Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/LefwY8gpcZ-R-tJPrykmBr0pJFk.roa
File: LefwY8gpcZ-R-tJPrykmBr0pJFk.roa (raw, json)
Hash identifier: cf3hQ7ddtb5GAFex4VifyP4EhX3vFqnUNjT44D+CIHQ=
Subject key identifier: 2D:E7:F0:63:C8:29:71:9F:91:FA:D2:4F:AF:29:26:06:BD:29:24:59
Certificate issuer: /CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
Certificate serial: 019F23685A1F4CAE2B720E431E94992BF72F
Authority key identifier: FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/LefwY8gpcZ-R-tJPrykmBr0pJFk.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.147.164.0/24 maxlen: 24
45.147.165.0/24 maxlen: 24
45.147.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5a:1f:4c:ae:2b:72:0e:43:1e:94:99:2b:f7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2de7f063c829719f91fad24faf292606bd292459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:76:f7:13:76:59:79:8b:af:97:b2:5d:6a:
ad:a9:92:12:75:2c:18:98:f6:22:6c:32:fb:1c:cf:
3e:e3:b4:ca:05:9a:92:1b:92:8b:9f:65:17:5d:f5:
7f:6a:1c:f3:0b:4f:5d:6d:c7:cd:4a:76:70:dd:f6:
e3:e3:a1:b0:3f:af:20:ae:56:cc:89:f6:66:b4:75:
33:f8:73:cc:1b:9a:05:4a:7e:db:e2:60:31:d5:1f:
31:2d:47:7a:42:f9:e1:8b:f5:c4:1c:5f:25:cb:12:
1d:3c:0f:b1:f6:97:7c:2f:07:7d:1d:18:27:e8:47:
e3:1b:1f:4c:78:e2:c3:5b:f5:b6:76:bd:34:df:92:
b6:c2:5a:91:6d:e7:7f:dc:02:24:ad:af:f0:4b:2e:
40:af:68:17:56:96:8f:98:28:8b:23:36:22:7f:f9:
c5:a1:fb:8b:36:7a:35:e0:b9:27:32:74:b5:6b:46:
fa:73:ef:32:e4:bd:8d:87:9f:9b:57:12:5a:64:a6:
54:d9:36:bc:6e:cc:4b:67:97:4f:8f:83:69:ac:b1:
7c:47:57:d1:54:91:f3:60:1f:ad:21:7d:82:3f:c6:
27:a1:e0:f2:92:3d:f6:8c:29:e0:a2:45:1d:1f:1b:
fd:4e:50:cd:6c:84:9b:29:fe:db:4b:d6:f2:9e:9f:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E7:F0:63:C8:29:71:9F:91:FA:D2:4F:AF:29:26:06:BD:29:24:59
X509v3 Authority Key Identifier:
keyid:FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/LefwY8gpcZ-R-tJPrykmBr0pJFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.164.0/23
45.147.167.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:6f:8b:13:46:76:59:d2:ca:80:f3:70:6d:10:0b:63:d8:21:
4f:ef:e5:c6:2a:c0:14:d1:02:cd:6b:f8:fc:c5:89:19:f5:1e:
75:4a:f4:61:88:06:21:42:9b:6b:5e:eb:ac:3b:51:91:8b:7a:
8a:dd:50:eb:94:59:b9:86:bc:92:00:5b:92:d5:b3:c8:d3:e8:
68:ba:3d:56:8d:37:1f:d5:7b:d0:1e:79:e0:2d:1e:2d:6f:4b:
7f:8c:35:94:00:f6:db:02:fe:4e:73:a1:af:45:43:cb:fe:89:
f5:5c:c9:8a:e9:07:13:26:b9:12:cc:ef:ab:06:6d:42:23:0e:
42:57:3c:94:5c:3d:4d:6c:48:db:19:c7:b1:fc:65:d7:b1:38:
46:77:cb:02:c9:2f:da:87:e7:af:cc:b8:d8:10:63:a1:e7:11:
7c:cc:63:04:ac:93:83:c0:3d:c9:2a:f5:02:40:1c:e7:9f:98:
e9:75:a8:70:65:ce:8c:a9:3c:80:12:d6:f8:d5:c5:77:b9:5c:
1a:a4:6b:86:b8:1d:e1:60:67:a7:2b:c3:74:3a:f9:75:92:8a:
f7:4e:27:7c:4b:02:e3:55:fc:a7:ad:61:9b:c3:62:68:69:ae:
41:f5:2f:2b:96:f6:c6:d5:c4:a3:b1:69:56:eb:c6:b2:43:45:
53:8c:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:16 2026 by rpki-client