Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/LePh5vrzBhoNO_6lU5I-FVwrIes.roa
File: LePh5vrzBhoNO_6lU5I-FVwrIes.roa (raw, json)
Hash identifier: vYighBqDvO9MOWcU3J1pLlniKaytN1uAuJFxTtn+okE=
Subject key identifier: 2D:E3:E1:E6:FA:F3:06:1A:0D:3B:FE:A5:53:92:3E:15:5C:2B:21:EB
Certificate issuer: /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial: 019F29537837CE490AC8497AC29898AEA841
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/LePh5vrzBhoNO_6lU5I-FVwrIes.roa
Signing time: Fri 03 Jul 2026 18:52:43 +0000
ROA not before: Fri 03 Jul 2026 18:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208555
IP address blocks: 85.8.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:53:78:37:ce:49:0a:c8:49:7a:c2:98:98:ae:a8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Validity
Not Before: Jul 3 18:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2de3e1e6faf3061a0d3bfea553923e155c2b21eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:89:67:8a:e9:7b:f7:af:03:a2:41:32:fc:
e5:7a:0d:0b:ac:9d:c7:04:13:a7:68:58:91:4a:3e:
33:80:3c:a5:cf:5c:28:bf:26:42:92:75:18:dc:fb:
43:a5:dc:ae:01:89:ae:98:5b:5a:d8:56:84:fb:0d:
33:34:72:a7:a1:dd:fc:3f:10:2d:35:3c:07:10:3a:
a2:e7:31:bb:16:e4:0c:a7:9d:60:0c:18:38:ba:21:
26:dc:95:93:dc:1c:8d:b9:f6:17:6d:90:ce:52:93:
81:46:5a:f5:cf:ba:f0:b1:13:c6:df:f4:d3:0b:2d:
17:9f:4b:e4:67:18:ef:76:38:9b:b6:1b:0e:9a:52:
92:8d:2a:52:f6:35:6d:76:5a:c4:12:57:50:c6:c0:
6f:ce:43:7f:24:96:4e:0b:4a:5f:f3:ef:15:9b:bd:
a7:c2:82:6f:42:28:68:8c:5e:3b:bc:49:f5:15:9c:
56:9a:0e:49:6a:cc:4c:b7:ac:57:d8:66:d0:0c:7b:
d0:68:c8:85:d6:7c:10:e3:77:5c:b8:dd:73:db:8f:
d7:92:c5:8b:f7:6d:ae:83:f3:9c:51:a6:e4:56:f3:
3e:2a:ab:3c:a3:72:2a:a8:43:60:1f:b3:c3:2f:b1:
78:ad:c1:95:03:2e:e3:dc:9a:25:ef:dd:a2:e4:fe:
df:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:E1:E6:FA:F3:06:1A:0D:3B:FE:A5:53:92:3E:15:5C:2B:21:EB
X509v3 Authority Key Identifier:
keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/LePh5vrzBhoNO_6lU5I-FVwrIes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.230.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:fc:18:bb:2a:94:69:ff:a9:15:9f:b1:8f:da:26:31:8e:7f:
87:0f:ae:de:6d:04:a5:c9:76:e9:9c:aa:d9:89:c1:f8:83:30:
06:3c:7a:7b:db:34:d3:45:94:f4:71:13:cf:30:d7:2c:f2:f5:
db:6f:9c:5f:ee:8a:74:db:77:99:63:d1:e4:eb:f0:4d:02:13:
d5:58:c1:22:43:0a:a7:33:1b:27:11:b7:b9:a7:9d:d4:e0:7f:
8e:8d:01:72:d3:bd:1a:ff:32:a7:9e:4f:16:11:b8:09:c7:7c:
f7:87:3f:71:4c:ba:42:06:0e:41:ce:f6:67:67:a3:1e:7d:3a:
95:01:51:07:e6:54:e6:c2:97:ba:d5:49:be:10:e5:e9:26:61:
32:7b:d8:6e:e4:43:70:c9:d3:aa:63:1d:05:45:d6:6d:77:f4:
81:81:49:11:b4:fb:82:5b:cb:bc:b6:a8:d7:0f:95:ba:87:18:
62:ae:ec:37:72:77:46:9c:42:45:6f:90:52:81:db:31:48:a3:
03:42:b9:c2:7c:95:16:5d:1e:ab:f1:cd:d5:68:41:2b:db:f7:
85:66:09:1b:6d:5f:f7:22:46:d7:67:95:cb:fc:76:1f:28:22:
1d:33:4e:e0:7b:b7:7a:65:32:be:2e:44:72:a9:24:29:46:db:
10:f4:08:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:50 2026 by rpki-client