fa:7a:04:b7:7e:6f:5f:
e0:74:04:33:82:18:27:45:4a:93:e3:97:d8:72:4c:
6d:bd:61:de:37:16:4c:fb:84:bf:84:60:5e:d5:1a:
eb:60:cc:cc:dc:d2:73:9a:51:d3:04:f9:e1:02:e0:
9b:99:a2:81:19:46:5a:9f:8c:85:80:26:8e:37:eb:
6c:62:47:bf:c2:19:9d:d4:14:c9:f4:00:8d:7b:b3:
f7:05:38:a5:d0:01:c4:92:b0:59:f9:90:8d:6f:b8:
4a:f8:04:a8:65:eb:43:33:a4:69:35:89:3d:c2:f4:
96:cf:37:8b:ad:52:77:9e:a6:d2:7e:63:4d:78:46:
c8:f6:f8:7b:cd:af:ea:bd:a9:fe:b3:aa:3e:67:e8:
03:0b:78:78:f3:2e:91:3a:61:8c:2f:a1:91:27:21:
31:5b:90:11:6d:db:49:12:8b:93:66:0c:f0:95:97:
1b:da:5d:95:dd:1e:65:b9:11:a4:4a:3d:f2:15:25:
09:ea:7f:f8:d3:ed:81:73:75:3a:41:7d:a3:f7:ef:
63:22:2d:ab:d8:fc:45:87:01:f3:8a:a1:18:03:d3:
32:b3:f6:af:11:93:8b:32:3a:b5:0c:4e:79:52:07:
db:0a:a3:57:00:16:9b:67:04:9a:87:3f:ae:e1:a5:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D2:EC:05:F1:90:02:B8:05:4F:01:09:9F:1A:30:BB:06:08:36:64
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ltLsBfGQArgFTwEJnxowuwYINmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.204.0/23
45.144.244.0-45.144.246.255
45.151.156.0/22
45.154.238.0/23
45.159.192.0-45.159.194.255
109.206.248.0/22
185.208.208.0-185.208.210.255
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
194.146.48.0/24
195.26.6.0/23
195.88.226.0/23
213.185.86.0-213.185.91.255
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:7::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/47
2a0b:3c40:25::/48
2a0b:3c40:f1::/48
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
16:96:ea:67:fb:b9:2f:02:f6:3a:5b:f4:32:4e:1d:f0:54:c1:
3a:a7:a7:a8:78:81:90:4e:2f:01:b3:ca:42:77:ea:b8:7a:98:
2b:e4:31:83:a1:b7:25:e4:c3:1b:d7:c4:a9:b0:f4:2f:9c:bd:
6b:61:9b:36:9e:5a:3a:28:da:1f:ce:75:24:0e:09:99:a6:80:
a9:a4:49:0d:65:02:4f:d0:83:62:bd:fb:25:f2:85:f0:5d:55:
a0:ac:8b:ec:2d:dc:bf:67:14:f9:69:77:b1:13:e3:dd:76:95:
88:5d:d6:10:a5:5b:68:08:d1:42:c2:c3:73:b9:72:6a:3f:5c:
90:4a:47:55:f9:f0:49:2c:ea:af:4e:97:12:ea:e6:f1:c5:1f:
00:4a:5b:d4:87:ce:d6:4a:70:2e:8f:bb:ec:67:a0:e5:74:62:
d8:ac:92:c3:11:14:e5:9b:44:e5:3a:16:fc:ae:b9:c2:c1:36:
82:04:6c:94:ea:5c:bb:de:a2:57:f5:a2:9b:c1:5b:5a:f5:da:
55:79:74:d2:93:68:f6:65:23:51:c7:51:cc:24:01:49:21:90:
43:5a:d0:e7:09:1f:8d:02:d9:af:29:5e:ab:3d:7d:f2:2a:ae:
65:f7:fa:a8:89:01:e4:37:2f:dd:ba:5e:c6:45:51:15:ca:00:
c4:ac:fd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:24 2026 by rpki-client