Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eCLKbvyL5tUI7ejgKkCAzeSRIEI.roa
File: eCLKbvyL5tUI7ejgKkCAzeSRIEI.roa (raw, json)
Hash identifier: EPBaSVgypwuuynOYkhJAQ7VjUmcu7jBXYxRJgEoRlcM=
Subject key identifier: 78:22:CA:6E:FC:8B:E6:D5:08:ED:E8:E0:2A:40:80:CD:E4:91:20:42
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1C6EF594C8A98967D821ADD72E710C861
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eCLKbvyL5tUI7ejgKkCAzeSRIEI.roa
Signing time: Tue 10 Nov 2026 19:28:57 +0000
ROA not before: Tue 10 Nov 2026 19:28:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16125
IP address blocks: 48.103.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:ef:59:4c:8a:98:96:7d:82:1a:dd:72:e7:10:c8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 10 19:28:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7822ca6efc8be6d508ede8e02a4080cde4912042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:10:47:d2:d5:cd:5e:d9:c8:08:91:b2:3b:d2:
9e:98:05:93:f3:be:3d:e3:46:47:f5:6f:1e:06:08:
9f:42:85:45:59:4f:67:48:2d:1a:77:f2:2a:fd:bb:
eb:1e:8f:7a:72:0d:a6:e2:f9:2a:b7:6f:3d:46:4f:
ca:8c:e7:59:47:3f:6b:47:2d:32:ad:31:e4:2d:23:
38:e0:68:db:5b:ee:5b:72:b4:32:12:0e:6a:2c:19:
1e:18:73:48:bf:20:51:aa:9d:0a:fe:12:27:c2:30:
54:8f:f4:4f:cc:92:8d:dd:f1:0e:96:14:1d:80:12:
81:f5:9e:21:2a:8b:15:79:11:26:3a:a6:c5:04:9f:
e7:af:e3:86:a6:ff:7c:14:35:a4:85:bb:9c:eb:80:
b0:6c:6f:de:82:2f:e9:c6:8b:70:b1:68:53:66:ec:
45:23:f8:20:63:4a:d6:99:da:cc:97:69:da:51:7e:
b5:94:7d:a8:3e:7e:af:a5:81:77:4e:a7:d3:ea:98:
cf:ff:14:7d:4e:9e:e0:1c:79:28:9a:58:92:78:cc:
88:81:6a:73:1d:8f:83:a2:5b:a0:23:83:2f:7f:30:
d6:8c:5a:f7:a5:b6:02:ef:55:69:33:1d:14:03:ed:
e4:21:0f:6b:70:82:be:6f:9a:ba:d8:5e:76:80:3e:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:22:CA:6E:FC:8B:E6:D5:08:ED:E8:E0:2A:40:80:CD:E4:91:20:42
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eCLKbvyL5tUI7ejgKkCAzeSRIEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
48.103.147.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d6:d5:5a:71:f0:4f:58:ef:dd:1d:cf:ff:9e:c3:23:44:71:
dc:f1:4d:94:48:ae:08:d3:7e:a2:b6:cf:fa:bd:5b:a0:d3:df:
eb:12:a5:fa:6e:8c:22:fd:a1:18:0e:04:c3:1a:3d:51:4c:e2:
e2:52:03:8f:af:f9:e6:64:df:a5:56:c6:cb:55:5a:86:58:74:
24:c6:da:70:a0:48:6d:18:7c:0c:02:f9:ce:55:04:7b:d3:3c:
f0:fc:d5:15:a5:57:81:00:9a:1b:8c:1f:78:5b:6c:33:3d:44:
f2:24:a3:4b:e8:e0:d0:ce:4f:01:9e:46:50:bf:de:15:cf:83:
98:12:3d:81:66:bd:8b:13:3b:fb:90:f6:5d:7c:4d:e6:a1:20:
e7:8c:ff:7b:03:25:c1:5d:42:0f:bb:a2:68:b8:64:91:ed:13:
21:42:f9:ab:52:41:54:90:41:a1:25:c0:e7:2a:4e:fe:36:da:
9e:32:ef:ea:e2:04:f6:f6:3d:df:ea:12:98:4b:88:e9:09:53:
d8:34:94:3b:c4:b4:15:69:8b:89:af:87:f2:9e:80:b1:5c:d2:
c3:0c:b5:74:3d:da:86:9c:44:c5:c7:df:41:fa:01:b6:3c:34:
c5:ba:dd:1c:4b:d0:18:47:02:65:ab:3f:8c:8e:80:af:92:ce:
9a:95:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:22 2026 by rpki-client