Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ll7sTt7Q48-LlQnjsqV0WAjrDNc.roa
File: Ll7sTt7Q48-LlQnjsqV0WAjrDNc.roa (raw, json)
Hash identifier: TdSFYnWd+G0E7dw+whvCnA/+dcTXQ5s6a+B8Q86zfDo=
Subject key identifier: 2E:5E:EC:4E:DE:D0:E3:CF:8B:95:09:E3:B2:A5:74:58:08:EB:0C:D7
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019E412F5C0707A87310485FDB825673AFFA
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ll7sTt7Q48-LlQnjsqV0WAjrDNc.roa
Signing time: Tue 19 May 2026 17:01:23 +0000
ROA not before: Tue 19 May 2026 17:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 5.180.4.0/22 maxlen: 22
5.182.28.0/22 maxlen: 22
45.86.16.0/22 maxlen: 22
89.39.242.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/23 maxlen: 23
91.242.94.0/24 maxlen: 24
91.242.95.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
146.19.50.0/24 maxlen: 24
178.175.176.0/22 maxlen: 22
185.180.145.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
185.214.166.0/24 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/22 maxlen: 22
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
195.138.124.0/22 maxlen: 22
195.138.124.0/24 maxlen: 24
195.216.156.0/22 maxlen: 22
213.134.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:2f:5c:07:07:a8:73:10:48:5f:db:82:56:73:af:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 19 17:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e5eec4eded0e3cf8b9509e3b2a5745808eb0cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:3c:1c:1b:ec:9e:e4:41:af:d1:74:80:85:
c4:a3:2c:22:86:71:20:78:59:2b:3e:e0:d8:24:aa:
45:11:a8:4c:39:d9:28:95:ff:fc:57:e1:75:57:27:
38:4c:8c:04:e7:e9:56:af:50:58:30:8c:97:3b:20:
b0:f7:d2:ff:d2:fa:26:0e:8a:de:d0:fb:09:e1:52:
4f:4b:cb:13:3f:e5:cf:ad:ed:09:67:0c:51:e3:78:
ee:58:bb:43:26:00:b2:63:aa:ce:cb:a5:53:34:fa:
8b:3b:f9:15:3b:15:10:cd:bd:d3:0b:56:fa:93:a9:
2f:4e:0d:ed:71:d4:ff:35:8b:3d:48:8c:97:ad:36:
7e:0d:79:58:28:74:9b:b6:f6:0b:a5:a3:42:24:fd:
da:da:18:f8:51:da:7e:af:09:8c:07:80:b2:0e:58:
eb:72:07:28:91:25:09:c4:f0:f6:85:18:ff:64:b4:
db:c2:a5:a0:17:f5:ff:ef:4b:31:db:82:bd:5a:89:
eb:7c:a2:dc:ff:ac:4b:29:06:c8:07:4d:8b:44:f4:
23:d2:3c:47:75:83:da:fb:55:21:df:71:59:cb:66:
bb:01:2a:40:e9:8a:a9:bd:53:32:82:87:26:b2:23:
20:2e:86:5b:a2:6c:8f:b0:4d:e7:37:00:d0:d9:ee:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5E:EC:4E:DE:D0:E3:CF:8B:95:09:E3:B2:A5:74:58:08:EB:0C:D7
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ll7sTt7Q48-LlQnjsqV0WAjrDNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.4.0/22
5.182.28.0/22
45.86.16.0/22
89.39.242.0/24
91.242.72.0/22
91.242.94.0/23
91.242.103.0/24
94.231.198.0/24
146.19.50.0/24
178.175.176.0/22
185.180.145.0/24
185.212.11.0/24
185.214.166.0/24
194.50.206.0/23
195.138.103.0-195.138.107.255
195.138.112.0/24
195.138.120.0/24
195.138.122.0-195.138.127.255
195.216.156.0/22
213.134.25.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e1:17:9a:24:6e:22:ed:97:d6:5d:f2:fc:9f:44:20:46:f7:
fa:3a:e3:bc:c7:ff:97:df:6c:fc:9e:2c:89:66:8f:a1:32:d9:
83:ff:bd:a0:eb:52:f0:f4:e9:c5:3a:91:aa:93:89:ef:91:d0:
6e:d1:b3:9e:7e:06:d7:43:71:32:d2:13:46:1c:d8:21:49:8f:
07:a0:80:50:50:07:9d:18:b8:43:aa:0b:a0:1c:f4:d9:c1:02:
49:1a:ee:3b:ef:33:3d:62:17:bd:a5:ec:28:68:d9:c1:72:94:
28:37:6b:ae:f8:ba:e0:a2:c9:c4:8f:8e:9c:a0:10:7b:68:32:
61:b3:61:bf:d3:a2:e6:30:31:ee:51:41:b7:7c:d2:ed:d9:c6:
9c:51:1f:5c:ad:41:05:e3:98:5d:0a:d4:0c:f9:19:ca:96:fe:
3c:58:5c:3b:f4:29:14:3d:5c:5e:f2:4a:90:bf:6a:29:d4:af:
1e:aa:3e:8c:80:8e:bd:94:41:0b:e8:2a:cf:e5:bb:bc:78:21:
40:49:53:9e:d2:42:b9:8f:42:2e:c8:f3:c3:c0:8f:40:31:6d:
a0:d1:12:b0:f3:3c:b9:29:7d:b6:1b:69:fa:60:15:af:f4:d1:
48:19:58:1a:d4:27:a1:62:46:44:f2:fb:e4:65:a1:25:51:b0:
a9:4a:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:54 2026 by rpki-client