Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/elz0WJjsYxFbofiz3y1iAAJK_EM.roa
File: elz0WJjsYxFbofiz3y1iAAJK_EM.roa (raw, json)
Hash identifier: BrIsc5PixFvDSlwXziognZwHw3nQTaQ45c/0aGBgjy0=
Subject key identifier: 7A:5C:F4:58:98:EC:63:11:5B:A1:F8:B3:DF:2D:62:00:02:4A:FC:43
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A01567EDADCE2D37A8F280972E4234415D
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/elz0WJjsYxFbofiz3y1iAAJK_EM.roa
Signing time: Tue 18 Aug 2026 15:05:27 +0000
ROA not before: Tue 18 Aug 2026 15:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 193.19.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:67:ed:ad:ce:2d:37:a8:f2:80:97:2e:42:34:41:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 18 15:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a5cf45898ec63115ba1f8b3df2d6200024afc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:af:f1:71:3a:78:6b:ef:9b:01:31:f9:df:
04:94:5a:0e:64:83:78:6b:31:6a:60:41:62:3a:01:
08:2f:30:91:18:2f:20:4c:af:79:63:90:36:c9:75:
e0:b5:b9:8c:fc:5d:41:fd:2f:23:31:86:80:84:0e:
8a:39:a1:e3:4a:a7:22:9a:16:16:1a:10:72:f2:48:
f9:27:77:a3:52:23:0e:34:be:d6:85:ca:82:c5:54:
43:86:87:20:23:00:26:29:58:7b:0d:bd:33:6f:ec:
44:58:4d:b5:6d:98:db:13:c5:07:52:2d:c9:0a:94:
2f:68:6e:7e:18:5b:84:5f:b0:49:4b:67:16:ad:96:
37:e7:17:3b:e5:ed:d2:2f:3b:74:6a:6a:89:8f:b2:
58:bc:d0:36:6e:06:41:e4:02:30:d4:88:43:8b:71:
98:cf:da:25:9d:03:17:d1:f8:0b:a9:d7:ab:df:04:
17:8a:9f:3d:99:32:de:eb:73:d5:6a:05:d7:f4:f2:
b6:d9:91:4e:34:cd:b1:45:4a:f4:c5:e6:37:ff:e5:
cf:92:61:78:92:62:c0:86:d7:5f:3e:a7:15:a4:56:
51:f0:34:e2:dc:3a:9e:8a:20:83:2b:8d:d6:74:39:
55:29:7a:84:0b:19:fd:c1:55:de:a4:8d:a4:8b:db:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5C:F4:58:98:EC:63:11:5B:A1:F8:B3:DF:2D:62:00:02:4A:FC:43
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/elz0WJjsYxFbofiz3y1iAAJK_EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.76.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:2b:3f:a4:b1:d9:96:01:cf:e5:30:7c:f5:58:3d:ed:a3:bf:
ee:6a:c5:86:6c:a0:bc:9a:a9:77:ae:d8:da:66:af:80:0f:1e:
f5:93:c5:cd:8b:58:8a:cd:9f:60:23:82:fe:93:86:13:c6:75:
35:ea:a3:ec:6d:d6:a4:ec:b2:17:9c:65:aa:a0:57:a3:23:10:
2e:9f:5b:a3:f1:da:ed:9e:11:f4:b0:b2:78:20:5e:9c:1e:c9:
c8:be:d2:ad:77:e6:b3:55:be:8e:96:1d:ca:bd:aa:ee:0e:5e:
69:98:ab:1b:6b:99:3a:4d:86:cb:96:6c:67:19:f3:54:ea:1b:
e6:04:cf:cc:f7:a4:0d:82:2b:83:ab:6a:84:ce:16:e1:56:4d:
e8:c0:d0:a2:9e:e6:8c:6d:99:a1:ef:2a:88:3f:af:94:38:33:
85:68:ed:97:b8:de:ae:b5:86:89:3f:0a:98:56:19:46:e2:a7:
03:23:3d:68:1f:b5:cf:f5:05:16:42:59:52:d7:e7:b7:3f:8f:
a5:b8:ce:4c:9a:fe:ea:3a:43:00:d7:5a:d5:47:b3:5c:52:3e:
ba:2d:82:37:0e:fc:fc:c3:33:ec:b6:51:b4:28:3c:14:07:a0:
ba:8b:bc:ee:2d:02:14:fc:ab:2e:37:c6:98:f2:8f:2c:dd:79:
81:64:a7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 01:31:49 2026 by rpki-client