Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/eLGE_51_6fXDl6v8POnsDoLbXD8.roa
File: eLGE_51_6fXDl6v8POnsDoLbXD8.roa (raw, json)
Hash identifier: 1RwsA34iJlX33Oz/snyk+pECLx2oO8VCH9UrkWAkfXo=
Subject key identifier: 78:B1:84:FF:9D:7F:E9:F5:C3:97:AB:FC:3C:E9:EC:0E:82:DB:5C:3F
Certificate issuer: /CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Certificate serial: 019F36CB590E70535D26D8A42AC886A374EF
Authority key identifier: 8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/eLGE_51_6fXDl6v8POnsDoLbXD8.roa
Signing time: Mon 06 Jul 2026 09:38:44 +0000
ROA not before: Mon 06 Jul 2026 09:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212509
IP address blocks: 2a0e:7a01::/32 maxlen: 32
2a0e:7a06::/32 maxlen: 32
2a0e:7a07::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:cb:59:0e:70:53:5d:26:d8:a4:2a:c8:86:a3:74:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Validity
Not Before: Jul 6 09:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78b184ff9d7fe9f5c397abfc3ce9ec0e82db5c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:04:ea:af:5c:6b:ca:ae:f8:a6:4e:eb:9c:09:
8f:fa:38:0d:d1:79:b9:e9:7a:60:43:6c:bf:fa:61:
e7:eb:e2:6e:87:a3:6a:55:41:38:54:83:82:ea:4d:
f6:0e:be:46:8e:a7:f4:9a:08:6d:04:cb:2c:b9:1c:
ef:92:72:52:f5:1c:44:1b:d3:ff:41:2c:51:e6:cb:
ee:5e:d6:ce:24:2e:98:14:61:ed:46:49:b3:5c:ca:
38:67:a3:9b:94:95:dd:ce:d1:b2:30:6e:6f:e6:5b:
87:9c:ca:e7:6e:f3:ea:3e:46:11:f6:ab:5c:ba:2a:
e0:77:b3:4b:43:a9:67:39:c0:62:35:25:27:3e:9e:
c1:0c:84:27:4d:30:1e:f0:c6:6a:dd:c8:6f:b6:2f:
29:f4:3c:4c:2c:82:f0:d4:a0:e5:b3:0e:6c:38:6d:
6b:5b:2f:50:48:d4:11:95:2f:59:d1:6a:e0:4f:cb:
c5:04:a7:74:7a:ba:16:4f:95:dd:e1:75:48:24:e6:
76:5a:a2:d3:51:18:37:e7:ea:a9:36:b5:b1:ce:bc:
82:54:19:8e:9e:ec:4e:58:93:17:06:52:df:34:c2:
f5:41:0c:e2:df:f9:b7:79:a4:17:aa:aa:e8:92:72:
28:d5:cd:bf:f7:35:80:c7:b5:ba:9c:29:d1:37:30:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B1:84:FF:9D:7F:E9:F5:C3:97:AB:FC:3C:E9:EC:0E:82:DB:5C:3F
X509v3 Authority Key Identifier:
keyid:8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/eLGE_51_6fXDl6v8POnsDoLbXD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7a01::/32
2a0e:7a06::-2a0e:7a07:3fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5f:15:95:a8:a0:a7:dd:33:2c:68:25:ce:91:06:4e:38:29:d6:
3d:ee:88:89:70:f3:fb:2d:0a:7f:a4:c1:78:51:ba:71:35:40:
a3:af:42:6d:83:82:dd:69:31:34:b1:b6:5a:5a:2e:e3:72:81:
22:01:4e:7c:c1:e0:5a:7e:49:e0:d0:cd:6a:62:6a:54:36:73:
c9:5c:2e:f1:89:d6:fa:12:01:c7:73:9a:6a:e7:bd:52:54:95:
32:b0:bd:ee:ae:e4:f9:48:6c:86:0a:2c:74:60:db:82:d1:f5:
06:92:85:6a:5e:14:3b:69:16:cd:9c:88:9e:43:b1:3e:dd:6f:
c8:09:f4:f0:40:aa:40:b6:84:e3:be:48:42:d3:b9:c4:57:d0:
c3:5e:ae:21:96:77:e8:5e:24:0f:24:e8:85:85:f0:7d:ea:0c:
e0:07:51:f7:e9:0e:32:23:5c:03:70:f2:62:b1:db:3d:ea:37:
1b:20:8d:16:27:92:59:ea:9a:35:4b:6c:fc:91:84:1c:7a:cc:
c5:6b:a7:bd:1f:0f:8e:c5:36:55:77:cf:e4:47:45:56:4a:62:
27:3f:13:e7:1b:9d:f2:a5:d9:02:f9:d6:a8:fc:53:23:03:1a:
f6:15:6f:39:43:6a:4e:ee:fd:92:38:8b:ad:48:af:25:75:89:
ce:34:ec:a2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ82y1kOcFNdJtikKsiGo3TvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjljNjI2YjNjZDRiZGMyMjQxZWVkMzQyZjQ4ODNlZmI1
NjU0YTAwHhcNMjYwNzA2MDkzODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGIxODRmZjlkN2ZlOWY1YzM5N2FiZmMzY2U5ZWMwZTgyZGI1YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gTqr1xryq74pk7rnAmP+jgN0Xm5
6XpgQ2y/+mHn6+Juh6NqVUE4VIOC6k32Dr5Gjqf0mghtBMssuRzvknJS9RxEG9P/
QSxR5svuXtbOJC6YFGHtRkmzXMo4Z6OblJXdztGyMG5v5luHnMrnbvPqPkYR9qtc
uirgd7NLQ6lnOcBiNSUnPp7BDIQnTTAe8MZq3chvti8p9DxMLILw1KDlsw5sOG1r
Wy9QSNQRlS9Z0WrgT8vFBKd0eroWT5Xd4XVIJOZ2WqLTURg35+qpNrWxzryCVBmO
nuxOWJMXBlLfNML1QQzi3/m3eaQXqqroknIo1c2/9zWAx7W6nCnRNzAQ4wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHixhP+df+n1w5er/Dzp7A6C21w/MB8GA1UdIwQY
MBaAFIu5xiazzUvcIkHu00L0iD77VlSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTduR0pyUE5TOXdpUWU3VFF2U0lQdnRXVktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lOTM3NDItNmNkNi00YTUwLTgxYjEt
YzE1MjFiZGYzNDRkLzEvZUxHRV81MV82ZlhEbDZ2OFBPbnNEb0xiWEQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9lOTM3NDItNmNkNi00YTUwLTgxYjEtYzE1MjFiZGYzNDRk
LzEvaTduR0pyUE5TOXdpUWU3VFF2U0lQdnRXVktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwUAKg56ATAP
AwUBKg56BgMGBioOegcAMA0GCSqGSIb3DQEBCwUAA4IBAQBfFZWooKfdMyxoJc6R
Bk44KdY97oiJcPP7LQp/pMF4UbpxNUCjr0Jtg4LdaTE0sbZaWi7jcoEiAU58weBa
fkng0M1qYmpUNnPJXC7xidb6EgHHc5pq571SVJUysL3uruT5SGyGCix0YNuC0fUG
koVqXhQ7aRbNnIieQ7E+3W/ICfTwQKpAtoTjvkhC07nEV9DDXq4hlnfoXiQPJOiF
hfB96gzgB1H36Q4yI1wDcPJisds96jcbII0WJ5JZ6po1S2z8kYQceszFa6e9Hw+O
xTZVd8/kR0VWSmInPxPnG53ypdkC+dao/FMjAxr2FW85Q2pO7v2SOIutSK8ldYnO
NOyi
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:54:58 2026 by rpki-client