Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/dZDlbqsnapFIwj1HUHLInqN8JVw.roa
File: dZDlbqsnapFIwj1HUHLInqN8JVw.roa (raw, json)
Hash identifier: bs/eDOvdIuJ1snvbff8tQ4iMRziNZ2Vwxnsh8r7rh+0=
Subject key identifier: 75:90:E5:6E:AB:27:6A:91:48:C2:3D:47:50:72:C8:9E:A3:7C:25:5C
Certificate issuer: /CN=a610371070667730aaf5902e9f8c6340800eec88
Certificate serial: 019F2368E1A62E407ED947DB7BC1951C5797
Authority key identifier: A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/dZDlbqsnapFIwj1HUHLInqN8JVw.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12400
IP address blocks: 185.117.96.0/24 maxlen: 24
2a10:642::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e1:a6:2e:40:7e:d9:47:db:7b:c1:95:1c:57:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a610371070667730aaf5902e9f8c6340800eec88
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7590e56eab276a9148c23d475072c89ea37c255c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:23:4b:5f:21:a6:8f:9f:fb:48:5f:4f:c5:
8e:c7:2b:0f:14:ca:e1:83:9e:6f:7a:5f:78:83:6f:
38:cf:4b:63:79:ec:b0:50:3a:2d:63:85:f6:32:58:
9f:f3:83:33:53:82:57:90:4c:65:1b:c1:85:95:0c:
6c:73:6b:54:91:1b:43:fa:23:12:1d:8e:2f:5d:be:
3e:c6:31:0f:85:4e:a3:16:e6:45:2a:44:f0:55:a3:
0e:c1:fd:52:72:3f:e7:1b:08:27:09:60:e1:14:53:
cc:43:e3:93:0a:d0:f9:b9:06:df:80:33:f3:6c:92:
cc:e2:6f:ec:d7:a6:68:bf:c1:31:79:70:9d:6a:e6:
b1:fd:0b:e8:78:f0:14:18:be:b2:8b:3f:9d:33:84:
31:f2:b6:57:25:2c:94:f8:da:0e:1b:ba:0b:ac:30:
a3:df:2c:8d:d6:95:cf:b8:c6:bd:3e:9f:f5:c6:a3:
67:87:08:27:6d:89:f0:1e:80:91:d0:d7:72:7e:7a:
8e:9f:d5:a4:9c:af:4f:b9:0b:4d:4d:5f:6f:05:c2:
be:1e:69:e3:06:02:4c:bc:fe:4f:bf:3f:7e:8c:ce:
a6:44:14:73:a8:83:e3:53:41:c0:42:c8:c2:8c:54:
50:69:4c:48:7d:6c:84:fc:e7:5e:24:ad:62:bd:a1:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:90:E5:6E:AB:27:6A:91:48:C2:3D:47:50:72:C8:9E:A3:7C:25:5C
X509v3 Authority Key Identifier:
keyid:A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/dZDlbqsnapFIwj1HUHLInqN8JVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.96.0/24
IPv6:
2a10:642::/32
Signature Algorithm: sha256WithRSAEncryption
91:a8:b1:c3:21:2a:33:d5:96:4a:40:b0:be:ca:d5:4c:01:4c:
4f:d7:5e:26:b6:1b:09:6b:7c:48:2d:43:f3:12:ad:55:01:6e:
a6:1c:69:ab:20:fb:59:ee:57:28:de:08:2b:e6:bd:5c:9d:95:
10:7f:bd:94:b9:69:25:58:45:2c:c0:7f:3d:c7:4f:3f:56:41:
b6:1a:0b:a5:a3:c2:44:f6:98:af:ac:cf:ee:3f:4e:ca:31:5c:
59:d7:5a:28:6e:85:a4:49:f8:1c:a2:06:c1:54:0c:00:7c:6c:
ee:6a:4f:d1:0b:31:5f:bf:82:4c:10:72:68:b6:5b:a1:dc:14:
06:de:d7:f6:46:a9:2c:e2:2a:35:0f:2b:b1:6e:e6:d8:d8:79:
97:e6:36:66:14:17:eb:4b:a2:72:79:08:ec:a4:c6:76:cc:fe:
8b:53:5e:96:95:ad:0d:8c:29:e9:82:eb:8d:7d:14:34:1c:08:
63:03:dc:4f:f2:18:bd:d5:92:c4:32:63:3e:3a:b6:da:74:e5:
39:54:3a:22:1a:e4:19:dd:67:fb:21:ae:48:04:07:fb:aa:bf:
54:58:ca:f4:ab:a0:de:fc:2c:e2:38:a6:f4:2e:06:fc:0b:cd:
ea:fc:16:7c:c9:06:a7:5f:e4:5a:07:4d:c2:b6:72:93:76:27:
ab:bb:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:21 2026 by rpki-client