Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BKyQoE8F81Gh7wMCm0evL92Ejpc.roa
File: BKyQoE8F81Gh7wMCm0evL92Ejpc.roa (raw, json)
Hash identifier: iH29RW9dkZ72v1NnF4tV9G1SWMz9fUcnQJVidAZ62SE=
Subject key identifier: 04:AC:90:A0:4F:05:F3:51:A1:EF:03:02:9B:47:AF:2F:DD:84:8E:97
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1ACFF70F9C7396475C878A71D6A675335
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BKyQoE8F81Gh7wMCm0evL92Ejpc.roa
Signing time: Thu 05 Nov 2026 18:36:24 +0000
ROA not before: Thu 05 Nov 2026 18:36:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 48.102.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:ff:70:f9:c7:39:64:75:c8:78:a7:1d:6a:67:53:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 5 18:36:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04ac90a04f05f351a1ef03029b47af2fdd848e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:9f:d6:20:8b:01:91:f3:33:4d:2a:67:7b:
b8:03:07:05:43:ed:20:6f:22:47:40:05:f5:7f:2f:
3d:26:5b:99:a8:78:c8:d2:7c:d5:80:1f:bf:c1:34:
f5:a6:02:c2:c3:18:97:2b:df:4d:46:89:09:32:c2:
91:08:73:b0:97:2c:9e:e1:e2:6d:e5:3a:08:22:b2:
81:ef:49:08:42:19:65:3c:38:00:5f:55:c2:29:7b:
31:67:09:33:48:e1:f2:37:e7:9b:96:7f:80:e3:ed:
85:b7:96:b7:03:c5:8f:78:5d:bc:67:ad:02:70:c4:
c2:b6:61:5b:13:46:71:66:28:20:97:6b:ba:5f:1e:
12:8f:1a:05:f6:d6:ed:87:e0:30:4d:f3:5e:2a:e0:
60:8f:c1:0b:f8:c4:a4:44:1e:ea:6b:07:44:1c:78:
14:59:0c:30:bb:da:59:2e:0c:3b:b7:34:44:65:db:
f9:f9:da:e9:15:25:c7:d3:b0:1a:aa:c5:48:e6:92:
b9:70:3d:71:97:8c:ae:06:54:33:f0:ee:da:c4:63:
1f:a7:19:ca:99:bd:a5:d6:aa:1c:a4:b6:96:56:75:
85:00:54:5c:14:79:03:1b:58:0e:b4:2c:00:90:87:
e9:83:db:03:86:78:7d:fc:2e:c9:06:ed:a6:7f:ad:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AC:90:A0:4F:05:F3:51:A1:EF:03:02:9B:47:AF:2F:DD:84:8E:97
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BKyQoE8F81Gh7wMCm0evL92Ejpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
48.102.239.0/24
Signature Algorithm: sha256WithRSAEncryption
42:71:67:c0:07:9d:45:42:d1:58:00:61:22:8e:fd:5e:59:4a:
32:58:92:ec:66:1f:dc:a5:93:5f:13:30:0c:10:23:dd:3a:7b:
8c:fa:c6:5c:70:d1:80:40:ca:0c:c2:c2:ac:c2:96:16:2b:fa:
56:3b:d0:d7:81:f4:fb:d7:78:18:7c:5c:1f:f5:8c:72:fe:e7:
9c:5f:46:9b:0a:99:8d:7b:49:a8:93:f2:25:f2:0f:af:24:e0:
77:83:3c:e1:20:47:27:0b:22:c8:8c:ff:e8:84:38:06:2b:5c:
87:3a:29:13:f5:92:af:54:40:ce:6e:f1:c8:8f:90:b4:ea:7f:
ac:4e:2d:34:6d:f2:3d:7e:aa:79:d9:13:34:6a:25:45:76:10:
cf:db:ce:7c:7f:9e:d1:b8:31:15:1a:a5:bd:d1:6d:4e:88:f9:
52:e2:e0:5e:97:40:2d:2d:b1:4b:66:4a:04:92:0e:5a:96:66:
5d:a3:be:cd:f4:6f:81:71:c4:74:16:82:6d:1a:4f:d2:9f:87:
15:e4:be:a1:9b:5c:48:5c:4d:62:f6:78:6d:f9:1a:b6:3d:0f:
91:c4:65:01:d3:28:37:e3:38:85:4c:f3:5f:13:8b:95:30:df:
df:73:dd:14:da:8b:ec:11:7c:35:a7:ec:1f:51:ac:c2:6a:76:
2a:f3:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:46 2026 by rpki-client