Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/LeQ3hObwwgpbJJGcKzLsHqEGLVo.roa
File: LeQ3hObwwgpbJJGcKzLsHqEGLVo.roa (raw, json)
Hash identifier: v9/GkM02Xeyz1OUCXNYSBaAnPEbgD0Y89kH3sO1Lbco=
Subject key identifier: 2D:E4:37:84:E6:F0:C2:0A:5B:24:91:9C:2B:32:EC:1E:A1:06:2D:5A
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 019F93EEE37D317199DDCEDF877E28378BF3
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/LeQ3hObwwgpbJJGcKzLsHqEGLVo.roa
Signing time: Fri 24 Jul 2026 11:42:14 +0000
ROA not before: Fri 24 Jul 2026 11:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43066
IP address blocks: 93.184.128.0/20 maxlen: 20
93.184.128.0/21 maxlen: 21
93.184.128.0/24 maxlen: 24
93.184.129.0/24 maxlen: 24
93.184.130.0/24 maxlen: 24
93.184.131.0/24 maxlen: 24
93.184.132.0/23 maxlen: 23
93.184.132.0/24 maxlen: 24
93.184.133.0/24 maxlen: 24
93.184.134.0/24 maxlen: 24
93.184.135.0/24 maxlen: 24
93.184.136.0/21 maxlen: 21
93.184.136.0/24 maxlen: 24
93.184.137.0/24 maxlen: 24
93.184.138.0/24 maxlen: 24
93.184.139.0/24 maxlen: 24
93.184.140.0/24 maxlen: 24
93.184.141.0/24 maxlen: 24
93.184.142.0/24 maxlen: 24
93.184.143.0/24 maxlen: 24
2a05:d880::/30 maxlen: 30
2a05:d880::/48 maxlen: 48
2a05:d880:1::/48 maxlen: 48
2a05:d880:2::/48 maxlen: 48
2a05:d880:3::/48 maxlen: 48
2a05:d880:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ee:e3:7d:31:71:99:dd:ce:df:87:7e:28:37:8b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Jul 24 11:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2de43784e6f0c20a5b24919c2b32ec1ea1062d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:23:c7:98:eb:b0:c1:1f:f6:48:1c:24:97:
83:02:42:b1:e4:da:49:df:8a:67:00:3e:93:c1:5d:
8f:b7:41:ac:39:9c:f3:ad:b8:f4:8e:5f:67:1e:4b:
78:6e:96:0f:e9:0b:ab:97:6a:fb:78:ae:a2:85:50:
c5:e2:7d:16:23:ff:08:d1:61:79:bb:64:33:04:40:
32:72:ac:c4:86:f1:8f:56:38:97:46:0d:0e:a0:3b:
73:45:6c:2c:5a:b1:c1:f0:78:67:60:52:05:6b:2c:
69:87:28:e2:db:f6:96:03:4c:d1:75:fb:7e:1a:37:
71:9f:c7:22:ac:1e:f7:93:de:6d:eb:ba:ce:07:d0:
08:54:6e:36:98:22:73:20:ab:93:b5:3e:99:62:f2:
0a:73:9c:19:e0:13:9a:02:bd:d5:cc:9c:dd:77:fc:
63:99:5a:2e:e5:3e:30:fb:eb:c4:f4:ae:58:f1:3e:
72:c2:70:62:c6:39:81:6b:ba:a2:db:6a:67:ca:60:
8b:14:f1:99:1c:74:5d:f5:76:4f:08:c3:fe:9e:8d:
23:6a:a1:f5:95:f5:e3:fa:90:9b:32:87:9d:da:47:
e7:31:f5:b7:22:b1:22:48:14:23:b4:67:db:75:19:
08:2d:f3:eb:ce:6b:18:7a:17:12:87:4a:ee:af:00:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E4:37:84:E6:F0:C2:0A:5B:24:91:9C:2B:32:EC:1E:A1:06:2D:5A
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/LeQ3hObwwgpbJJGcKzLsHqEGLVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.184.128.0/20
IPv6:
2a05:d880::/30
Signature Algorithm: sha256WithRSAEncryption
0f:e9:2a:d5:e7:f0:2c:8c:1d:1e:2e:b9:7b:3c:7b:61:b3:de:
1c:d9:e4:95:c9:0b:e2:da:56:13:5d:f7:d1:a9:d5:0f:d1:35:
20:84:45:10:41:cd:57:80:0c:ff:55:18:65:e3:6e:4d:40:f3:
13:80:4e:d3:13:69:35:cb:57:a4:d9:ea:c0:dd:43:f9:dc:fb:
5c:05:a4:29:e0:5d:26:db:9c:b6:dc:c3:b8:13:82:d6:5b:0c:
af:67:c1:60:75:32:76:ad:27:9d:94:2a:2c:41:0a:74:67:c4:
df:29:f6:24:53:0b:45:b1:48:45:1a:3b:db:29:8a:04:60:0e:
63:1a:30:03:eb:19:68:3a:8e:74:94:c3:bb:92:f8:e4:ea:9c:
92:95:37:11:8c:78:7b:59:2f:93:19:cf:ba:cb:50:8b:ee:26:
1d:a8:ba:78:93:69:a8:a0:7c:32:8b:31:a3:53:1a:b8:a3:9b:
13:4c:f7:54:0e:26:ab:99:e1:22:54:2f:8b:67:b0:86:14:32:
bc:61:27:46:7d:fa:c6:c9:f0:da:80:a6:02:2e:a0:3a:5e:77:
11:48:77:e0:48:f6:dd:ee:53:38:09:0b:be:32:f7:a6:09:6a:
ac:76:e6:a9:e7:12:2c:c0:1c:92:1f:65:15:27:e5:9b:50:7a:
1c:4c:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:08 2026 by rpki-client