Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ElbDK4AZPLTHAbdFdzY5dmmOofA.roa
File: ElbDK4AZPLTHAbdFdzY5dmmOofA.roa (raw, json)
Hash identifier: LTQJMi6z07RwL+cIbgarhmg8NsubAf3xYu5ML/FPSCA=
Subject key identifier: 12:56:C3:2B:80:19:3C:B4:C7:01:B7:45:77:36:39:76:69:8E:A1:F0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019A002D9867C1720586C745F3677D7B8525
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ElbDK4AZPLTHAbdFdzY5dmmOofA.roa
Signing time: Mon 20 Oct 2025 05:52:59 +0000
ROA not before: Mon 20 Oct 2025 05:52:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 163.5.104.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:2d:98:67:c1:72:05:86:c7:45:f3:67:7d:7b:85:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 20 05:52:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1256c32b80193cb4c701b74577363976698ea1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4f:c8:01:db:ab:05:46:b4:6e:d8:9e:c1:9b:
0e:b2:c7:6d:be:49:b2:5d:88:a8:a1:0d:1a:b4:dd:
19:87:e2:a9:3b:88:4b:b4:77:83:fe:fd:bd:a6:d1:
8b:20:5f:c5:cf:34:af:79:1c:3f:0e:85:b7:2b:4c:
50:ac:66:fd:11:5e:0d:15:c1:55:42:6f:ad:50:df:
20:8b:fd:78:f1:ff:c5:44:53:61:a4:b1:10:be:57:
bb:98:3e:e7:25:d9:58:1a:20:09:cf:19:f3:f6:e0:
70:f0:fd:18:16:8c:0a:ad:8f:ea:9b:56:19:b1:59:
2a:ed:fc:8c:1b:9d:83:5f:58:e3:38:6b:7f:89:8c:
2c:52:13:9c:3e:71:44:1b:df:4a:6f:21:8d:78:0e:
8d:30:30:76:15:2d:65:7b:f1:97:8d:35:22:d5:77:
9f:33:8d:94:a2:d3:cf:30:92:78:84:d1:e8:15:fb:
c0:d5:6b:ac:5e:43:38:61:b0:90:f1:bd:84:ca:01:
2d:65:8c:20:b2:9c:87:5a:7f:95:82:a2:f5:46:01:
32:5e:d6:ef:4b:6c:c1:7f:c2:34:5f:0a:ed:0b:50:
f8:77:f6:f2:42:84:35:d8:3f:fe:6e:f8:76:c0:47:
11:f6:3f:cc:e6:f7:40:74:ac:71:76:3e:63:65:ce:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:56:C3:2B:80:19:3C:B4:C7:01:B7:45:77:36:39:76:69:8E:A1:F0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ElbDK4AZPLTHAbdFdzY5dmmOofA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.104.0/24
163.5.118.0/24
163.5.179.0/24
Signature Algorithm: sha256WithRSAEncryption
53:50:0c:74:01:1a:e4:f6:6a:81:16:30:2f:1d:58:97:9e:b6:
5d:f8:8e:31:51:4c:55:ce:4d:f4:ee:66:b7:a6:b3:7e:53:e3:
f3:d1:28:c7:3d:96:66:bc:63:36:b0:1a:6e:ab:76:58:6a:17:
3b:84:df:ab:f4:cb:05:1f:80:f4:db:24:87:b9:8e:af:6a:2e:
f6:c7:34:8c:70:c8:ef:12:3f:c5:86:f4:43:6b:f8:c9:11:5e:
72:52:53:7a:1a:5c:b7:47:67:9a:2a:7d:cd:19:99:1c:50:03:
30:42:d0:6d:ce:1e:24:1f:13:f8:c6:a3:02:0a:c7:7d:5b:52:
45:f8:52:24:b9:c9:b0:cf:b2:ef:87:79:05:da:44:9f:64:00:
23:c9:24:95:0d:e0:93:03:dc:49:69:df:76:7c:26:ec:f4:a5:
f2:9c:18:21:8e:1d:e2:04:c1:f6:e6:5c:bf:69:32:86:34:94:
ac:b5:db:f1:22:e2:95:2e:a8:68:67:c9:d8:0d:fd:ea:67:f2:
41:03:bc:98:f6:05:07:99:b4:5e:cf:5b:5e:60:2f:59:6e:ba:
99:ad:4d:7d:83:34:a6:72:ea:b6:3f:53:f2:4b:ad:54:17:87:
bb:94:15:4b:ae:a8:96:af:d2:1d:7f:df:74:f8:c1:24:22:f6:
b0:60:2f:e5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZoALZhnwXIFhsdF82d9e4UlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUxMDIwMDU1MjU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjU2YzMyYjgwMTkzY2I0YzcwMWI3NDU3NzM2Mzk3NjY5OGVhMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6k/IAdurBUa0btiewZsOssdtvkmy
XYiooQ0atN0Zh+KpO4hLtHeD/v29ptGLIF/FzzSveRw/DoW3K0xQrGb9EV4NFcFV
Qm+tUN8gi/148f/FRFNhpLEQvle7mD7nJdlYGiAJzxnz9uBw8P0YFowKrY/qm1YZ
sVkq7fyMG52DX1jjOGt/iYwsUhOcPnFEG99KbyGNeA6NMDB2FS1le/GXjTUi1Xef
M42UotPPMJJ4hNHoFfvA1WusXkM4YbCQ8b2EygEtZYwgspyHWn+VgqL1RgEyXtbv
S2zBf8I0XwrtC1D4d/byQoQ12D/+bvh2wEcR9j/M5vdAdKxxdj5jZc4H+wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBJWwyuAGTy0xwG3RXc2OXZpjqHwMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRWxiREs0QVpQTFRIQWJkRmR6WTVkbW1Pb2ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowVoAwQA
owV2AwQAowWzMA0GCSqGSIb3DQEBCwUAA4IBAQBTUAx0ARrk9mqBFjAvHViXnrZd
+I4xUUxVzk307ma3prN+U+Pz0SjHPZZmvGM2sBpuq3ZYahc7hN+r9MsFH4D02ySH
uY6vai72xzSMcMjvEj/FhvRDa/jJEV5yUlN6Gly3R2eaKn3NGZkcUAMwQtBtzh4k
HxP4xqMCCsd9W1JF+FIkucmwz7Lvh3kF2kSfZAAjySSVDeCTA9xJad92fCbs9KXy
nBghjh3iBMH25ly/aTKGNJSstdvxIuKVLqhoZ8nYDf3qZ/JBA7yY9gUHmbRez1te
YC9ZbrqZrU19gzSmcuq2P1PyS61UF4e7lBVLrqiWr9Idf990+MEkIvawYC/l
-----END CERTIFICATE-----
Generated at Tue Oct 21 16:46:48 2025 by rpki-client