Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/eLiTOvSCkz0wHCLbQ0IYtYpd9HU.roa
File: eLiTOvSCkz0wHCLbQ0IYtYpd9HU.roa (raw, json)
Hash identifier: PFZyuXUgNZT+4EgAIJXkCTlQ1m78WzBU1C8nh8NhSe4=
Subject key identifier: 78:B8:93:3A:F4:82:93:3D:30:1C:22:DB:43:42:18:B5:8A:5D:F4:75
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01A060E4284B2E89C5C8C32FAC4E5A1C356D
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/eLiTOvSCkz0wHCLbQ0IYtYpd9HU.roa
Signing time: Wed 02 Sep 2026 06:52:40 +0000
ROA not before: Wed 02 Sep 2026 06:52:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49332
IP address blocks: 5.57.64.0/21 maxlen: 22
80.243.144.0/20 maxlen: 21
86.111.64.0/20 maxlen: 21
86.111.84.0/23 maxlen: 24
91.212.203.0/24 maxlen: 24
176.32.0.0/21 maxlen: 22
176.39.64.0/19 maxlen: 20
176.39.64.0/20 maxlen: 21
176.39.128.0/20 maxlen: 20
188.190.32.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:e4:28:4b:2e:89:c5:c8:c3:2f:ac:4e:5a:1c:35:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Sep 2 06:52:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78b8933af482933d301c22db434218b58a5df475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:79:d2:7b:51:eb:8d:6a:71:82:20:90:20:
f7:c6:55:5f:87:37:9f:9e:b1:3d:67:f6:8c:b7:4c:
1b:62:72:22:35:e9:dc:1a:56:a3:e2:d7:81:2b:84:
2a:a3:80:89:48:3e:08:06:1e:ae:b4:9a:d4:bc:78:
e0:eb:0d:60:13:62:08:05:23:f0:94:a2:3e:2e:c1:
68:fe:3f:27:a9:f9:09:69:0a:ae:77:66:39:51:b5:
bb:e5:19:dc:11:1c:64:27:f6:ab:7b:93:77:cf:45:
81:cb:a7:01:f1:e1:56:20:40:83:fe:a2:31:17:c9:
fc:b6:d7:72:b1:c2:7a:c1:33:31:a4:3b:22:10:f1:
1e:bc:63:69:9e:7b:9e:3d:6d:44:53:c3:09:cc:73:
c8:57:fb:f7:62:84:ae:dd:ba:1f:30:d0:7a:ca:7b:
62:90:0f:b4:1d:0f:25:07:f5:d7:3a:6e:fa:24:6e:
8a:c7:ec:cc:64:1e:69:8c:a6:a4:67:6b:84:5b:fe:
bf:e0:8c:fb:ab:6c:22:a8:20:71:df:4e:b8:61:92:
00:b7:f0:2c:5a:47:4b:1a:5e:4b:48:cc:4a:9e:6a:
9f:33:bf:a2:76:09:6e:c7:57:2c:34:8e:0a:9d:0a:
ed:3e:a1:3a:70:28:5a:7b:4d:f2:a3:27:19:45:28:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B8:93:3A:F4:82:93:3D:30:1C:22:DB:43:42:18:B5:8A:5D:F4:75
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/eLiTOvSCkz0wHCLbQ0IYtYpd9HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.64.0/21
80.243.144.0/20
86.111.64.0/20
86.111.84.0/23
91.212.203.0/24
176.32.0.0/21
176.39.64.0/19
176.39.128.0/20
188.190.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:8b:d0:c9:ee:f1:9d:c4:78:54:0e:f0:d7:a6:63:8c:60:53:
69:77:54:ac:2e:19:01:16:38:d6:eb:1b:2e:85:33:14:ea:9b:
cd:8d:24:cd:9e:ff:3a:34:a3:9b:bc:75:25:bc:f7:76:dc:d5:
7a:97:52:41:ce:aa:b2:77:66:79:28:76:08:ae:8e:fb:f9:27:
5a:7c:a8:e5:9f:4b:bf:ce:e4:d4:f3:82:9f:e4:fc:35:a7:71:
bb:a9:17:44:7f:eb:e3:90:55:54:29:43:35:10:40:2e:3d:a9:
db:d1:79:ed:b2:35:49:86:ee:45:8e:c9:a7:fc:a6:6f:60:45:
3b:90:b7:f3:f0:bc:cb:8c:7f:6c:72:e6:bc:1e:54:61:19:6d:
f7:fb:53:83:c4:dd:e5:a9:83:6b:1e:c4:d3:63:df:57:50:f5:
ec:19:4a:ff:f4:51:7b:d7:a7:d1:d0:85:e0:b1:a0:51:8a:cb:
9e:06:d7:a1:5c:29:75:d0:38:bf:59:2e:32:5c:c3:ad:71:22:
c7:27:c9:e6:91:34:b1:0f:26:0e:cd:0b:05:bf:d9:dc:0e:75:
a2:65:00:4b:18:67:21:b5:1a:ae:20:a4:45:dd:ed:3d:45:86:
a0:1a:03:5b:0e:c1:f1:e3:77:44:4b:c9:ad:1f:49:bd:5a:ab:
2f:63:6f:5f
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAaBg5ChLLonFyMMvrE5aHDVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm
NWI3MTQwHhcNMjYwOTAyMDY1MjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGI4OTMzYWY0ODI5MzNkMzAxYzIyZGI0MzQyMThiNThhNWRmNDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6550ntR641qcYIgkCD3xlVfhzef
nrE9Z/aMt0wbYnIiNencGlaj4teBK4Qqo4CJSD4IBh6utJrUvHjg6w1gE2IIBSPw
lKI+LsFo/j8nqfkJaQqud2Y5UbW75RncERxkJ/are5N3z0WBy6cB8eFWIECD/qIx
F8n8ttdyscJ6wTMxpDsiEPEevGNpnnuePW1EU8MJzHPIV/v3YoSu3bofMNB6ynti
kA+0HQ8lB/XXOm76JG6Kx+zMZB5pjKakZ2uEW/6/4Iz7q2wiqCBx3064YZIAt/As
WkdLGl5LSMxKnmqfM7+idglux1csNI4KnQrtPqE6cChae03yoycZRShNCwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFHi4kzr0gpM9MBwi20NCGLWKXfR1MB8GA1UdIwQY
MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx
LTEzODM5NjQwYTYwNC8xL2VMaVRPdlNDa3owd0hDTGJRMElZdFlwZDlIVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQxLTEzODM5NjQwYTYw
NC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUHAQcBAf8EQDA+MDwEAgABMDYDBAMFOUAD
BARQ85ADBARWb0ADBAFWb1QDBABb1MsDBAOwIAADBAWwJ0ADBASwJ4ADBAW8viAw
DQYJKoZIhvcNAQELBQADggEBAKGL0Mnu8Z3EeFQO8NemY4xgU2l3VKwuGQEWONbr
Gy6FMxTqm82NJM2e/zo0o5u8dSW893bc1XqXUkHOqrJ3Znkodgiujvv5J1p8qOWf
S7/O5NTzgp/k/DWncbupF0R/6+OQVVQpQzUQQC49qdvRee2yNUmG7kWOyaf8pm9g
RTuQt/PwvMuMf2xy5rweVGEZbff7U4PE3eWpg2sexNNj31dQ9ewZSv/0UXvXp9HQ
heCxoFGKy54G16FcKXXQOL9ZLjJcw61xIscnyeaRNLEPJg7NCwW/2dwOdaJlAEsY
ZyG1Gq4gpEXd7T1FhqAaA1sOwfHjd0RLya0fSb1aqy9jb18=
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:59:22 2026 by rpki-client