Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EALtS-GVqq6VXrqRrKu_iPB83ok.roa
File: EALtS-GVqq6VXrqRrKu_iPB83ok.roa (raw, json)
Hash identifier: dtgkD5wECpcfISdRNL+MVglFgE38MVjqXOUQm2AOTO8=
Subject key identifier: 10:02:ED:4B:E1:95:AA:AE:95:5E:BA:91:AC:AB:BF:88:F0:7C:DE:89
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D8C70907EBD2021EB7D95B207A92BEA8D
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EALtS-GVqq6VXrqRrKu_iPB83ok.roa
Signing time: Tue 14 Apr 2026 14:41:20 +0000
ROA not before: Tue 14 Apr 2026 14:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 186.246.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:70:90:7e:bd:20:21:eb:7d:95:b2:07:a9:2b:ea:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 14 14:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1002ed4be195aaae955eba91acabbf88f07cde89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:18:d0:7d:08:89:37:3c:bc:45:6c:5e:ff:
53:68:9c:52:a0:56:d7:7a:79:c1:21:91:73:fc:04:
26:50:a1:cd:81:c8:40:fe:f8:d8:2d:3d:0b:da:d4:
2f:6e:96:c2:2f:2e:6e:89:2f:5f:81:f9:50:64:ec:
4c:19:a0:ba:8e:b1:06:a5:22:00:97:65:92:1a:cb:
d7:04:c7:d0:ef:53:32:0d:15:c2:a4:d7:81:86:83:
2a:b5:a8:55:0c:bf:b6:33:d2:f7:c2:d9:b0:5c:93:
f5:fc:05:58:34:3c:62:3a:e1:bf:0f:4c:11:fa:2e:
e9:9e:74:37:42:88:66:c8:fd:e2:99:0c:4a:57:88:
9f:0b:8e:68:1d:28:38:75:68:87:9e:0d:62:89:d0:
5e:63:6f:2e:6d:81:b0:55:d6:10:dc:d8:e3:eb:e9:
6b:01:cd:2d:15:eb:aa:37:dc:6b:8e:a8:1c:fb:22:
bb:ef:9f:a9:83:9c:ff:37:57:04:78:ef:a4:7c:89:
72:69:2d:75:7d:cf:d9:eb:51:08:f7:c7:69:c8:eb:
36:cc:ac:08:52:dc:97:f9:6d:be:cb:64:cc:60:48:
d0:fd:c7:bf:56:45:24:a6:0e:53:c9:f4:4d:b3:24:
11:8c:d1:bd:26:4f:ab:49:5f:d6:63:73:ea:80:93:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:02:ED:4B:E1:95:AA:AE:95:5E:BA:91:AC:AB:BF:88:F0:7C:DE:89
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EALtS-GVqq6VXrqRrKu_iPB83ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.246.44.0/22
Signature Algorithm: sha256WithRSAEncryption
78:d1:aa:1c:a0:73:7a:43:4d:d7:38:8f:cf:17:77:ac:a2:70:
2b:75:23:0a:39:3b:fe:5d:46:43:84:d4:5b:93:b2:05:af:fd:
62:64:41:3c:20:41:a6:d5:c5:64:7a:59:07:36:b8:64:5e:42:
0f:28:45:7e:7a:d0:d9:1d:12:27:9a:b6:c6:5e:65:a8:89:da:
db:c1:44:ae:19:ec:dd:5f:fb:9e:a8:f6:64:36:05:2d:f5:38:
8e:00:a6:71:62:7c:3c:f5:1e:32:ef:e3:c6:79:c5:35:48:e2:
b6:3d:9b:31:39:10:45:98:aa:a6:8a:de:78:8d:89:ca:11:2b:
fa:0c:2e:3d:bf:cd:16:49:b9:1e:e4:39:e5:f2:dd:28:18:27:
ac:5b:7b:d3:6e:7d:11:eb:42:09:a1:65:50:74:ce:82:f1:10:
29:9d:d8:4b:eb:33:a9:65:b1:d3:7e:1a:d7:9a:2e:16:0c:0c:
44:a9:2b:ae:4c:38:6f:20:cf:e4:15:9e:ac:47:a5:c1:f0:57:
4b:32:fc:a2:71:b8:e8:75:05:04:95:51:e8:1d:d4:f2:f9:83:
6f:16:40:39:ad:2f:09:0f:a1:b7:ba:d0:0d:1d:d5:cc:a7:ff:
a6:96:c1:2a:43:98:57:c1:cf:57:c5:ef:95:1b:ec:e4:83:82:
3e:7b:5f:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2McJB+vSAh632VsgepK+qNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNDE0MTQ0MTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDAyZWQ0YmUxOTVhYWFlOTU1ZWJhOTFhY2FiYmY4OGYwN2NkZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eoY0H0IiTc8vEVsXv9TaJxSoFbX
ennBIZFz/AQmUKHNgchA/vjYLT0L2tQvbpbCLy5uiS9fgflQZOxMGaC6jrEGpSIA
l2WSGsvXBMfQ71MyDRXCpNeBhoMqtahVDL+2M9L3wtmwXJP1/AVYNDxiOuG/D0wR
+i7pnnQ3QohmyP3imQxKV4ifC45oHSg4dWiHng1iidBeY28ubYGwVdYQ3Njj6+lr
Ac0tFeuqN9xrjqgc+yK775+pg5z/N1cEeO+kfIlyaS11fc/Z61EI98dpyOs2zKwI
UtyX+W2+y2TMYEjQ/ce/VkUkpg5TyfRNsyQRjNG9Jk+rSV/WY3PqgJNqOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBAC7UvhlaqulV66kayrv4jwfN6JMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvRUFMdFMtR1ZxcTZWWHJxUnJLdV9pUEI4M29rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuvYsMA0G
CSqGSIb3DQEBCwUAA4IBAQB40aocoHN6Q03XOI/PF3esonArdSMKOTv+XUZDhNRb
k7IFr/1iZEE8IEGm1cVkelkHNrhkXkIPKEV+etDZHRInmrbGXmWoidrbwUSuGezd
X/ueqPZkNgUt9TiOAKZxYnw89R4y7+PGecU1SOK2PZsxORBFmKqmit54jYnKESv6
DC49v80WSbke5Dnl8t0oGCesW3vTbn0R60IJoWVQdM6C8RApndhL6zOpZbHTfhrX
mi4WDAxEqSuuTDhvIM/kFZ6sR6XB8FdLMvyicbjodQUElVHoHdTy+YNvFkA5rS8J
D6G3utANHdXMp/+mlsEqQ5hXwc9Xxe+VG+zkg4I+e19L
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:12 2026 by rpki-client