Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/ELrx4Q17sWsITam7S8EZhlEpW6c.roa
File: ELrx4Q17sWsITam7S8EZhlEpW6c.roa (raw, json)
Hash identifier: mfENEikBBj3SnmLqMx+zV5kIHlMvuGZwjX1HrALHXH0=
Subject key identifier: 10:BA:F1:E1:0D:7B:B1:6B:08:4D:A9:BB:4B:C1:19:86:51:29:5B:A7
Certificate issuer: /CN=2d0eb161619b999ad2ed3115607374dbe5f4f589
Certificate serial: 019F2368571613143E4808F97B0160410AEF
Authority key identifier: 2D:0E:B1:61:61:9B:99:9A:D2:ED:31:15:60:73:74:DB:E5:F4:F5:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/ELrx4Q17sWsITam7S8EZhlEpW6c.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51061
IP address blocks: 193.110.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:57:16:13:14:3e:48:08:f9:7b:01:60:41:0a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0eb161619b999ad2ed3115607374dbe5f4f589
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10baf1e10d7bb16b084da9bb4bc1198651295ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:28:6d:7b:7d:4b:ce:98:3b:75:d9:a9:82:
9a:f2:1c:bc:b9:9a:c8:c1:46:78:90:1a:b2:58:90:
14:81:30:ec:c9:86:72:97:33:84:67:00:45:b4:a7:
a9:ef:9e:01:5c:df:0e:8c:1c:71:99:52:48:4e:85:
36:64:dc:28:18:31:9a:a0:27:ab:e6:5b:39:c7:7c:
8c:90:bf:67:84:b0:ff:4d:ce:46:dc:9d:ff:7d:dc:
f9:a1:d8:c3:3e:5a:d3:35:b6:81:51:0a:fb:7a:70:
3c:d6:79:36:0c:6c:f9:0d:5e:ec:5f:21:d4:ca:ba:
54:c7:88:64:75:f4:98:58:17:89:c2:d7:c7:0d:67:
2a:12:d0:9e:e5:b7:19:78:47:f9:ff:18:aa:d8:48:
0c:13:c9:c2:91:bb:48:c4:82:bf:4b:c6:7c:5c:0b:
13:cd:ea:b2:98:0b:b3:8e:04:b9:af:37:88:63:2a:
e1:d9:d1:c7:53:f9:1b:02:4c:2d:60:c9:47:4a:2b:
77:a8:37:26:a0:5b:11:c8:da:fb:82:51:af:e3:0e:
54:b8:e5:82:4c:3e:aa:80:ff:b1:a9:34:ee:e0:d9:
2c:ff:76:1f:bf:5a:9c:c5:5d:79:ee:13:b0:43:7c:
c7:c7:bd:3c:b8:2f:7a:4c:1f:50:9b:60:55:55:4f:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BA:F1:E1:0D:7B:B1:6B:08:4D:A9:BB:4B:C1:19:86:51:29:5B:A7
X509v3 Authority Key Identifier:
keyid:2D:0E:B1:61:61:9B:99:9A:D2:ED:31:15:60:73:74:DB:E5:F4:F5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/ELrx4Q17sWsITam7S8EZhlEpW6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.178.0/23
Signature Algorithm: sha256WithRSAEncryption
47:8e:29:c6:4f:d9:58:43:c1:c3:f5:da:21:2a:d1:b8:2a:91:
20:9c:c4:e0:9b:be:aa:57:7b:1f:a8:14:12:e9:20:8d:bf:f2:
32:fa:b2:53:f2:48:34:06:51:e8:8b:18:77:c3:6a:48:bd:42:
46:e9:c7:14:35:bb:60:10:08:6e:c6:66:db:47:e4:40:56:ae:
fd:f9:b7:95:9f:ab:1c:d5:8f:d7:c1:4e:15:15:a8:a6:d4:3d:
32:ac:1b:cd:72:76:da:0e:1b:47:78:17:a5:e5:05:6a:6a:e8:
c2:30:22:3e:88:70:de:42:bc:50:aa:b7:7c:de:1c:a7:d4:de:
4b:bb:e8:6a:a8:07:3d:c3:71:45:c2:b2:5e:4b:98:c9:c6:7c:
2a:fe:e2:b3:6b:e2:7c:4e:38:1f:d6:70:fd:58:11:bf:9f:89:
68:35:18:ab:f7:6d:ee:fe:61:c9:bb:dd:84:99:0d:c3:82:20:
b4:a8:bc:35:44:49:f8:62:f5:65:5a:7d:e3:2a:85:46:7a:fa:
f2:d7:dc:d3:bd:07:46:6c:4f:d6:32:66:9f:37:41:ff:b5:27:
f6:e7:7b:54:63:d4:a5:b3:e9:4a:bb:5a:59:26:af:15:4b:00:
5e:d9:2c:49:a6:dd:01:a3:7f:9d:35:b2:9c:8a:1d:41:08:54:
fa:7e:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:56 2026 by rpki-client