Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ElZgF2ZM6z__mb_FE1zcO1ijtD4.roa
File: ElZgF2ZM6z__mb_FE1zcO1ijtD4.roa (raw, json)
Hash identifier: 1lTNBrvaev2kePB4UvxqAH18COz/XLk6N35McEdT2BI=
Subject key identifier: 12:56:60:17:66:4C:EB:3F:FF:99:BF:C5:13:5C:DC:3B:58:A3:B4:3E
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD60934CF521F3A805AD317124BA357A4
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ElZgF2ZM6z__mb_FE1zcO1ijtD4.roa
Signing time: Thu 06 Aug 2026 07:45:55 +0000
ROA not before: Thu 06 Aug 2026 07:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 89.213.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:09:34:cf:52:1f:3a:80:5a:d3:17:12:4b:a3:57:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 6 07:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12566017664ceb3fff99bfc5135cdc3b58a3b43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:32:91:48:48:25:e5:7d:a4:74:f2:cf:46:
bb:7b:18:b0:82:cc:8c:fd:85:9a:4c:55:45:f3:e3:
49:f3:41:47:20:26:0a:59:0b:ed:f4:a8:18:1e:aa:
f0:97:c3:8b:33:ba:d3:ab:e2:a9:71:68:ca:d5:63:
0b:c1:66:ab:ea:9f:91:ce:20:a1:c5:43:35:2a:a2:
1e:92:31:80:3f:32:47:57:56:75:a5:53:5a:18:64:
e1:45:b0:28:87:3d:e0:12:14:af:48:b5:b4:ce:5c:
a0:4f:ba:98:ad:c8:7a:34:fb:9c:c7:06:1b:36:13:
37:7c:d1:de:27:e9:f2:fd:88:62:73:c8:56:36:a8:
a3:16:c7:28:fb:9f:12:e9:7f:87:e3:74:8b:3d:ad:
bc:24:05:01:30:dc:59:01:00:71:25:a8:c6:de:8a:
d7:ce:f1:72:35:e8:3f:37:ae:f2:92:3c:52:01:48:
61:21:76:7a:50:9a:30:6d:06:09:0a:8e:18:84:8c:
c6:a7:c2:0c:0c:f6:b1:f5:78:14:13:22:85:40:e5:
df:97:65:8b:cd:96:fd:81:5f:77:11:6b:c9:b8:20:
34:99:ab:07:bc:fe:1a:a6:ab:38:a8:ec:ed:48:06:
02:ef:47:fa:62:27:30:80:6a:d1:bd:87:79:3d:bf:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:56:60:17:66:4C:EB:3F:FF:99:BF:C5:13:5C:DC:3B:58:A3:B4:3E
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ElZgF2ZM6z__mb_FE1zcO1ijtD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.182.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7b:cc:cd:f2:0a:a3:c4:18:fc:4e:f1:d4:6b:1b:9a:79:55:
4b:4a:1f:9f:26:5e:b8:f3:b3:d4:1c:17:f2:b7:97:b7:09:a1:
a2:9f:33:7b:75:70:cf:6a:60:e3:c8:4d:ee:f3:af:ca:fc:ed:
68:2a:c7:df:47:23:7d:28:45:56:85:6b:43:49:ff:50:62:6a:
a2:b5:77:23:47:0f:cd:43:5a:de:04:79:11:72:50:73:8b:ec:
0f:e3:70:51:27:d3:46:59:1c:8a:44:2d:73:87:cb:e9:e2:42:
5b:03:b5:14:57:28:90:62:de:4c:ea:4f:f8:a0:86:ee:f2:36:
85:90:6a:9a:78:d7:35:8f:1b:c9:de:3f:57:ce:53:68:8d:07:
67:96:bd:12:75:33:a3:6b:fb:55:53:a2:87:36:99:66:aa:36:
48:76:33:71:ae:98:c5:64:85:e7:5c:cd:86:0b:36:c8:3d:48:
7d:ff:eb:fd:fb:3d:0d:c2:a6:d2:f7:ed:ba:fd:ee:a8:49:73:
de:4b:32:7f:b0:68:bf:2b:be:87:4a:6f:f9:e0:33:f4:34:88:
d5:54:65:0d:8d:bf:bf:99:fb:6d:8a:02:e5:3c:87:cb:06:7e:
16:6d:a4:40:b8:74:3c:63:d2:64:9a:06:40:b6:e8:df:b4:73:
f6:bf:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:01 2026 by rpki-client