Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LEHnDA0fef47a43mpjQxZB2fFyE.roa
File: LEHnDA0fef47a43mpjQxZB2fFyE.roa (raw, json)
Hash identifier: vjwMvzfbqFg60QLZmF12YIVs4HD3ADFnroUqpeviGNE=
Subject key identifier: 2C:41:E7:0C:0D:1F:79:FE:3B:6B:8D:E6:A6:34:31:64:1D:9F:17:21
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A176E47473A5001A1B8CB3F12C7FF0FA65
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LEHnDA0fef47a43mpjQxZB2fFyE.roa
Signing time: Mon 26 Oct 2026 06:27:25 +0000
ROA not before: Mon 26 Oct 2026 06:27:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9087
IP address blocks: 213.145.78.0/23 maxlen: 23
213.145.90.0/23 maxlen: 24
213.145.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:e4:74:73:a5:00:1a:1b:8c:b3:f1:2c:7f:f0:fa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 26 06:27:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c41e70c0d1f79fe3b6b8de6a63431641d9f1721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:2a:d7:fb:2b:95:d1:71:c6:33:37:53:30:
44:4b:7f:b9:fb:16:c5:e9:dc:6d:4c:6e:d5:cf:07:
29:37:40:41:f3:8a:f9:13:46:6c:bd:a7:ec:6e:f6:
c8:18:2b:48:c8:66:64:a4:c8:41:16:47:77:91:69:
4c:9a:28:3f:ea:e9:15:9e:40:8d:ac:18:c4:2a:8f:
99:19:65:63:8d:87:5e:58:bb:aa:98:6a:c0:80:2e:
7c:4b:b9:d4:86:78:2b:3c:a2:42:7b:56:0d:bf:96:
c3:f5:a2:f1:9b:8d:e8:28:e8:08:c9:ec:54:ba:61:
3e:4d:ac:de:74:4b:ed:05:e2:7a:59:bc:85:63:5b:
c4:f5:24:3e:a8:3f:29:b5:4d:22:cf:40:c1:20:67:
a1:75:f2:a3:35:80:2b:13:34:bb:5d:9c:01:77:38:
5d:9f:40:ff:b2:b0:bd:65:d8:1e:13:c2:0a:fa:14:
7d:37:d4:9b:54:6e:e4:28:52:3d:9a:98:07:3e:74:
39:dc:7d:03:09:a1:92:d3:15:f7:80:07:24:de:90:
fd:90:b2:6c:d3:11:5c:d6:ef:ae:d8:1b:be:a0:e9:
26:50:c6:b8:6a:e4:63:f0:c1:ea:b3:17:67:cb:ff:
d3:db:65:1a:de:79:1f:f4:ed:8a:79:93:6a:35:32:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:E7:0C:0D:1F:79:FE:3B:6B:8D:E6:A6:34:31:64:1D:9F:17:21
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LEHnDA0fef47a43mpjQxZB2fFyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.78.0/23
213.145.90.0-213.145.93.255
Signature Algorithm: sha256WithRSAEncryption
ef:44:51:5d:58:b9:8e:7a:32:9f:ec:b4:4d:7a:c8:11:fa:81:
ef:64:d3:84:39:1b:ac:a7:a5:fd:a5:43:51:67:f5:6d:37:d8:
02:1e:96:c4:91:68:51:cf:6f:ca:1c:3d:62:0c:d7:0f:f7:f9:
2e:08:ca:8e:4b:2b:14:e8:ff:aa:ec:21:4e:37:fd:18:5e:56:
17:aa:40:9b:15:6d:d6:62:c6:4f:55:90:90:23:79:53:49:54:
f8:d7:b6:4f:63:d2:65:63:4b:81:e7:77:75:fd:6e:df:f2:e5:
09:8c:9d:37:b2:9a:00:70:b6:1d:b1:e2:68:9f:36:47:ac:94:
aa:2d:30:d4:d9:70:92:7e:09:90:fb:4f:83:62:6b:20:cb:e5:
0c:92:c6:6b:7f:81:b3:58:81:4c:a3:83:0a:13:e7:86:c1:a5:
31:61:5e:d7:5c:31:e5:ed:f8:1b:39:e3:ab:72:c2:69:60:c3:
7f:15:7c:c3:7b:68:09:52:06:c0:86:47:96:1d:f1:0c:78:ca:
de:7a:7b:7f:7b:6a:97:04:7f:38:0c:44:75:a4:ba:5d:99:11:
a7:ff:9b:63:e5:e8:8f:dc:c5:74:43:4e:24:6e:bf:6e:06:f5:
e2:4c:c7:ac:39:66:c3:f1:2a:89:d8:ed:c2:e8:d7:65:28:de:
76:ba:50:13
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaF25HRzpQAaG4yz8Sx/8PplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjYxMDI2MDYyNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzQxZTcwYzBkMWY3OWZlM2I2YjhkZTZhNjM0MzE2NDFkOWYxNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGMq1/srldFxxjM3UzBES3+5+xbF
6dxtTG7VzwcpN0BB84r5E0ZsvafsbvbIGCtIyGZkpMhBFkd3kWlMmig/6ukVnkCN
rBjEKo+ZGWVjjYdeWLuqmGrAgC58S7nUhngrPKJCe1YNv5bD9aLxm43oKOgIyexU
umE+TazedEvtBeJ6WbyFY1vE9SQ+qD8ptU0iz0DBIGehdfKjNYArEzS7XZwBdzhd
n0D/srC9ZdgeE8IK+hR9N9SbVG7kKFI9mpgHPnQ53H0DCaGS0xX3gAck3pD9kLJs
0xFc1u+u2Bu+oOkmUMa4auRj8MHqsxdny//T22Ua3nkf9O2KeZNqNTIahQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCxB5wwNH3n+O2uN5qY0MWQdnxchMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvTEVIbkRBMGZlZjQ3YTQzbXBqUXhaQjJmRnlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQB1ZFOMAwD
BAHVkVoDBAHVkVwwDQYJKoZIhvcNAQELBQADggEBAO9EUV1YuY56Mp/stE16yBH6
ge9k04Q5G6ynpf2lQ1Fn9W032AIelsSRaFHPb8ocPWIM1w/3+S4Iyo5LKxTo/6rs
IU43/RheVheqQJsVbdZixk9VkJAjeVNJVPjXtk9j0mVjS4Hnd3X9bt/y5QmMnTey
mgBwth2x4mifNkeslKotMNTZcJJ+CZD7T4NiayDL5QySxmt/gbNYgUyjgwoT54bB
pTFhXtdcMeXt+Bs546tywmlgw38VfMN7aAlSBsCGR5Yd8Qx4yt56e397apcEfzgM
RHWkul2ZEaf/m2Pl6I/cxXRDTiRuv24G9eJMx6w5ZsPxKonY7cLo12Uo3na6UBM=
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:40 2026 by rpki-client