Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/EL4RhCJyyRlyZuehphdGqPGmsuY.roa
File: EL4RhCJyyRlyZuehphdGqPGmsuY.roa (raw, json)
Hash identifier: O7ZI8Hzf8EaV7IHsZ8VodbDzln2fkLFKoRv5tr08nQA=
Subject key identifier: 10:BE:11:84:22:72:C9:19:72:66:E7:A1:A6:17:46:A8:F1:A6:B2:E6
Certificate issuer: /CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Certificate serial: 01A1A0FAC0CE1E526BD3744477A28E03C387
Authority key identifier: 2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/EL4RhCJyyRlyZuehphdGqPGmsuY.roa
Signing time: Tue 03 Nov 2026 10:35:50 +0000
ROA not before: Tue 03 Nov 2026 10:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 2a01:e5c0:2000::/36 maxlen: 36
2a01:e5c0:3000::/36 maxlen: 36
2a01:e5c0:4000::/36 maxlen: 36
2a01:e5c0:5000::/36 maxlen: 36
2a01:e5c0:6000::/36 maxlen: 36
2a01:e5c0:7000::/36 maxlen: 36
2a01:e5c0:8004::/48 maxlen: 48
2a01:e5c0:8004:ec3b::/64 maxlen: 64
2a01:e5c0:8008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:fa:c0:ce:1e:52:6b:d3:74:44:77:a2:8e:03:c3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Validity
Not Before: Nov 3 10:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10be11842272c9197266e7a1a61746a8f1a6b2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:ce:54:1c:99:74:0d:50:b7:71:2d:7c:a3:
d1:5c:19:e9:be:e0:79:32:15:b0:4d:f3:02:31:a4:
2b:f1:32:9e:5b:73:f5:a5:a4:e7:50:f8:29:80:c0:
01:fd:8e:9b:62:77:d7:40:ec:65:3f:02:2a:28:4b:
da:fb:74:a6:b9:74:69:7a:c1:82:8b:74:e8:a2:38:
27:e7:5b:c0:5b:16:35:f1:21:d1:09:8e:67:d8:67:
1c:5c:e4:2d:19:d6:9e:64:1d:6c:be:f7:2f:60:8e:
04:d4:d1:59:92:4e:d0:22:43:8f:ad:39:7d:9b:ca:
06:af:bf:35:64:4e:71:18:12:e4:3a:47:d0:d8:b3:
0c:f7:8d:24:9a:04:23:8d:33:f7:d3:45:bb:4a:df:
87:25:47:c5:71:d5:da:58:79:a6:88:f9:eb:fa:f3:
a8:4e:73:21:d4:43:a3:47:8d:3b:8d:7c:01:d2:3c:
6e:14:45:57:e1:41:23:0c:d4:89:a3:72:e4:87:13:
5e:01:34:3d:a6:29:13:51:7f:4c:3d:4f:4f:48:57:
5e:17:fb:0e:ed:eb:22:97:27:06:61:8e:1e:6a:4c:
6e:60:79:4a:06:90:39:41:cc:bb:4f:4c:5d:4a:36:
09:10:34:bc:c0:e2:bb:cf:f0:b5:1a:dc:5b:9f:d5:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:11:84:22:72:C9:19:72:66:E7:A1:A6:17:46:A8:F1:A6:B2:E6
X509v3 Authority Key Identifier:
keyid:2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/EL4RhCJyyRlyZuehphdGqPGmsuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e5c0:2000::-2a01:e5c0:7fff:ffff:ffff:ffff:ffff:ffff
2a01:e5c0:8004::/48
2a01:e5c0:8008::/48
Signature Algorithm: sha256WithRSAEncryption
a5:15:3f:03:f6:43:b6:e3:72:4c:61:2b:cb:6b:ba:98:b3:25:
54:af:b3:33:89:5c:c5:cc:67:d2:23:04:c7:e5:a4:84:91:79:
3d:c1:bd:1a:38:ba:55:02:a2:cd:51:2a:dd:df:f4:09:60:49:
64:6d:74:b2:6a:4e:4d:1f:1d:df:9d:36:a5:21:12:5d:fc:a8:
3f:6e:32:dd:87:ab:78:4d:d0:c2:b4:f9:df:58:1d:03:8e:5c:
da:4b:b8:2a:2c:97:6d:14:eb:f1:f8:e8:82:b6:2a:f4:ba:bc:
14:a2:c5:ad:6a:9a:50:0f:70:88:11:1e:64:51:3a:71:dd:7b:
5e:aa:5d:15:b6:ad:37:b5:c3:d2:8a:fb:90:c5:0e:b6:99:e9:
11:32:a3:f5:ca:ae:65:0c:57:9e:7d:58:e9:f3:7d:97:10:14:
94:44:a7:c7:24:61:8a:40:9b:ef:b0:a0:56:1e:6c:c1:ca:d5:
86:e3:83:5c:7b:16:b9:01:32:c6:a3:c2:e1:ea:0e:09:6c:aa:
bf:16:ba:c1:48:2a:09:d9:74:06:6b:34:77:fc:d5:7f:74:78:
68:ba:26:06:1f:6d:44:cc:e0:9e:a1:1c:22:0e:e7:64:d3:bf:
f7:ff:fe:3c:e1:89:13:24:8b:45:0d:9f:4d:c3:7d:a3:d4:0c:
83:20:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 13:31:01 2026 by rpki-client