Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LE29BVj1-zCo56ZWRLx2xMY_Bfg.roa
File: LE29BVj1-zCo56ZWRLx2xMY_Bfg.roa (raw, json)
Hash identifier: xaeuQIGrE5yLraYDcY/ncGT4l4OEVDwn0nzlNvbmNsU=
Subject key identifier: 2C:4D:BD:05:58:F5:FB:30:A8:E7:A6:56:44:BC:76:C4:C6:3F:05:F8
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019DD83F705F6F1C4B30023EB7D2BC60EA66
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LE29BVj1-zCo56ZWRLx2xMY_Bfg.roa
Signing time: Wed 29 Apr 2026 07:58:49 +0000
ROA not before: Wed 29 Apr 2026 07:58:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51202
IP address blocks: 31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
95.175.150.0/24 maxlen: 24
109.175.211.0/24 maxlen: 24
185.79.19.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
194.117.225.0/24 maxlen: 24
195.234.126.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a0c:2500::/29 maxlen: 48
2a0c:2501::/32 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
2a14:6781:305::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:3f:70:5f:6f:1c:4b:30:02:3e:b7:d2:bc:60:ea:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 29 07:58:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c4dbd0558f5fb30a8e7a65644bc76c4c63f05f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:39:d0:d7:39:89:7d:3b:2d:08:b0:7f:c3:
92:5d:96:88:91:0f:3d:dc:51:27:3e:3d:51:e0:82:
1c:38:6f:9c:2a:5b:eb:cb:b4:9b:6e:8e:67:cd:4f:
c2:7e:9e:bf:f2:3d:be:47:99:9c:8e:04:91:7e:2d:
9d:d3:e6:2b:8b:49:a0:e6:0a:ec:e6:22:cf:d1:df:
cd:ce:ad:e2:d4:44:3c:79:af:85:74:9e:9b:24:cf:
a6:0d:36:19:cd:6d:68:d8:44:68:11:47:eb:0c:46:
9f:76:41:52:63:bb:17:14:9d:54:9a:aa:67:50:d7:
56:7c:23:1d:95:4f:8f:68:83:94:42:8c:0b:46:ba:
41:57:2c:96:87:4b:4c:c9:d1:83:e7:a9:3e:04:b4:
85:7e:be:25:4d:7d:d3:fc:f0:ba:1f:a6:97:43:d7:
b5:b9:34:9d:9e:d8:e6:d9:d8:10:4a:b0:e3:dd:04:
0f:c5:50:70:a1:61:6e:11:c2:88:1e:bf:71:2f:0a:
3d:1f:03:43:93:7d:b9:fe:8c:1c:4d:9a:08:2b:c1:
40:c7:4e:68:70:41:69:12:6d:f9:05:19:2e:55:c9:
f4:bc:5e:3a:ab:c7:d8:0c:f7:82:50:3c:6a:e8:e2:
1e:98:a0:3f:e0:5a:86:82:cc:fa:86:ac:f5:30:45:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4D:BD:05:58:F5:FB:30:A8:E7:A6:56:44:BC:76:C4:C6:3F:05:F8
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/LE29BVj1-zCo56ZWRLx2xMY_Bfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
62.169.152.0/24
89.36.32.0/24
89.36.35.0/24
95.175.150.0/24
109.175.211.0/24
185.79.19.0/24
185.121.132.0/23
185.121.135.0/24
185.144.70.0/23
194.117.225.0/24
195.234.126.0/24
212.232.18.0/23
IPv6:
2a0c:2500::/29
2a14:6781::/32
Signature Algorithm: sha256WithRSAEncryption
97:16:72:ab:fc:e1:26:d9:6a:5f:49:ca:51:0d:b6:3a:1d:5e:
08:3d:4e:5a:9d:d3:09:8a:2c:5d:1d:d8:ba:87:8c:79:fa:11:
61:20:27:be:6d:60:1e:13:21:ec:b2:46:b8:db:37:24:6e:c0:
db:cf:fe:18:2b:01:c6:c5:8f:ab:78:63:65:30:09:a2:b3:68:
f1:fb:8a:0f:b1:7a:1c:64:82:04:5f:7f:43:4e:5f:86:4a:28:
43:a9:e2:93:ac:d4:15:a8:d6:99:8d:de:39:61:d9:37:89:8a:
b0:7c:c4:b7:5d:ee:11:25:82:18:e8:6e:3a:ba:d7:e3:c4:6a:
f8:04:55:5d:fe:c1:f7:ab:06:b6:94:23:52:2d:38:a2:ac:c5:
8c:25:5d:ce:15:50:c9:18:ca:9e:ff:b9:7b:2e:bc:93:bc:00:
48:39:9a:17:5b:67:3e:bc:8d:36:5c:2d:cc:11:c2:26:95:b0:
65:76:be:2b:ce:95:76:8f:97:b0:bc:67:30:74:ca:52:9d:0b:
6e:8f:53:96:89:ad:61:ef:6c:3c:77:62:48:77:60:7c:f1:bc:
20:4d:1b:1a:c8:60:80:c8:2e:c6:1e:44:4d:10:96:6f:78:09:
5d:49:e2:62:ea:cc:ea:b0:2b:99:6a:79:26:c1:de:e3:03:55:
12:99:44:6f
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAZ3YP3BfbxxLMAI+t9K8YOpmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjYwNDI5MDc1ODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzRkYmQwNTU4ZjVmYjMwYThlN2E2NTY0NGJjNzZjNGM2M2YwNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttk50Nc5iX07LQiwf8OSXZaIkQ89
3FEnPj1R4IIcOG+cKlvry7Sbbo5nzU/Cfp6/8j2+R5mcjgSRfi2d0+Yri0mg5grs
5iLP0d/Nzq3i1EQ8ea+FdJ6bJM+mDTYZzW1o2ERoEUfrDEafdkFSY7sXFJ1Umqpn
UNdWfCMdlU+PaIOUQowLRrpBVyyWh0tMydGD56k+BLSFfr4lTX3T/PC6H6aXQ9e1
uTSdntjm2dgQSrDj3QQPxVBwoWFuEcKIHr9xLwo9HwNDk325/owcTZoIK8FAx05o
cEFpEm35BRkuVcn0vF46q8fYDPeCUDxq6OIemKA/4FqGgsz6hqz1MEWEXwIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFCxNvQVY9fswqOemVkS8dsTGPwX4MB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvTEUyOUJWajEtekNvNTZaV1JMeDJ4TVlfQmZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBUBAIAATBOAwQAHxkLAwQA
PqmYAwQAWSQgAwQAWSQjAwQAX6+WAwQAba/TAwQAuU8TAwQBuXmEAwQAuXmHAwQB
uZBGAwQAwnXhAwQAw+p+AwQB1OgSMBQEAgACMA4DBQMqDCUAAwUAKhRngTANBgkq
hkiG9w0BAQsFAAOCAQEAlxZyq/zhJtlqX0nKUQ22Oh1eCD1OWp3TCYosXR3YuoeM
efoRYSAnvm1gHhMh7LJGuNs3JG7A28/+GCsBxsWPq3hjZTAJorNo8fuKD7F6HGSC
BF9/Q05fhkooQ6nik6zUFajWmY3eOWHZN4mKsHzEt13uESWCGOhuOrrX48Rq+ARV
Xf7B96sGtpQjUi04oqzFjCVdzhVQyRjKnv+5ey68k7wASDmaF1tnPryNNlwtzBHC
JpWwZXa+K86Vdo+XsLxnMHTKUp0Lbo9TlomtYe9sPHdiSHdgfPG8IE0bGshggMgu
xh5ETRCWb3gJXUniYurM6rArmWp5JsHe4wNVEplEbw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:47 2026 by rpki-client