Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/lktET6WVxyM8DpbU-KtTj4-Mk9A.roa
File: lktET6WVxyM8DpbU-KtTj4-Mk9A.roa (raw, json)
Hash identifier: 5yKzDR61OuH+WT6FvPoUpM7MWfPwErr/iamCddOS1IA=
Subject key identifier: 96:4B:44:4F:A5:95:C7:23:3C:0E:96:D4:F8:AB:53:8F:8F:8C:93:D0
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 019D7B5B17F46C8E96EE8A2CF6D946B0208F
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/lktET6WVxyM8DpbU-KtTj4-Mk9A.roa
Signing time: Sat 11 Apr 2026 07:04:20 +0000
ROA not before: Sat 11 Apr 2026 07:04:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41952
IP address blocks: 185.228.206.0/24 maxlen: 24
193.32.193.0/24 maxlen: 24
193.32.194.0/24 maxlen: 24
193.32.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7b:5b:17:f4:6c:8e:96:ee:8a:2c:f6:d9:46:b0:20:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Apr 11 07:04:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=964b444fa595c7233c0e96d4f8ab538f8f8c93d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:5d:3d:db:e0:99:de:84:41:a4:e7:fc:1c:
36:a8:4e:2f:00:74:29:d9:9d:83:53:c4:2f:35:73:
59:e0:d9:45:54:85:ba:e9:7e:85:38:ab:c0:b5:14:
37:19:3e:d0:f2:74:19:9f:48:bd:e6:6a:e6:74:c9:
87:db:d3:9a:c7:93:b9:46:5b:7f:3c:e5:cf:87:a8:
31:04:14:72:9c:d1:fd:f3:40:39:dc:4b:d6:fe:58:
de:e7:66:f1:a4:a6:1a:a4:31:c1:bd:4d:e6:c9:92:
c8:0d:31:0f:83:89:15:99:65:5a:e3:ea:35:29:4b:
52:a9:1a:26:1e:a3:c9:ec:7a:6a:9e:e1:ed:ba:f8:
12:9f:c0:93:50:6a:cf:4b:72:cf:59:ab:3c:0f:50:
cd:90:77:74:97:f1:04:12:94:0d:30:df:4e:72:76:
8d:9e:5f:8c:ff:37:d4:a1:3b:c1:38:79:b4:05:45:
f3:79:3d:25:89:7c:37:15:ab:8d:af:e9:67:17:ab:
95:c6:eb:62:b4:30:5b:38:47:cd:cc:44:e1:e6:39:
7c:c9:72:c5:3d:8e:b9:e8:94:88:97:dc:6d:92:1f:
4f:1b:06:d4:bd:b3:04:8a:68:bf:a6:7e:b5:15:f6:
1a:af:0f:df:da:5d:33:a7:b8:8b:b8:28:6b:c8:c7:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:44:4F:A5:95:C7:23:3C:0E:96:D4:F8:AB:53:8F:8F:8C:93:D0
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/lktET6WVxyM8DpbU-KtTj4-Mk9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.206.0/24
193.32.193.0-193.32.195.255
Signature Algorithm: sha256WithRSAEncryption
6d:c4:ad:c4:52:1d:e9:f9:98:19:d5:c7:27:f7:41:35:06:b4:
83:38:b9:ac:52:bd:6a:ec:15:5d:48:a2:c6:17:1d:e2:0f:18:
e6:a0:4f:72:bf:1f:2b:c8:80:b1:e9:69:c3:0d:d4:3b:f7:01:
41:ab:7f:98:24:34:0d:5c:fa:d8:b8:6b:86:c1:f4:50:ce:7c:
7f:d4:52:b5:c0:77:c8:1c:b8:66:8a:93:ed:27:0d:41:9e:bc:
8e:35:c5:60:cd:ca:84:20:92:44:24:ce:c9:b6:3d:da:a0:9b:
92:e6:03:8b:32:04:36:1d:33:1a:89:0c:23:3a:2e:81:11:28:
14:b6:84:00:a8:39:4a:0e:25:33:3b:d2:df:68:01:36:72:7e:
99:93:da:d6:eb:3d:f5:70:77:9e:dd:a2:e3:c6:c3:8f:79:ae:
cb:a0:e5:91:d8:2e:28:bb:4c:7c:3e:0b:28:ab:53:a2:8d:38:
1e:35:e7:b3:6c:5f:89:7f:12:1b:b4:e0:fb:c8:b6:cf:7d:31:
24:59:a9:46:ef:dd:b0:8c:19:2c:30:c0:25:e8:b5:df:3b:16:
7b:5c:8d:77:69:1c:9e:62:ce:e7:d1:5f:cf:48:b4:10:a5:5b:
d4:e9:34:cc:6a:86:de:08:3d:54:e1:88:b8:4a:45:26:5b:c6:
9e:a7:43:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:43:19 2026 by rpki-client