Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/EbX7N4kHuDXm0ug317aboa-Elyk.roa
File: EbX7N4kHuDXm0ug317aboa-Elyk.roa (raw, json)
Hash identifier: T2hYz7BsiNZAW/oKFsyjXx5vn7Ad21wTFDpKdq1SP6Q=
Subject key identifier: 11:B5:FB:37:89:07:B8:35:E6:D2:E8:37:D7:B6:9B:A1:AF:84:97:29
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019CC26A85A12C9864B9397F83C9DC2F3543
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/EbX7N4kHuDXm0ug317aboa-Elyk.roa
Signing time: Fri 06 Mar 2026 09:11:26 +0000
ROA not before: Fri 06 Mar 2026 09:11:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5631
IP address blocks: 45.150.140.0/22 maxlen: 22
79.99.88.0/22 maxlen: 22
79.173.128.0/18 maxlen: 18
79.173.128.0/19 maxlen: 19
79.173.128.0/20 maxlen: 20
79.173.128.0/21 maxlen: 21
79.173.136.0/21 maxlen: 21
79.173.144.0/21 maxlen: 21
79.173.152.0/21 maxlen: 21
79.173.160.0/19 maxlen: 19
79.173.160.0/21 maxlen: 21
79.173.168.0/21 maxlen: 21
79.173.176.0/21 maxlen: 21
79.173.184.0/21 maxlen: 21
80.252.120.0/22 maxlen: 22
83.143.224.0/21 maxlen: 21
83.143.224.0/22 maxlen: 22
83.143.228.0/22 maxlen: 22
103.110.208.0/22 maxlen: 22
109.224.248.0/21 maxlen: 21
150.251.160.0/20 maxlen: 20
162.255.208.0/21 maxlen: 21
185.108.168.0/22 maxlen: 22
185.205.172.0/22 maxlen: 22
193.178.54.0/23 maxlen: 23
193.178.112.0/23 maxlen: 23
195.167.128.0/20 maxlen: 20
195.167.128.0/21 maxlen: 21
195.167.136.0/21 maxlen: 21
195.167.138.0/24 maxlen: 24
195.167.176.0/20 maxlen: 20
195.167.176.0/21 maxlen: 21
195.167.181.0/24 maxlen: 24
195.167.182.0/24 maxlen: 24
195.167.184.0/21 maxlen: 21
195.167.184.0/24 maxlen: 24
195.167.186.0/24 maxlen: 24
195.167.187.0/24 maxlen: 24
195.167.189.0/24 maxlen: 24
209.42.4.0/22 maxlen: 22
209.42.8.0/21 maxlen: 21
2a00:5840::/32 maxlen: 32
2a02:890::/32 maxlen: 32
2a06:e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:6a:85:a1:2c:98:64:b9:39:7f:83:c9:dc:2f:35:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Mar 6 09:11:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11b5fb378907b835e6d2e837d7b69ba1af849729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:8f:31:84:e1:7a:6a:b1:d8:ab:14:c2:3a:
02:d4:26:2c:cc:89:3e:57:75:b5:7e:51:8c:84:6f:
15:43:18:cf:53:e1:68:b1:ac:bc:75:57:9f:61:14:
fd:f7:51:d6:8c:76:9e:ed:bc:91:4e:15:d6:b9:d9:
f6:13:60:9e:51:fd:dd:8f:55:e6:4b:5b:66:56:2d:
f9:d4:13:1b:24:7d:91:37:67:21:de:59:25:ea:dc:
e6:88:24:0a:81:5a:16:03:b4:47:4e:00:f6:4d:11:
6d:d8:b0:c7:0b:c1:3e:6f:a4:b9:08:dd:ba:34:e1:
2e:af:c2:7b:43:d8:df:f9:d1:b9:64:3e:7b:74:06:
e6:aa:39:af:8c:78:3b:df:1e:3f:16:69:72:36:6a:
2e:ab:9d:bf:6b:b7:35:fa:39:1f:8d:46:0e:11:f8:
da:21:2c:25:fe:6f:9b:c8:68:2d:a4:32:c3:86:e8:
f9:37:0c:ce:42:67:4a:cf:c3:1f:fb:b2:fd:2d:36:
8a:60:cf:95:99:ca:5d:00:e5:4c:1d:e8:53:db:9b:
a5:53:19:eb:08:c5:45:30:f5:b7:13:86:94:ce:9c:
1d:66:54:71:cb:4f:17:45:a9:5d:52:ea:29:54:95:
91:e5:a9:a8:82:be:dd:bf:d4:48:e7:16:6f:cb:cf:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B5:FB:37:89:07:B8:35:E6:D2:E8:37:D7:B6:9B:A1:AF:84:97:29
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/EbX7N4kHuDXm0ug317aboa-Elyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
79.99.88.0/22
79.173.128.0/18
80.252.120.0/22
83.143.224.0/21
103.110.208.0/22
109.224.248.0/21
150.251.160.0/20
162.255.208.0/21
185.108.168.0/22
185.205.172.0/22
193.178.54.0/23
193.178.112.0/23
195.167.128.0/20
195.167.176.0/20
209.42.4.0-209.42.15.255
IPv6:
2a00:5840::/32
2a02:890::/32
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
28:55:96:11:db:e7:24:1d:cf:2d:62:04:92:8f:81:9e:2c:5f:
d4:70:ad:11:61:21:3b:02:92:17:97:55:cb:39:04:a2:e5:4b:
b7:4f:e9:3f:dc:a8:95:ca:00:14:4f:c5:91:ff:e3:b4:3d:0c:
9d:c9:bc:e0:30:23:25:77:f8:9b:35:6f:56:57:39:79:e8:42:
13:9e:46:a7:4d:d8:f7:ab:63:84:f5:53:1c:17:8f:53:4d:67:
a8:1d:e2:2d:12:f1:bf:8a:f8:6b:4c:43:8c:2e:05:e8:d6:fb:
37:79:d1:e9:38:73:22:1d:1a:43:e1:19:4a:de:84:38:0e:12:
d7:f3:e0:82:a7:20:3d:ca:de:32:42:75:46:56:d4:a6:c7:d8:
8c:7d:6e:64:3c:92:c9:b4:c1:f7:50:a7:fe:26:2f:41:2e:d1:
35:a7:66:85:29:96:9a:e9:2c:27:71:ec:2d:92:df:60:ab:e8:
7d:38:b0:b1:50:24:f2:71:0d:a7:f5:3c:09:de:45:7e:4b:66:
f0:5f:85:5a:6b:b7:fc:5b:2d:ef:5b:c5:77:10:3f:7d:0b:03:
8f:d7:24:85:f2:7c:2a:12:7f:76:ee:37:30:6a:75:2e:f1:93:
bb:7d:f3:5e:ec:04:a0:fc:dc:38:96:2d:c0:8f:9d:47:02:75:
05:cf:2c:bb
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgISAZzCaoWhLJhkuTl/g8ncLzVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjYwMzA2MDkxMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWI1ZmIzNzg5MDdiODM1ZTZkMmU4MzdkN2I2OWJhMWFmODQ5NzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCmPMYThemqx2KsUwjoC1CYszIk+
V3W1flGMhG8VQxjPU+Fosay8dVefYRT991HWjHae7byRThXWudn2E2CeUf3dj1Xm
S1tmVi351BMbJH2RN2ch3lkl6tzmiCQKgVoWA7RHTgD2TRFt2LDHC8E+b6S5CN26
NOEur8J7Q9jf+dG5ZD57dAbmqjmvjHg73x4/FmlyNmouq52/a7c1+jkfjUYOEfja
ISwl/m+byGgtpDLDhuj5NwzOQmdKz8Mf+7L9LTaKYM+VmcpdAOVMHehT25ulUxnr
CMVFMPW3E4aUzpwdZlRxy08XRaldUuopVJWR5amogr7dv9RI5xZvy8+zXwIDAQAB
o4ICizCCAocwHQYDVR0OBBYEFBG1+zeJB7g15tLoN9e2m6GvhJcpMB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEvRWJYN040a0h1RFhtMHVnMzE3YWJvYS1FbHlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTBuBAIAATBoAwQCLZaM
AwQCT2NYAwQGT62AAwQCUPx4AwQDU4/gAwQCZ27QAwQDbeD4AwQElvugAwQDov/Q
AwQCuWyoAwQCuc2sAwQBwbI2AwQBwbJwAwQEw6eAAwQEw6ewMAwDBALRKgQDBATR
KgAwGwQCAAIwFQMFACoAWEADBQAqAgiQAwUDKgYOQDANBgkqhkiG9w0BAQsFAAOC
AQEAKFWWEdvnJB3PLWIEko+Bnixf1HCtEWEhOwKSF5dVyzkEouVLt0/pP9yolcoA
FE/Fkf/jtD0Mncm84DAjJXf4mzVvVlc5eehCE55Gp03Y96tjhPVTHBePU01nqB3i
LRLxv4r4a0xDjC4F6Nb7N3nR6ThzIh0aQ+EZSt6EOA4S1/PggqcgPcreMkJ1RlbU
psfYjH1uZDySybTB91Cn/iYvQS7RNadmhSmWmuksJ3HsLZLfYKvofTiwsVAk8nEN
p/U8Cd5Ffktm8F+FWmu3/Fst71vFdxA/fQsDj9ckhfJ8KhJ/du43MGp1LvGTu33z
XuwEoPzcOJYtwI+dRwJ1Bc8suw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:52:07 2026 by rpki-client