Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ElXvSvuLFTsYAmvz_TBH6ZJm0iQ.roa
File: ElXvSvuLFTsYAmvz_TBH6ZJm0iQ.roa (raw, json)
Hash identifier: 3gwzPqGe9jISnECuIn7U7ob+0WRbHpl5+HRdhbPVSuc=
Subject key identifier: 12:55:EF:4A:FB:8B:15:3B:18:02:6B:F3:FD:30:47:E9:92:66:D2:24
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FD0723E7A03C093D8E017579EAB91D1DF
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ElXvSvuLFTsYAmvz_TBH6ZJm0iQ.roa
Signing time: Wed 05 Aug 2026 05:42:55 +0000
ROA not before: Wed 05 Aug 2026 05:42:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29330
IP address blocks: 217.175.206.0/24 maxlen: 24
2a01:190:15e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:72:3e:7a:03:c0:93:d8:e0:17:57:9e:ab:91:d1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Aug 5 05:42:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1255ef4afb8b153b18026bf3fd3047e99266d224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:f6:e0:65:fb:9c:55:6e:3d:01:b9:b3:d0:
41:59:35:d1:42:5e:7c:71:72:b3:c7:1e:db:d1:ce:
b2:4e:72:53:68:b9:65:e4:08:10:d2:8d:1d:9c:f8:
9c:7a:e7:58:ff:46:8d:18:52:e4:21:f4:36:3e:9c:
87:6d:ae:0a:63:18:08:b1:09:73:f4:96:4d:ee:1c:
ed:46:7f:81:4d:9c:7f:f5:c4:7a:4a:5c:a0:a3:3e:
0d:14:36:b0:ab:2c:53:c9:6d:d2:86:75:66:5c:69:
20:be:3c:77:53:19:05:06:68:93:81:75:6c:6a:95:
75:c1:8f:04:90:69:db:f5:4e:c7:01:27:8b:92:ef:
09:4d:17:68:37:2e:ca:8b:f0:32:7e:95:1a:e1:24:
99:27:98:15:50:d0:99:19:fd:70:9c:6e:bf:73:73:
5b:20:ef:32:ae:7c:2d:3f:01:bc:14:99:62:c0:86:
9d:dd:61:ca:56:29:ef:b7:2b:ee:ba:95:e8:a6:0b:
6a:e3:24:0f:c7:f0:ee:87:a3:9c:8a:74:33:e4:4f:
6d:b5:12:5d:a0:0c:0f:89:16:54:b4:95:23:e5:29:
91:58:8f:38:d6:c5:6b:ff:ec:b7:cd:1c:7a:b1:fd:
53:78:d4:ce:c7:d4:ee:ae:4d:37:a6:41:a9:c3:cf:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:55:EF:4A:FB:8B:15:3B:18:02:6B:F3:FD:30:47:E9:92:66:D2:24
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/ElXvSvuLFTsYAmvz_TBH6ZJm0iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.175.206.0/24
IPv6:
2a01:190:15e8::/48
Signature Algorithm: sha256WithRSAEncryption
5a:48:c1:b6:e1:56:70:45:14:b5:2b:41:68:ae:27:45:ab:b0:
e1:5f:4c:c0:e4:4e:b6:d9:37:fc:8b:5e:a3:42:9f:ad:5f:6a:
5a:4f:4f:51:a5:e3:b0:74:15:be:51:39:8d:47:05:e1:a6:fc:
f2:65:58:2e:16:5b:c5:df:3e:0d:b3:4e:3d:49:07:31:50:48:
c1:61:9c:6c:77:b1:31:bf:e8:be:67:31:12:0d:71:1c:a9:18:
0d:ec:91:a6:18:2b:fe:bc:ea:39:da:1f:f2:25:ce:a3:26:86:
00:0a:85:83:02:b0:27:bf:28:2f:9f:b1:17:b5:dd:ad:bd:b1:
f3:b7:49:a7:37:b6:27:0e:42:1b:04:b7:ec:39:46:38:bc:70:
e8:9d:62:3f:1f:0d:12:16:40:78:39:36:c9:c4:30:c4:24:e6:
59:b2:15:08:e5:e6:cb:f0:31:f7:a9:d6:f4:3b:a9:0a:a7:71:
de:91:8b:c0:96:cb:5a:9b:6a:4c:5c:1f:48:73:88:36:6c:0b:
78:f0:55:cd:af:6e:36:1e:73:8b:e6:76:b3:7b:4a:9a:9a:5f:
fe:9b:ae:e8:13:5d:7f:23:f7:96:96:57:1b:fa:4e:46:77:38:
ec:1d:16:a5:b4:67:f1:a6:98:ca:88:58:4a:d2:ec:c4:6e:87:
1c:f7:7d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:30:15 2026 by rpki-client