Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ElYL6q7yDvrEPxp_j-see7XhywE.roa
File: ElYL6q7yDvrEPxp_j-see7XhywE.roa (raw, json)
Hash identifier: OiASBpEC0tGSj0kYKPb8TsM08N1RhgM4ZZh/E4xN/0E=
Subject key identifier: 12:56:0B:EA:AE:F2:0E:FA:C4:3F:1A:7F:8F:EB:1E:7B:B5:E1:CB:01
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 01A120D9A25B489CA4FD1C59013AF53563E8
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ElYL6q7yDvrEPxp_j-see7XhywE.roa
Signing time: Fri 09 Oct 2026 13:28:15 +0000
ROA not before: Fri 09 Oct 2026 13:28:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29695
IP address blocks: 193.41.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:d9:a2:5b:48:9c:a4:fd:1c:59:01:3a:f5:35:63:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Oct 9 13:28:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12560beaaef20efac43f1a7f8feb1e7bb5e1cb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:8b:1b:eb:2f:3a:5d:0a:1b:11:5c:0d:c3:
dd:b8:45:f7:01:ce:4b:cd:c8:4e:02:c7:c7:84:7c:
04:42:a5:7b:13:c6:9d:c0:94:16:09:bf:78:eb:22:
f1:57:d4:fe:9e:dc:34:b9:56:2f:8f:a5:d3:7a:1a:
87:ea:79:ad:17:3c:c2:38:56:5a:8c:27:da:41:fb:
c5:f8:f8:46:b0:dc:ca:73:22:cd:85:55:2b:27:e3:
6f:16:97:72:21:a3:81:e6:62:60:fe:f4:7c:c0:60:
c7:fd:8c:be:1b:91:8d:c7:ad:01:4e:a8:26:bf:89:
e1:b7:78:f1:2f:e8:cd:da:2b:cc:25:e5:6e:7a:d3:
31:95:68:db:22:74:1a:9a:42:cb:8b:66:41:25:85:
63:7f:e0:c0:95:4b:d6:a6:de:96:c2:8b:2e:0c:55:
cb:a3:b7:31:fd:52:e2:a7:64:ac:3f:3a:55:79:c6:
17:b9:0c:8d:b2:6f:fc:40:99:e4:d6:29:f9:bd:ce:
35:63:b5:00:02:8d:e5:de:d1:eb:fb:d3:df:e9:62:
c1:fa:b9:0b:b9:a0:2d:8f:23:36:31:32:20:94:f5:
e6:73:dc:d7:39:23:90:dd:3f:fb:ed:1e:78:53:68:
05:a2:3f:df:b6:09:50:d1:12:66:50:7f:d1:9b:14:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:56:0B:EA:AE:F2:0E:FA:C4:3F:1A:7F:8F:EB:1E:7B:B5:E1:CB:01
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ElYL6q7yDvrEPxp_j-see7XhywE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d1:7e:da:4d:97:97:01:21:a6:5b:ab:4b:1a:47:be:4c:6f:
63:d7:b3:14:0d:00:0d:57:86:c7:45:d9:3c:ea:64:81:e2:7a:
54:0b:b0:20:79:3a:21:2d:72:e1:ba:30:25:48:68:d4:fd:35:
82:dd:2d:7d:6e:a1:a8:7b:7f:fa:20:0a:40:b0:01:46:27:7d:
68:69:67:cd:51:3f:5a:80:fa:8a:cf:78:50:8b:37:9e:f3:b1:
7a:3f:d6:56:ed:c3:03:d3:ba:12:8b:9e:69:87:a3:2e:e9:1d:
80:3a:a7:34:5b:df:81:5e:2a:7f:cd:e8:6e:11:f0:93:6e:58:
00:b2:f3:df:98:a3:e8:0a:51:cf:90:b3:01:f8:e7:43:45:e3:
18:a3:f2:de:19:cb:e8:49:a9:4c:9b:3a:07:be:0b:31:15:af:
73:ae:19:b9:dc:c5:80:81:74:07:7c:f0:97:86:1c:98:6b:3d:
23:a9:4d:6a:e0:8b:e0:7a:15:8d:1d:1d:69:a0:d4:19:d5:9e:
20:8c:37:2e:f2:86:1c:e7:46:b4:cb:d1:48:e1:44:6c:51:18:
fe:4d:b7:d0:1f:c2:af:03:25:3d:ea:a8:53:b9:64:d0:f6:20:
e9:36:05:55:82:88:b0:ed:69:b4:d6:de:8d:86:13:00:84:0c:
f4:ea:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:08:25 2026 by rpki-client