Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/ELrl8olQCOjBgtYtd6-QXhlVd-E.roa
File: ELrl8olQCOjBgtYtd6-QXhlVd-E.roa (raw, json)
Hash identifier: /coJPkuXe83allyc6nuE90bNhh5t3pjue0VR4IN9F7M=
Subject key identifier: 10:BA:E5:F2:89:50:08:E8:C1:82:D6:2D:77:AF:90:5E:19:55:77:E1
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A0EC102DCAC7D58EA400F3E66E8E7A97F2
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/ELrl8olQCOjBgtYtd6-QXhlVd-E.roa
Signing time: Tue 29 Sep 2026 07:27:58 +0000
ROA not before: Tue 29 Sep 2026 07:27:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 87.58.193.0/24 maxlen: 24
87.58.194.0/24 maxlen: 24
150.237.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:10:2d:ca:c7:d5:8e:a4:00:f3:e6:6e:8e:7a:97:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Sep 29 07:27:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10bae5f2895008e8c182d62d77af905e195577e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:fe:e9:10:73:63:0e:fe:f0:b8:24:16:17:
34:5d:1d:95:f8:59:83:14:8d:22:3f:3b:5b:c6:fb:
dd:a0:52:e6:4c:59:11:3c:15:fa:01:ef:19:27:4c:
17:8c:7e:e9:09:42:c9:10:f8:e9:b6:85:17:b4:86:
a8:ed:39:7b:86:67:6c:12:ef:0b:ca:73:19:6e:5a:
5c:78:3b:ea:b1:7e:d1:51:48:ba:4f:2a:b1:3c:c1:
99:14:d8:b0:83:9b:1f:65:fb:71:52:42:fd:c2:01:
e8:15:05:f1:ae:cf:37:17:1a:87:c3:fb:0d:6a:93:
77:3e:e6:bc:0e:14:d4:27:00:ef:f0:fa:58:53:d2:
8c:01:26:1a:d8:24:f8:23:1c:d9:c3:71:0a:f0:bb:
5c:28:a8:9b:a5:df:c6:87:9f:78:d3:20:92:24:74:
68:e0:5b:83:ca:5b:0e:5f:f2:3c:24:b7:05:b6:a6:
c7:84:3e:be:63:e6:87:4c:64:a4:40:c9:30:f5:de:
4f:c6:41:cd:31:41:d8:e1:e0:26:ae:62:39:f5:40:
b5:b3:60:1e:2a:0f:c6:01:aa:17:11:1a:0e:82:34:
88:e6:01:4d:b3:dd:dc:a3:d8:4f:54:1f:86:85:be:
02:eb:d1:8e:05:3b:fb:65:ab:a4:02:d4:78:05:b6:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BA:E5:F2:89:50:08:E8:C1:82:D6:2D:77:AF:90:5E:19:55:77:E1
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/ELrl8olQCOjBgtYtd6-QXhlVd-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.193.0-87.58.194.255
150.237.67.0/24
Signature Algorithm: sha256WithRSAEncryption
79:90:93:c8:1a:d9:ee:00:23:f2:85:c1:90:82:db:65:c9:20:
0f:a8:3d:a8:67:7d:ed:36:90:a0:70:37:0e:cd:56:f1:37:14:
5b:23:ef:77:81:0f:c5:10:81:3c:3c:1b:45:eb:b2:23:07:9b:
fc:11:2c:da:11:6c:8a:28:de:c4:22:2b:bd:6d:61:46:6e:44:
7a:86:1c:cc:1a:ec:ed:83:6a:6d:b6:d7:5b:85:16:72:ff:9e:
9b:37:19:7a:f6:33:ab:4f:d3:d4:3b:2c:fe:9e:7d:d3:fb:75:
83:f1:cd:ae:5b:7b:f3:5c:55:bf:69:0c:cd:6e:d3:21:30:77:
c7:6b:b2:f4:8e:4b:6f:71:66:45:36:5c:14:6a:a1:e6:e8:c7:
8f:af:0c:e3:02:70:eb:dc:cf:b7:4d:43:16:09:0b:31:4a:63:
5e:36:0c:e9:b0:27:31:79:03:9f:f4:7e:ae:88:06:f6:1c:cc:
f4:6f:13:49:3d:21:6a:bc:da:3e:35:02:73:07:d1:ef:5d:6a:
73:1e:9d:ae:5f:1f:18:17:bd:ef:83:78:ac:ef:26:66:b5:dd:
3d:7c:7f:b1:75:7b:ed:48:06:42:63:f2:1b:f6:a2:9e:bf:ef:
88:64:eb:92:35:84:85:ac:4a:5b:e2:8c:7c:8f:24:51:4a:e8:
9c:b1:0e:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:45:04 2026 by rpki-client