Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/LVeNKnZalJHRnwdUvjYag8QndZA.roa
File: LVeNKnZalJHRnwdUvjYag8QndZA.roa (raw, json)
Hash identifier: OAt0H0tOTo7TOS3oIN4+4fG+YRsfCnLFXm8O7oEpHFs=
Subject key identifier: 2D:57:8D:2A:76:5A:94:91:D1:9F:07:54:BE:36:1A:83:C4:27:75:90
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 019EC13BA3CC0FECF2DD7EC1F56415D1E28E
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/LVeNKnZalJHRnwdUvjYag8QndZA.roa
Signing time: Sat 13 Jun 2026 13:46:11 +0000
ROA not before: Sat 13 Jun 2026 13:46:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212171
IP address blocks: 185.69.120.0/22 maxlen: 22
185.199.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:3b:a3:cc:0f:ec:f2:dd:7e:c1:f5:64:15:d1:e2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jun 13 13:46:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d578d2a765a9491d19f0754be361a83c4277590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:16:f2:a3:04:fa:67:2c:7a:97:fb:24:fa:f9:
e1:bc:72:31:23:ad:de:a9:5f:f4:62:6d:c4:8e:d5:
1d:fa:a8:cb:b9:ab:5a:dd:0d:cd:80:b8:68:eb:f6:
a0:a2:72:b7:b1:29:23:f1:62:39:e1:d2:24:a3:c2:
be:90:8d:dd:8b:60:ce:39:00:b0:a0:79:f2:14:1d:
42:06:ec:d5:16:c3:a9:29:8c:97:e6:bb:95:01:d7:
9d:da:40:74:77:a8:cc:60:db:39:7f:e4:9a:a0:ee:
46:8b:48:0d:b1:1a:96:42:77:e9:36:54:a1:a3:37:
a0:26:cb:62:2f:cc:69:88:e1:15:2e:91:1d:12:37:
38:fa:3b:e2:cd:a1:49:67:8f:0f:7b:b2:21:7f:86:
bb:29:b7:ca:3a:c3:7a:56:7c:df:89:f4:25:c0:63:
ff:cc:fa:32:3a:7e:09:30:b2:0f:ab:9a:98:99:06:
8c:5d:e5:f4:dd:86:0c:a6:8d:78:f0:12:2e:d0:72:
d1:88:b8:bb:f6:8e:a4:af:0c:b3:75:91:00:61:cf:
70:0a:b9:20:45:e8:0f:70:e3:58:f0:0a:81:31:2e:
56:58:30:8b:c4:ea:c0:a9:b9:fe:12:63:39:d8:bd:
b6:d6:6f:b3:d9:ce:00:eb:97:9b:59:aa:3c:67:5a:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:57:8D:2A:76:5A:94:91:D1:9F:07:54:BE:36:1A:83:C4:27:75:90
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/LVeNKnZalJHRnwdUvjYag8QndZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.120.0/22
185.199.196.0/22
Signature Algorithm: sha256WithRSAEncryption
60:b2:7a:36:9d:3d:83:63:03:00:bc:c0:9d:21:34:84:b0:9a:
f5:96:e2:84:a5:11:db:fe:95:f2:d8:e2:28:26:73:00:3f:b8:
51:97:44:62:ed:a8:1c:47:92:18:ab:de:62:5c:06:6a:4f:61:
83:c6:6d:b4:4c:7a:e4:ce:99:12:5b:95:92:85:d3:28:f7:a3:
df:c5:34:7b:45:1a:6a:ba:ba:4c:64:d5:be:92:90:5d:e4:95:
40:3a:ec:f7:ed:82:54:eb:be:fe:0d:0f:f5:97:a7:fb:79:4a:
26:bd:3b:a2:87:04:a6:b7:92:13:5a:84:87:f7:2b:3b:07:9f:
61:6a:23:88:be:22:88:ce:26:8c:71:5d:45:2b:67:39:b4:c8:
3f:74:48:d2:7f:8f:03:55:63:04:29:11:d4:39:46:83:a8:cc:
4d:9f:bd:f5:d6:f6:18:9e:d8:d8:41:f5:6d:e0:78:96:36:ab:
41:bd:ae:af:3a:d6:7c:2e:a0:90:c6:60:48:3a:10:4a:34:cc:
bd:fb:47:ff:6a:57:89:c8:99:a3:d4:78:a9:80:30:c1:e2:ce:
17:2f:50:9f:6e:61:57:9e:7d:fd:bc:1e:4f:fd:5c:ba:ac:60:
ae:6b:3f:9e:6c:b7:31:83:dc:bd:86:39:3d:0c:0e:f4:13:b6:
f9:e4:e3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:18:36 2026 by rpki-client