Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2rCLaFI9lw4oraBjkITEWartEUQ.roa
File: 2rCLaFI9lw4oraBjkITEWartEUQ.roa (raw, json)
Hash identifier: u0gx8ZrK4hTjRx06GjEZu9MFzEHEFQas1ChRoFbvUo4=
Subject key identifier: DA:B0:8B:68:52:3D:97:0E:28:AD:A0:63:90:84:C4:59:AA:ED:11:44
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1A300239D11B5B7F2A881C596D7B9797B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2rCLaFI9lw4oraBjkITEWartEUQ.roa
Signing time: Tue 03 Nov 2026 20:00:57 +0000
ROA not before: Tue 03 Nov 2026 20:00:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 48.103.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:00:23:9d:11:b5:b7:f2:a8:81:c5:96:d7:b9:79:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 3 20:00:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dab08b68523d970e28ada0639084c459aaed1144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ca:73:95:d1:94:a8:2a:2a:39:6c:4f:5f:5b:
ad:49:5a:af:4e:32:96:b5:2c:94:a6:e7:df:90:f4:
29:c2:4d:52:c6:ed:7c:00:ca:4b:50:d5:10:1b:76:
5e:73:bd:14:23:fd:8c:e6:f0:d5:da:d7:cc:75:33:
42:cf:18:ff:54:8c:38:fe:99:8b:aa:80:e4:c3:5f:
b2:a4:1b:98:7b:cf:f9:f8:4b:0f:d9:ca:ce:ef:b7:
1a:d9:bc:a7:96:ed:33:df:c6:80:b7:39:f5:2a:f6:
4b:53:0b:b3:2a:2a:09:c4:6b:bb:37:e0:ea:6b:61:
06:18:b3:06:a8:12:7a:6d:7c:b1:a6:ef:f0:be:35:
d6:a4:b7:3f:79:28:bd:b6:ac:30:6c:d6:f6:7e:cf:
98:ad:3d:2a:e9:80:25:bf:19:38:1a:a1:b8:60:69:
78:b3:34:a7:15:be:b9:4d:2d:c1:57:14:bc:e0:6d:
63:c3:c3:7b:93:42:df:b3:ef:a7:73:66:8e:45:14:
72:b7:3c:03:6b:31:70:70:f6:00:d4:ec:2a:00:93:
0e:48:09:07:41:ba:6f:8d:6e:91:40:3d:1f:d8:58:
da:01:2d:00:cb:aa:6e:43:8c:9a:ae:1a:8e:12:ce:
02:03:13:51:3f:7c:ae:f4:56:38:33:aa:fb:d1:e8:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B0:8B:68:52:3D:97:0E:28:AD:A0:63:90:84:C4:59:AA:ED:11:44
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2rCLaFI9lw4oraBjkITEWartEUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
48.103.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4e:45:dd:15:98:95:8d:57:91:fb:97:39:02:e3:cd:25:0e:
8a:6b:99:2f:b6:88:51:8d:24:e5:21:01:86:1d:3c:67:d6:41:
44:9f:da:34:7e:f2:e9:15:8c:75:43:35:34:c4:65:f9:b1:49:
c5:57:99:c1:9a:4b:95:51:78:fa:fa:2c:a4:51:33:37:08:61:
1e:47:24:f7:ef:db:38:77:2d:8f:8b:1a:06:1c:04:d6:50:a6:
ac:ef:77:22:f6:2b:f0:71:42:e3:41:59:e6:60:a8:a6:d7:86:
b5:71:d1:f2:ee:f8:90:f7:83:e4:cf:a9:da:13:11:6e:73:d5:
bf:db:c1:b1:b6:a9:21:b7:b8:84:98:46:98:29:3e:ee:1e:4a:
8f:8b:77:45:2e:18:c0:00:4f:a6:19:10:a4:9c:ff:64:46:32:
2a:0e:d0:bd:2b:d1:1a:4e:29:47:7f:19:06:41:5f:60:3b:db:
91:24:3e:a6:c6:7e:ce:01:1f:e3:0b:9d:45:3b:e0:ad:73:1c:
0c:81:a3:4c:2b:64:bf:ea:0b:3f:42:14:18:d9:f1:cb:6d:9c:
fc:09:c1:95:44:d1:37:d9:3b:3c:66:a3:83:15:cc:58:dd:41:
e8:36:e1:cc:46:ac:5d:c9:07:8e:b1:f7:e8:57:74:86:e5:e3:
71:78:41:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:43:31 2026 by rpki-client