Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ELCX14XC-9YHN9S3AzJIb2xNXVU.roa
File: ELCX14XC-9YHN9S3AzJIb2xNXVU.roa (raw, json)
Hash identifier: KHqkWAEjRojnwwRZcK/ZNw1Jh14gxTvzD5m5/vv82j4=
Subject key identifier: 10:B0:97:D7:85:C2:FB:D6:07:37:D4:B7:03:32:48:6F:6C:4D:5D:55
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019CFA96C2CCAFC9EEAAE2D0A00AD4D443DC
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ELCX14XC-9YHN9S3AzJIb2xNXVU.roa
Signing time: Tue 17 Mar 2026 06:58:30 +0000
ROA not before: Tue 17 Mar 2026 06:58:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 77.37.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:96:c2:cc:af:c9:ee:aa:e2:d0:a0:0a:d4:d4:43:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Mar 17 06:58:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10b097d785c2fbd60737d4b70332486f6c4d5d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:9d:e7:1c:8a:07:a5:bf:c4:43:07:00:f8:
72:b6:5f:eb:c8:a2:af:8a:b8:4c:3b:34:6b:89:c2:
15:6b:11:80:7d:b5:1c:11:f2:2c:d7:78:b5:ad:38:
6e:ed:0e:44:9e:25:39:94:a9:cd:f2:41:59:84:28:
d5:71:bf:44:cd:b0:d7:f8:9f:aa:60:c6:56:14:6e:
98:86:51:b7:76:75:87:95:d8:db:85:ca:bc:8f:ed:
e3:61:13:74:47:5f:1c:16:ff:57:5e:0d:c9:a8:19:
a7:d0:e0:f0:c3:18:f8:29:b9:5b:c2:d4:bb:54:e1:
3c:76:e4:13:75:e6:93:cc:ea:ab:bb:ca:e2:96:b6:
66:a5:42:33:e9:26:4c:cf:2f:21:b7:bf:7a:cf:ba:
f1:b6:94:32:9d:10:cf:af:4c:18:c9:5e:20:bf:6e:
36:19:cb:c6:11:7e:7f:06:f1:3b:f5:e9:2d:84:1e:
87:9a:08:2b:48:ce:87:a3:4e:aa:a8:e1:78:55:1d:
6a:c0:07:db:3c:d6:17:76:06:d4:84:a4:24:6f:da:
48:63:8d:17:c0:71:62:ca:2d:8b:e8:87:25:d1:25:
fb:d6:8a:87:23:45:79:12:17:39:53:5a:26:58:66:
9c:d2:20:17:50:f2:2e:6f:05:75:d1:01:9d:d4:3d:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B0:97:D7:85:C2:FB:D6:07:37:D4:B7:03:32:48:6F:6C:4D:5D:55
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ELCX14XC-9YHN9S3AzJIb2xNXVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.84.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3d:96:8e:53:7d:e6:fe:1c:37:b4:21:e9:27:db:e4:88:c4:
47:96:6f:6d:54:af:ef:f6:2c:01:bd:c3:e3:d2:7c:46:4b:cd:
1c:99:ea:93:13:8c:c7:3e:24:95:10:f2:cb:af:51:2b:89:e1:
9b:c2:a8:6c:d0:ec:dc:04:38:4c:22:12:a6:5d:98:01:88:32:
8f:2d:64:fc:ed:24:50:62:a9:69:37:e8:b6:74:86:bd:9f:fc:
c7:32:7c:d1:92:59:03:9d:16:01:dd:f5:90:12:e3:f6:36:71:
e2:42:e0:00:33:35:fc:74:9e:10:a9:bc:c8:40:16:e8:53:fe:
fc:b2:85:df:da:ea:a9:ec:61:f9:02:e4:e1:b8:a8:15:26:f8:
73:fe:6e:10:9b:4e:ed:d4:86:c9:c5:c4:d7:9f:3d:ec:fe:9c:
aa:74:3b:01:f6:23:1f:3c:99:ee:8f:ec:ed:e8:8f:e6:af:0a:
47:85:6a:38:8f:bf:9d:e8:09:00:cc:b1:e6:72:73:e7:b7:f1:
56:dc:60:e0:2f:37:5e:7b:5e:2d:71:93:b6:b7:76:4e:75:f2:
78:a7:5c:08:15:ce:8e:f8:0a:ea:8c:5c:6b:77:a1:4a:27:16:
d9:16:7e:ab:de:99:42:9a:b5:3b:a8:1f:87:79:fb:0f:f2:f0:
03:ab:a3:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZz6lsLMr8nuquLQoArU1EPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjYwMzE3MDY1ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGIwOTdkNzg1YzJmYmQ2MDczN2Q0YjcwMzMyNDg2ZjZjNGQ1ZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3md5xyKB6W/xEMHAPhytl/ryKKv
irhMOzRricIVaxGAfbUcEfIs13i1rThu7Q5EniU5lKnN8kFZhCjVcb9EzbDX+J+q
YMZWFG6YhlG3dnWHldjbhcq8j+3jYRN0R18cFv9XXg3JqBmn0ODwwxj4KblbwtS7
VOE8duQTdeaTzOqru8rilrZmpUIz6SZMzy8ht796z7rxtpQynRDPr0wYyV4gv242
GcvGEX5/BvE79ekthB6HmggrSM6Ho06qqOF4VR1qwAfbPNYXdgbUhKQkb9pIY40X
wHFiyi2L6Icl0SX71oqHI0V5Ehc5U1omWGac0iAXUPIubwV10QGd1D14ZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBCwl9eFwvvWBzfUtwMySG9sTV1VMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvRUxDWDE0WEMtOVlITjlTM0F6SkliMnhOWFZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATSVUMA0G
CSqGSIb3DQEBCwUAA4IBAQBUPZaOU33m/hw3tCHpJ9vkiMRHlm9tVK/v9iwBvcPj
0nxGS80cmeqTE4zHPiSVEPLLr1ErieGbwqhs0OzcBDhMIhKmXZgBiDKPLWT87SRQ
YqlpN+i2dIa9n/zHMnzRklkDnRYB3fWQEuP2NnHiQuAAMzX8dJ4QqbzIQBboU/78
soXf2uqp7GH5AuThuKgVJvhz/m4Qm07t1IbJxcTXnz3s/pyqdDsB9iMfPJnuj+zt
6I/mrwpHhWo4j7+d6AkAzLHmcnPnt/FW3GDgLzdee14tcZO2t3ZOdfJ4p1wIFc6O
+ArqjFxrd6FKJxbZFn6r3plCmrU7qB+HefsP8vADq6NY
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:00 2026 by rpki-client