Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/LHN1BnUSyqOFuhPoPwti-ZVElTA.roa
File: LHN1BnUSyqOFuhPoPwti-ZVElTA.roa (raw, json)
Hash identifier: QIWaWaWmcZOj30j5Z5yhhvWrhJu25QWzZTT3P56bHVE=
Subject key identifier: 2C:73:75:06:75:12:CA:A3:85:BA:13:E8:3F:0B:62:F9:95:44:95:30
Certificate issuer: /CN=1e5b830c7e36e74f365e19a8de27d10ccc494e47
Certificate serial: 019F2368B9D44D573340DF12E59C7135912D
Authority key identifier: 1E:5B:83:0C:7E:36:E7:4F:36:5E:19:A8:DE:27:D1:0C:CC:49:4E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/LHN1BnUSyqOFuhPoPwti-ZVElTA.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211651
IP address blocks: 185.251.69.0/24 maxlen: 24
2a13:1700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b9:d4:4d:57:33:40:df:12:e5:9c:71:35:91:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b830c7e36e74f365e19a8de27d10ccc494e47
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c7375067512caa385ba13e83f0b62f995449530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:37:fd:fd:80:b7:28:8f:ad:c4:f8:f2:59:de:
58:93:a2:84:ae:95:c8:fa:e9:d7:21:e9:7c:ac:20:
5f:13:7e:f5:84:1c:24:35:32:ec:9f:e2:23:28:e0:
8f:c3:32:c9:74:46:34:35:d3:72:62:e6:9f:31:3c:
c6:2e:9b:59:1c:94:c6:8c:f4:9c:a1:80:a8:78:fd:
b1:45:f8:5e:fd:08:3a:ed:73:52:01:b1:7d:d1:3c:
80:37:d6:6e:79:c1:10:98:7b:fc:54:a7:8d:e5:55:
97:39:c7:2d:ac:44:ff:57:f6:64:89:5b:b3:8d:ac:
7d:d4:f0:c4:77:18:2b:41:a6:8b:c6:28:0b:7a:e9:
bf:5a:47:ff:7b:23:8f:6a:06:fe:01:49:51:65:b2:
d3:01:24:61:58:7d:a7:20:b0:ce:3a:22:4f:00:57:
70:30:dc:28:fd:6c:f2:78:dc:8d:4f:12:ff:fc:51:
82:99:93:6d:ab:43:c1:60:a7:c2:d8:3e:ef:39:39:
01:5f:67:2b:1d:e8:f4:97:68:b3:22:bd:b1:93:37:
16:03:a8:4c:0d:70:0b:7c:0a:61:dc:5d:a4:c5:3c:
f3:01:7b:8c:99:8c:5a:0f:ee:e4:5a:ee:0f:bc:27:
47:9a:e5:6e:02:b9:d8:7c:2e:fd:d2:c9:b4:81:2a:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:75:06:75:12:CA:A3:85:BA:13:E8:3F:0B:62:F9:95:44:95:30
X509v3 Authority Key Identifier:
keyid:1E:5B:83:0C:7E:36:E7:4F:36:5E:19:A8:DE:27:D1:0C:CC:49:4E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HluDDH425082Xhmo3ifRDMxJTkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/LHN1BnUSyqOFuhPoPwti-ZVElTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/HluDDH425082Xhmo3ifRDMxJTkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.69.0/24
IPv6:
2a13:1700::/29
Signature Algorithm: sha256WithRSAEncryption
0b:3e:78:d2:4e:cf:14:df:05:b5:17:ad:61:5a:37:1e:32:c6:
bb:0e:3d:93:1d:05:8f:f8:05:59:bb:48:31:a4:3f:d4:df:e6:
19:1b:7f:de:af:4a:6f:5c:31:da:48:5b:56:92:53:7f:91:26:
e0:c6:d1:2b:de:09:a5:9d:31:59:24:ed:bc:25:da:62:05:cf:
75:b4:c0:b5:5e:7e:73:a9:cf:05:78:91:cc:f1:89:d4:62:25:
87:c2:fa:24:ed:c7:5c:7a:f8:26:bc:bf:22:f2:7a:fe:5e:31:
8d:aa:06:6a:36:7d:d3:77:66:fa:b7:f1:53:5c:3e:ca:3f:80:
dc:42:d1:55:4b:21:7f:21:b3:01:78:05:0d:a8:21:96:fa:59:
9a:bc:25:51:d0:1c:11:a1:04:f9:2a:ca:37:9e:60:a1:48:82:
3b:81:b8:e5:d5:e3:d1:2c:bf:4d:64:d9:0e:28:c0:73:a7:4e:
b5:0b:e9:43:48:f9:a6:c2:9a:5a:41:51:68:08:0a:38:e9:47:
d2:92:83:5f:6d:bd:f7:f0:99:8f:2d:9f:19:e4:ea:80:aa:bf:
b4:32:65:09:97:92:9e:2c:f5:74:14:c2:eb:7d:71:5a:0b:0a:
a0:80:cf:ed:ed:09:f0:30:a7:3c:e0:50:02:b3:76:17:44:40:
3b:6c:9f:eb
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaLnUTVczQN8S5ZxxNZEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWI4MzBjN2UzNmU3NGYzNjVlMTlhOGRlMjdkMTBjY2M0
OTRlNDcwHhcNMjYwNzAyMTUxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzczNzUwNjc1MTJjYWEzODViYTEzZTgzZjBiNjJmOTk1NDQ5NTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Tf9/YC3KI+txPjyWd5Yk6KErpXI
+unXIel8rCBfE371hBwkNTLsn+IjKOCPwzLJdEY0NdNyYuafMTzGLptZHJTGjPSc
oYCoeP2xRfhe/Qg67XNSAbF90TyAN9ZuecEQmHv8VKeN5VWXOcctrET/V/ZkiVuz
jax91PDEdxgrQaaLxigLeum/Wkf/eyOPagb+AUlRZbLTASRhWH2nILDOOiJPAFdw
MNwo/WzyeNyNTxL//FGCmZNtq0PBYKfC2D7vOTkBX2crHej0l2izIr2xkzcWA6hM
DXALfAph3F2kxTzzAXuMmYxaD+7kWu4PvCdHmuVuArnYfC790sm0gSpZTwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCxzdQZ1EsqjhboT6D8LYvmVRJUwMB8GA1UdIwQY
MBaAFB5bgwx+NudPNl4ZqN4n0QzMSU5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGx1RERINDI1MDgyWGhtbzNpZlJETXhKVGtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wYmVhMzMtYmI0MC00YmQxLTk3MjQt
ZjY0YzcwZjRkNDQ1LzEvTEhOMUJuVVN5cU9GdWhQb1B3dGktWlZFbFRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wYmVhMzMtYmI0MC00YmQxLTk3MjQtZjY0YzcwZjRkNDQ1
LzEvSGx1RERINDI1MDgyWGhtbzNpZlJETXhKVGtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuftFMA0E
AgACMAcDBQMqExcAMA0GCSqGSIb3DQEBCwUAA4IBAQALPnjSTs8U3wW1F61hWjce
Msa7Dj2THQWP+AVZu0gxpD/U3+YZG3/er0pvXDHaSFtWklN/kSbgxtEr3gmlnTFZ
JO28JdpiBc91tMC1Xn5zqc8FeJHM8YnUYiWHwvok7cdcevgmvL8i8nr+XjGNqgZq
Nn3Td2b6t/FTXD7KP4DcQtFVSyF/IbMBeAUNqCGW+lmavCVR0BwRoQT5Kso3nmCh
SII7gbjl1ePRLL9NZNkOKMBzp061C+lDSPmmwppaQVFoCAo46UfSkoNfbb338JmP
LZ8Z5OqAqr+0MmUJl5KeLPV0FMLrfXFaCwqggM/t7QnwMKc84FACs3YXREA7bJ/r
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:50 2026 by rpki-client