Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/eLf2PNo_5vK_VHEbjYh7W7ViLhY.roa
File: eLf2PNo_5vK_VHEbjYh7W7ViLhY.roa (raw, json)
Hash identifier: vqZiZfzkFrhyEpCX6lNDnwvb7zavt8Bk0AvSCsetKBg=
Subject key identifier: 78:B7:F6:3C:DA:3F:E6:F2:BF:54:71:1B:8D:88:7B:5B:B5:62:2E:16
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019DB534C25D3FE19F77E60957CF5A9BE06D
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/eLf2PNo_5vK_VHEbjYh7W7ViLhY.roa
Signing time: Wed 22 Apr 2026 12:40:26 +0000
ROA not before: Wed 22 Apr 2026 12:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214365
IP address blocks: 87.232.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:34:c2:5d:3f:e1:9f:77:e6:09:57:cf:5a:9b:e0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 22 12:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78b7f63cda3fe6f2bf54711b8d887b5bb5622e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:cc:8a:f1:df:71:17:be:92:aa:0d:2d:78:
7a:34:88:1e:e8:52:bc:82:cf:70:18:07:e4:9f:15:
53:9c:eb:75:3f:3a:46:86:fd:7d:9d:6d:47:8b:36:
28:e2:1d:51:65:f6:34:50:dc:dd:27:4f:be:f9:c2:
8a:28:56:7c:75:c9:a7:84:bd:a3:1b:0a:f4:66:9d:
d8:a4:3b:5a:18:e3:e5:99:c6:23:be:15:23:d2:47:
e2:ea:53:18:59:91:81:3f:3c:9a:99:16:e8:9d:c3:
09:0d:97:e3:79:8c:ab:29:1b:fa:7e:e9:62:75:33:
64:a8:79:86:f5:85:42:25:6c:36:df:53:90:6b:ee:
cc:88:de:e4:75:c2:1f:94:af:c5:5e:54:c7:ec:d5:
db:15:3b:bc:a5:be:01:64:0b:07:a2:4e:ca:4b:ba:
cd:66:9d:7b:c7:91:f5:37:64:b3:4b:dc:8f:6a:ac:
d8:e3:76:19:70:55:f0:a4:7a:45:68:da:7a:6d:84:
9d:56:a7:a6:98:d7:ce:1f:2a:9a:c4:03:61:0a:e3:
9a:2b:2f:81:6f:fe:ec:5b:ef:1a:cc:85:3f:85:09:
3f:fa:f0:45:4d:9d:c1:9b:d6:9e:79:bd:3a:2f:68:
44:ac:c9:77:5d:73:9c:d5:cd:37:1a:0e:fa:24:38:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B7:F6:3C:DA:3F:E6:F2:BF:54:71:1B:8D:88:7B:5B:B5:62:2E:16
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/eLf2PNo_5vK_VHEbjYh7W7ViLhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:72:a1:38:c1:c7:98:c7:ee:9e:62:cc:87:74:b9:9d:f8:15:
c1:0e:78:77:c2:a3:8a:19:89:2c:4a:15:f0:be:f3:04:67:cd:
2d:38:89:04:7c:de:79:a6:4b:83:e4:86:7c:24:67:b2:c5:77:
f0:22:15:d6:a6:69:11:0b:13:76:5b:4c:fd:18:51:13:68:eb:
8c:61:31:a3:2d:9b:da:3c:f7:ea:59:ee:bd:88:c1:6b:ce:a0:
fa:fc:53:0a:92:84:08:ea:24:2e:2c:9c:7d:1d:dd:d6:6d:f5:
f6:51:e3:ce:12:3d:81:31:c2:d3:aa:fb:6f:79:f9:b3:9e:0b:
2a:7b:8c:d8:a4:94:0a:3f:ef:36:43:4f:6e:62:ca:d3:29:f7:
2a:79:57:3c:c2:35:9c:21:25:e6:a8:48:d4:6e:ce:f4:b8:e6:
ec:93:1d:a3:9d:98:32:54:7d:85:80:33:a9:18:ea:bc:ad:ff:
2a:d1:ad:4e:9d:e4:ed:cc:0a:2a:8d:8e:33:bf:a2:a6:13:98:
57:49:7f:db:56:47:00:1c:1b:8c:0d:60:ce:e5:21:88:5a:cc:
cd:1a:dc:c4:fb:1d:af:9f:3d:ab:eb:a1:68:6d:de:ea:7a:2e:
27:e1:ef:ea:de:2e:44:aa:35:cb:c5:a1:3a:1c:7f:2c:32:5c:
0c:6c:d2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:45:09 2026 by rpki-client