Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/ELATsGohvpc6joSTJ_uIEE11SGA.roa
File: ELATsGohvpc6joSTJ_uIEE11SGA.roa (raw, json)
Hash identifier: O4g7t59TqivpoQ3oXC0ailYoqVlSZksB9bjaxrIerds=
Subject key identifier: 10:B0:13:B0:6A:21:BE:97:3A:8E:84:93:27:FB:88:10:4D:75:48:60
Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial: 0199E80D70C131AE78AE94932E9AFD10DFF0
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/ELATsGohvpc6joSTJ_uIEE11SGA.roa
Signing time: Wed 15 Oct 2025 13:26:58 +0000
ROA not before: Wed 15 Oct 2025 13:26:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25400
IP address blocks: 193.160.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:0d:70:c1:31:ae:78:ae:94:93:2e:9a:fd:10:df:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Validity
Not Before: Oct 15 13:26:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10b013b06a21be973a8e849327fb88104d754860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:5e:dd:ed:c0:4a:34:a9:23:31:43:07:e6:
95:70:45:23:1e:5f:f0:a7:a2:a3:60:7c:43:26:44:
4a:f6:29:d9:d4:e8:0c:28:7d:66:53:62:f1:35:ee:
93:5d:4d:33:f5:04:cd:86:5c:ea:15:93:f4:f9:39:
eb:e7:68:cf:47:75:f4:7a:76:9b:7f:b7:13:b2:da:
5e:e2:69:d3:df:a4:2d:34:ea:3c:cd:17:f1:10:10:
5d:76:a2:c1:24:9f:9d:a2:20:0d:c2:4b:b8:03:ba:
e6:86:86:87:71:28:86:40:8e:fc:7e:05:cf:1c:66:
e1:3a:a7:59:27:9d:05:73:a4:be:60:df:f3:ad:fa:
aa:53:b1:95:be:d2:4c:4a:ea:43:50:0c:7f:6e:41:
38:10:5e:fd:fe:74:f4:08:22:33:8b:df:04:39:9f:
45:62:8c:ce:dc:de:fd:10:62:32:f0:3c:9d:31:8e:
36:46:02:df:e9:1c:e5:61:06:9b:97:56:65:23:01:
22:b3:c9:07:29:77:22:f9:5b:e9:84:7d:bf:6a:4c:
a6:f5:6b:a1:47:7e:18:05:74:fb:f6:27:67:58:dd:
59:bf:b2:0e:4a:47:92:a6:bd:2c:1a:db:f7:ef:7e:
e6:ff:39:5d:29:58:2d:e7:19:4a:7c:fa:4e:b0:b3:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B0:13:B0:6A:21:BE:97:3A:8E:84:93:27:FB:88:10:4D:75:48:60
X509v3 Authority Key Identifier:
keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/ELATsGohvpc6joSTJ_uIEE11SGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.40.0/21
Signature Algorithm: sha256WithRSAEncryption
21:71:d8:60:3f:4b:34:d1:be:e8:04:57:1c:01:ac:94:85:0a:
cf:96:f0:cd:b4:ed:9c:55:66:e7:48:04:47:34:52:75:74:41:
a1:e4:27:fc:a0:39:b3:36:16:b8:cb:04:2a:6d:45:09:a1:86:
e9:1d:d1:f2:09:c7:07:70:51:36:6b:d3:8b:0d:88:ce:56:47:
ec:45:10:d9:9d:5d:c7:b1:e5:0d:6a:63:95:c4:7b:3e:ae:b5:
b4:3c:e4:33:4f:2c:6f:03:1e:81:40:e6:8a:3e:97:97:8b:d5:
47:d4:cc:f7:15:ca:5c:55:98:fc:4a:b8:f7:6f:bc:9b:42:5c:
a1:5f:4b:61:78:4d:f9:18:0a:05:0f:c9:e2:db:d7:1c:00:0b:
0e:9e:a2:14:7d:38:13:df:7e:9c:cb:94:b4:44:08:32:90:ac:
42:3e:ca:5d:b1:47:3d:7e:04:20:6c:af:26:2e:9e:cf:92:b7:
44:27:e5:99:07:d9:29:21:e8:4c:ce:b7:ed:b7:3a:71:73:5e:
2d:19:76:15:20:4c:31:20:d1:2f:2c:fb:f6:cb:ac:84:a9:ed:
3c:3f:68:bf:3f:26:7f:97:6e:55:45:a9:b6:12:43:ef:0d:3e:
36:ca:a4:2e:98:c3:30:a7:4a:39:60:c3:a1:84:09:f6:8f:db:
11:a2:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:29 2025 by rpki-client