Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/El_vJCmqmPnx7CbyJUU82xrebHs.roa
File: El_vJCmqmPnx7CbyJUU82xrebHs.roa (raw, json)
Hash identifier: iNUr4Vlf9vCtezxFURlA3I5M77bzo/G2G/xym2HP6+k=
Subject key identifier: 12:5F:EF:24:29:AA:98:F9:F1:EC:26:F2:25:45:3C:DB:1A:DE:6C:7B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EDB9978E48F1EA8FC3684BB24E6285372
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/El_vJCmqmPnx7CbyJUU82xrebHs.roa
Signing time: Thu 18 Jun 2026 16:38:48 +0000
ROA not before: Thu 18 Jun 2026 16:38:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
62.105.208.0/23 maxlen: 23
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
92.71.34.0/23 maxlen: 24
92.71.40.0/22 maxlen: 24
92.71.44.0/23 maxlen: 24
92.71.66.0/23 maxlen: 24
92.71.98.0/23 maxlen: 24
92.71.124.0/23 maxlen: 24
135.196.21.0/24 maxlen: 24
135.196.106.0/24 maxlen: 24
135.196.180.0/23 maxlen: 23
135.196.185.0/24 maxlen: 24
194.122.87.0/24 maxlen: 24
195.86.208.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
213.139.8.0/22 maxlen: 24
213.169.206.0/23 maxlen: 23
213.201.134.0/24 maxlen: 24
213.201.242.0/23 maxlen: 24
213.201.252.0/23 maxlen: 24
217.8.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:99:78:e4:8f:1e:a8:fc:36:84:bb:24:e6:28:53:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 18 16:38:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=125fef2429aa98f9f1ec26f225453cdb1ade6c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:4f:1e:8a:98:a7:b5:1b:89:92:ec:cf:86:
aa:5e:ae:c7:7d:98:9d:1b:ea:08:52:b1:2f:0b:42:
da:4e:b9:c6:7f:26:2c:dd:6c:be:fb:2a:d0:93:94:
34:d3:c1:4e:21:c8:cb:d6:e6:0b:f3:56:02:c1:c4:
05:08:04:76:56:bf:fa:83:5d:8f:f0:2d:83:35:f5:
9b:be:09:d4:d4:b6:70:24:ef:72:0c:56:90:70:ff:
46:41:82:ac:61:08:b9:4d:78:06:fc:a5:81:9a:a8:
a6:1e:f1:70:fc:0c:50:cf:ae:72:98:54:13:93:5b:
ac:5f:75:be:30:bc:9d:20:ab:ee:c9:42:ee:b0:4d:
16:5b:45:04:01:6d:7f:8d:72:81:4e:3e:dd:3f:f0:
1f:61:20:8e:07:a1:fb:e3:aa:18:60:4c:00:d2:3d:
95:93:74:9f:58:78:ed:75:d6:90:3b:3b:a7:d7:35:
8e:08:b1:67:c5:e0:ce:c2:d4:39:44:c9:c3:cd:b2:
b4:47:fe:ea:1c:73:e4:60:2e:21:1c:48:59:b3:82:
ee:04:3f:15:b1:13:7e:2f:70:60:78:87:3f:8c:36:
d9:cf:15:59:5c:56:e1:b1:ae:f7:0b:b4:9b:ad:66:
21:71:71:33:c5:f8:2a:e5:1b:a0:97:5b:a1:ea:67:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5F:EF:24:29:AA:98:F9:F1:EC:26:F2:25:45:3C:DB:1A:DE:6C:7B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/El_vJCmqmPnx7CbyJUU82xrebHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
62.105.208.0/23
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
92.71.34.0/23
92.71.40.0-92.71.45.255
92.71.66.0/23
92.71.98.0/23
92.71.124.0/23
135.196.21.0/24
135.196.106.0/24
135.196.180.0/23
135.196.185.0/24
194.122.87.0/24
195.86.208.0/24
195.86.223.0/24
213.139.8.0/22
213.169.206.0/23
213.201.134.0/24
213.201.242.0/23
213.201.252.0/23
217.8.195.0/24
Signature Algorithm: sha256WithRSAEncryption
09:65:28:8e:05:f7:7b:5b:a4:ea:02:3a:15:04:0b:d0:4c:d1:
23:23:2a:f5:ec:c9:bb:79:2c:ec:4b:38:6e:d9:2b:6e:12:08:
45:b8:0a:69:d9:ac:68:d4:f1:4c:6e:99:ad:26:50:f8:f8:61:
89:52:c0:5a:91:3a:06:76:b5:13:ea:4a:45:66:0e:fd:6d:a2:
c8:99:4f:1c:f3:80:0e:07:19:64:6d:7b:1a:4f:42:c4:b4:61:
21:ec:0f:36:42:7d:eb:2c:d2:ef:e0:12:eb:2e:25:17:3d:29:
12:15:97:ed:83:cf:76:17:00:95:d9:97:c9:3e:c1:cc:e0:6a:
08:b2:5f:2e:66:0f:ff:ef:7e:f9:bc:d6:73:2d:47:da:2e:71:
70:4a:e9:42:50:a2:3b:b6:fa:92:1b:18:91:8f:1a:2f:79:36:
16:6e:35:28:b5:35:b6:81:cf:c7:f0:7d:fb:a8:94:d4:da:86:
7f:20:d0:63:06:4f:d6:83:4f:b2:54:98:d8:6c:ad:6c:f6:8a:
69:4f:70:6d:5d:ac:0f:59:4d:63:27:25:19:a5:3b:e1:60:fe:
2e:89:76:1a:33:b3:92:7e:93:8f:17:04:db:af:94:dc:ed:fd:
c0:72:6b:0c:7d:19:54:be:10:03:c7:38:e1:26:3a:d9:13:71:
63:92:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 02:15:28 2026 by rpki-client