Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/LCUAonXkhp0LjwZ81kJI3nt9TWc.roa
File: LCUAonXkhp0LjwZ81kJI3nt9TWc.roa (raw, json)
Hash identifier: lLu444r01FkRkZ0S2d0cVE1xsfEc9dwcMAXGpGbWkPU=
Subject key identifier: 2C:25:00:A2:75:E4:86:9D:0B:8F:06:7C:D6:42:48:DE:7B:7D:4D:67
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019DD3985705B24777EAA5F71B30087C585F
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/LCUAonXkhp0LjwZ81kJI3nt9TWc.roa
Signing time: Tue 28 Apr 2026 10:17:49 +0000
ROA not before: Tue 28 Apr 2026 10:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211750
IP address blocks: 45.128.157.0/24 maxlen: 24
45.128.158.0/24 maxlen: 24
185.228.81.0/24 maxlen: 24
185.228.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:98:57:05:b2:47:77:ea:a5:f7:1b:30:08:7c:58:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Apr 28 10:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c2500a275e4869d0b8f067cd64248de7b7d4d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:7a:bb:13:e0:ab:28:57:fe:4e:41:d0:0f:
ba:0b:bc:b8:ba:5e:fa:66:24:fa:86:65:c8:9c:df:
43:ce:38:60:e5:8c:e3:aa:99:af:30:e8:0e:88:35:
b6:6f:cf:f7:23:24:fb:cb:2f:0e:f3:48:cd:3c:2d:
81:97:d2:f9:bc:31:92:2a:52:8b:dc:ca:8d:74:a1:
2f:13:92:64:10:80:8a:8c:f3:d5:88:e6:d9:74:0a:
0c:9e:24:22:9c:df:0d:e4:45:29:96:23:4a:ee:80:
0c:42:84:df:ea:dd:d0:e3:9e:cf:8c:40:32:24:db:
4c:25:f9:0d:99:9f:ba:d7:8d:45:e6:71:95:fd:fb:
e2:78:ed:3a:b8:4f:93:57:83:e3:80:2a:23:3d:60:
df:b6:7d:6d:16:b8:32:44:01:4d:96:72:93:f2:9e:
9d:4f:e3:3c:37:69:03:23:d0:12:ba:b2:8e:cf:4e:
7b:da:17:67:60:14:0b:e9:73:32:a3:f3:d4:e4:0b:
2d:29:43:18:17:23:db:d2:c8:7b:ae:bb:2a:69:db:
8b:43:8d:8b:c8:fb:7c:41:1e:d5:a5:c7:1f:33:4d:
63:20:ce:90:b6:2b:62:6e:f6:d6:a5:87:10:8f:a5:
9b:6c:d6:32:33:e6:a8:cb:92:26:51:31:85:be:38:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:25:00:A2:75:E4:86:9D:0B:8F:06:7C:D6:42:48:DE:7B:7D:4D:67
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/LCUAonXkhp0LjwZ81kJI3nt9TWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.157.0-45.128.158.255
185.228.81.0-185.228.82.255
Signature Algorithm: sha256WithRSAEncryption
06:6a:8d:29:a4:63:99:96:3b:89:47:f3:fa:3a:1d:fb:af:54:
e4:39:ff:45:9e:c5:78:bd:55:a0:4a:76:47:ee:82:c5:10:98:
30:3a:31:a0:3c:55:7e:ed:58:90:66:c6:38:88:51:df:08:fd:
c5:6c:f1:92:74:78:2f:d8:9f:fb:3a:e2:8a:47:83:0a:37:b1:
5c:e3:dd:7d:d2:23:a0:c4:b9:af:cc:5f:9a:dc:17:16:d9:eb:
c8:75:77:1b:75:d3:5a:83:3c:33:4f:ba:94:44:d7:f5:95:22:
c5:64:b7:9b:bb:36:a7:fe:b4:69:d4:db:35:73:42:42:57:41:
c3:2b:f2:0d:13:1f:04:08:16:0e:27:70:be:ff:68:53:e4:87:
f7:39:50:dc:30:4f:4e:47:c7:cc:e2:55:ac:ed:f8:a7:4b:8a:
a7:0a:4c:1d:08:7d:24:3f:58:1e:e8:fd:14:86:20:27:a7:37:
cc:ae:56:a2:1e:fd:5b:3e:89:2a:b2:e2:8c:b7:a0:a6:aa:90:
7c:01:2b:ae:a9:6e:8b:3e:aa:02:60:91:22:b7:0d:08:24:b6:
d3:b8:2a:e0:52:e3:90:21:49:c1:50:54:11:11:ca:03:90:51:
3f:f3:6a:55:fd:25:1d:fc:7b:7a:ad:59:02:91:5b:b8:36:22:
d2:36:b2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:08 2026 by rpki-client