Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/ElnwF_5E6TfoJFsg7rDOjL0wjYQ.roa
File: ElnwF_5E6TfoJFsg7rDOjL0wjYQ.roa (raw, json)
Hash identifier: uzYd7h7kAKy6tVfc3psAeDx22790cFwvm26UnFbdaLg=
Subject key identifier: 12:59:F0:17:FE:44:E9:37:E8:24:5B:20:EE:B0:CE:8C:BD:30:8D:84
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FD75845485573F0953105D85CEF5E8E96
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/ElnwF_5E6TfoJFsg7rDOjL0wjYQ.roa
Signing time: Thu 06 Aug 2026 13:51:54 +0000
ROA not before: Thu 06 Aug 2026 13:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142532
IP address blocks: 103.203.42.0/24 maxlen: 24
103.207.163.0/24 maxlen: 24
185.225.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:58:45:48:55:73:f0:95:31:05:d8:5c:ef:5e:8e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 6 13:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1259f017fe44e937e8245b20eeb0ce8cbd308d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:84:66:af:3e:fb:ef:c7:0d:74:4a:4b:51:af:
ca:45:19:a5:b9:f7:28:d4:31:2e:5c:4c:7f:0c:5d:
99:3f:fa:cb:18:af:ee:28:ac:80:ef:ab:48:20:f3:
37:69:03:e8:67:79:4e:3c:a1:75:f6:56:de:7f:77:
1b:2e:e5:00:98:e6:49:37:f2:8e:af:80:db:67:81:
8a:9d:62:7a:1e:35:05:c6:f2:26:e1:69:7b:43:06:
a9:57:cd:23:b4:54:09:6a:a1:67:ed:57:5f:ea:3e:
03:23:e6:49:83:f8:24:84:b3:ec:df:4a:8d:37:a0:
b7:5b:e2:37:9f:50:92:7b:e7:79:ea:4c:ba:e1:ea:
b5:e4:76:50:e6:f7:b8:a0:cb:cf:de:7c:de:c8:4b:
74:79:60:24:88:84:78:22:7f:5c:f1:8f:95:3a:cc:
f4:18:96:89:2e:78:fd:9f:8d:7e:4d:42:8c:1c:d1:
04:b5:02:73:ee:cb:42:1a:25:fa:25:93:54:27:df:
2e:72:98:e0:05:6b:92:91:40:24:07:5a:fd:03:b5:
db:cb:cd:03:7d:49:d3:2a:80:46:ff:0f:85:42:a7:
7b:a7:c7:86:1a:ef:fb:24:0a:0e:28:97:dd:52:4c:
7a:5f:4a:d3:10:4b:bb:54:29:d8:70:00:17:49:d2:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:59:F0:17:FE:44:E9:37:E8:24:5B:20:EE:B0:CE:8C:BD:30:8D:84
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/ElnwF_5E6TfoJFsg7rDOjL0wjYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.203.42.0/24
103.207.163.0/24
185.225.14.0/24
Signature Algorithm: sha256WithRSAEncryption
02:30:13:e8:79:50:ca:b5:ab:b2:d0:5f:9b:9d:f8:e5:13:2f:
98:8d:f9:b9:d3:5b:d5:89:32:05:ea:21:52:f9:4f:2d:44:58:
f9:51:fd:71:2a:cf:4d:9d:11:63:85:63:24:6a:2d:dc:85:4a:
66:e5:65:1b:e4:e1:ba:04:fc:53:b9:5c:e5:c8:57:7f:72:27:
6a:92:1e:c1:62:92:55:ca:2f:83:d8:b0:6c:60:e5:21:75:a6:
d3:d4:17:05:b2:cf:a0:16:dc:cc:98:1e:0d:50:52:e0:4c:c4:
f0:d7:cc:d2:24:eb:1b:05:fe:bb:03:45:cd:7b:f7:41:0b:34:
de:8c:8b:2d:3e:99:0c:b1:3f:9b:81:e3:a5:f6:f3:5a:86:4c:
e4:70:1c:29:77:58:9e:ad:7b:c1:ab:19:d0:53:86:a8:13:c9:
21:03:e4:eb:5b:60:5b:66:5e:1e:82:fc:c8:da:9c:91:ec:92:
71:da:77:ef:bc:7c:d1:0a:a8:7d:8f:3a:69:04:48:3e:b6:b4:
97:60:53:c6:50:62:39:8e:01:7a:7e:02:80:9c:0f:e4:6b:17:
29:0e:bf:ad:d8:e5:72:45:72:3e:08:c6:f7:06:7e:4b:30:c3:
83:ee:6c:8a:07:81:bb:c7:d8:d4:1b:0b:c9:31:55:bb:a7:71:
ac:03:d5:38
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/XWEVIVXPwlTEF2FzvXo6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwODA2MTM1MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjU5ZjAxN2ZlNDRlOTM3ZTgyNDViMjBlZWIwY2U4Y2JkMzA4ZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YRmrz7778cNdEpLUa/KRRmlufco
1DEuXEx/DF2ZP/rLGK/uKKyA76tIIPM3aQPoZ3lOPKF19lbef3cbLuUAmOZJN/KO
r4DbZ4GKnWJ6HjUFxvIm4Wl7QwapV80jtFQJaqFn7Vdf6j4DI+ZJg/gkhLPs30qN
N6C3W+I3n1CSe+d56ky64eq15HZQ5ve4oMvP3nzeyEt0eWAkiIR4In9c8Y+VOsz0
GJaJLnj9n41+TUKMHNEEtQJz7stCGiX6JZNUJ98ucpjgBWuSkUAkB1r9A7Xby80D
fUnTKoBG/w+FQqd7p8eGGu/7JAoOKJfdUkx6X0rTEEu7VCnYcAAXSdIxOQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBJZ8Bf+ROk36CRbIO6wzoy9MI2EMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvRWxud0ZfNUU2VGZvSkZzZzdyRE9qTDB3allRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAZ8sqAwQA
Z8+jAwQAueEOMA0GCSqGSIb3DQEBCwUAA4IBAQACMBPoeVDKtauy0F+bnfjlEy+Y
jfm501vViTIF6iFS+U8tRFj5Uf1xKs9NnRFjhWMkai3chUpm5WUb5OG6BPxTuVzl
yFd/cidqkh7BYpJVyi+D2LBsYOUhdabT1BcFss+gFtzMmB4NUFLgTMTw18zSJOsb
Bf67A0XNe/dBCzTejIstPpkMsT+bgeOl9vNahkzkcBwpd1ierXvBqxnQU4aoE8kh
A+TrW2BbZl4egvzI2pyR7JJx2nfvvHzRCqh9jzppBEg+trSXYFPGUGI5jgF6fgKA
nA/kaxcpDr+t2OVyRXI+CMb3Bn5LMMOD7myKB4G7x9jUGwvJMVW7p3GsA9U4
-----END CERTIFICATE-----
Generated at Thu Aug 13 02:25:58 2026 by rpki-client