Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/ELEtRZ5loRIGKf7-scqLr4hB53s.roa
File: ELEtRZ5loRIGKf7-scqLr4hB53s.roa (raw, json)
Hash identifier: +gEhdH/1tkJ13QzR+izIQZXALlED/+ktkwEfPUTaTI8=
Subject key identifier: 10:B1:2D:45:9E:65:A1:12:06:29:FE:FE:B1:CA:8B:AF:88:41:E7:7B
Certificate issuer: /CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Certificate serial: 01A0871EF22D12A8C89D309D70FDE98DBC19
Authority key identifier: 45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/ELEtRZ5loRIGKf7-scqLr4hB53s.roa
Signing time: Wed 09 Sep 2026 17:02:27 +0000
ROA not before: Wed 09 Sep 2026 17:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15713
IP address blocks: 83.142.104.0/21 maxlen: 21
91.192.136.0/22 maxlen: 22
195.93.190.0/23 maxlen: 23
195.214.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:1e:f2:2d:12:a8:c8:9d:30:9d:70:fd:e9:8d:bc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Validity
Not Before: Sep 9 17:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10b12d459e65a1120629fefeb1ca8baf8841e77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:7c:5f:61:54:e8:a6:c0:7e:20:51:f1:99:
65:4d:c9:7b:7a:c9:23:b9:d0:d0:26:38:5a:6d:7d:
60:5c:b6:2d:7c:7b:9c:bf:82:81:d8:be:c6:b5:09:
c0:af:85:b7:5d:a9:83:00:45:21:65:a9:13:74:68:
b0:d6:f0:85:25:a9:0b:1e:3f:8e:9d:f6:f1:31:0d:
59:94:b7:fa:ca:0d:59:77:90:79:51:25:fc:6d:78:
32:22:f3:f0:9f:42:5c:bf:00:38:fb:e3:63:0f:ad:
3d:7e:a7:6c:45:60:5c:8f:e3:1c:fb:4b:46:68:fc:
a5:40:db:fa:0c:2f:aa:b6:a6:0e:d0:e6:07:d2:21:
ba:c9:f4:cb:04:1f:4c:08:4d:8f:fc:a1:0f:db:aa:
0d:88:b8:e1:40:b6:6c:6d:06:a4:72:30:c5:05:c5:
4f:05:7b:7a:4e:59:4d:73:88:79:79:21:ad:f1:64:
31:16:34:53:91:dd:88:fa:4c:2c:0f:74:22:05:f6:
f2:b9:ea:5c:95:35:e9:00:bf:66:cf:c2:2d:81:ae:
11:c5:c3:9f:ac:b6:f8:55:62:bb:2f:29:92:06:0e:
b3:da:ba:9c:91:20:4f:3f:4d:b1:f1:12:2d:ab:1a:
cf:3a:24:44:4e:46:a0:f0:70:38:6a:3f:d6:84:53:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:2D:45:9E:65:A1:12:06:29:FE:FE:B1:CA:8B:AF:88:41:E7:7B
X509v3 Authority Key Identifier:
keyid:45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/ELEtRZ5loRIGKf7-scqLr4hB53s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.104.0/21
91.192.136.0/22
195.93.190.0/23
195.214.220.0/22
Signature Algorithm: sha256WithRSAEncryption
29:dd:8e:90:4d:0a:43:70:a0:05:34:ab:49:48:32:3a:47:a8:
14:c7:49:3b:f8:74:eb:4d:8b:a6:19:fd:35:08:8b:68:6d:27:
0f:a7:18:7c:46:24:72:45:c2:d2:89:d4:71:11:d6:bd:0f:87:
bc:01:dd:e0:1e:ab:e3:4e:93:45:16:2f:aa:6c:0f:47:4b:8c:
3f:d9:00:54:77:43:2b:ca:14:84:b8:cc:1f:c7:24:67:52:3e:
08:81:e2:e5:c7:2d:0f:d9:76:c7:ee:1b:6b:c0:93:4c:f9:6b:
ce:a2:91:00:9b:2b:0f:32:84:1f:e4:1c:11:f9:a9:82:e9:15:
a2:f0:e9:a1:09:9f:29:64:15:e2:6c:13:44:0d:76:5d:ba:1c:
04:73:b0:bc:d2:4a:e2:0a:08:2a:df:46:e3:b8:a5:27:f6:55:
bb:00:ec:5f:17:3d:b5:91:19:fd:91:cc:f4:87:9d:27:f8:36:
5f:cf:81:bf:81:ca:44:fc:68:e9:cc:3e:69:3e:16:15:34:0c:
cb:ce:52:43:c2:d3:aa:4f:26:4f:5e:c7:09:7a:34:5c:31:8d:
eb:88:c1:d6:87:70:62:1b:7c:13:c8:a0:8b:08:f0:37:c6:fe:
83:42:fa:36:1f:4a:31:99:a9:a8:5b:41:00:15:34:84:d9:b2:
6a:97:3d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:14 2026 by rpki-client