Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/h087lucF2ivPyD3F1D3_NLkhOb8.roa
File: h087lucF2ivPyD3F1D3_NLkhOb8.roa (raw, json)
Hash identifier: deWexSQgKEOrc0A416IV+spDrpGZpTVS9EaD2+rgd3g=
Subject key identifier: 87:4F:3B:96:E7:05:DA:2B:CF:C8:3D:C5:D4:3D:FF:34:B9:21:39:BF
Certificate issuer: /CN=a610371070667730aaf5902e9f8c6340800eec88
Certificate serial: 019F2368E0DFD1734D42125E77707138C10B
Authority key identifier: A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/h087lucF2ivPyD3F1D3_NLkhOb8.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6697
IP address blocks: 2a10:641::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e0:df:d1:73:4d:42:12:5e:77:70:71:38:c1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a610371070667730aaf5902e9f8c6340800eec88
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=874f3b96e705da2bcfc83dc5d43dff34b92139bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:2e:02:3e:15:76:88:91:35:81:91:a0:ab:
75:e2:7c:0c:d0:9f:1e:57:90:bf:8e:36:3e:17:a0:
1e:64:41:b3:6c:e5:27:ce:bf:ff:e6:1e:f1:0b:51:
18:61:b4:4f:05:bc:47:0d:a7:52:3e:6b:23:ac:86:
56:e0:96:20:86:91:50:b5:7d:7f:4d:ee:e2:a6:6d:
f6:d5:8e:fd:44:d4:13:d9:44:8f:fe:9e:2f:a8:df:
77:0b:b7:ee:e0:a5:90:fa:3d:07:93:a2:68:03:0d:
f5:65:c4:04:93:9b:d7:b1:bf:23:cf:93:22:09:f5:
c8:be:5a:28:d4:f0:f5:6b:53:ac:87:2d:b3:9c:59:
bd:85:e0:d4:db:bc:dd:8a:92:d3:cc:1d:cd:83:f7:
f6:52:e0:ec:a1:04:7a:0f:58:9a:97:1f:e8:a7:f4:
09:9e:1d:b1:3d:8e:bc:2a:5c:c8:11:07:03:42:35:
68:c6:86:4f:c1:96:97:9c:42:1e:91:dd:f6:c5:de:
32:52:c7:3d:44:31:8a:18:d4:b0:7c:9b:b6:84:a7:
19:36:d1:97:26:be:23:46:1d:76:c7:87:47:98:07:
60:c0:43:d0:33:a0:ef:64:c9:e2:86:51:7a:76:51:
8b:67:61:ac:48:71:47:5a:9b:ff:60:56:2f:60:27:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4F:3B:96:E7:05:DA:2B:CF:C8:3D:C5:D4:3D:FF:34:B9:21:39:BF
X509v3 Authority Key Identifier:
keyid:A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/h087lucF2ivPyD3F1D3_NLkhOb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:641::/32
Signature Algorithm: sha256WithRSAEncryption
65:20:04:47:65:f9:4e:81:cf:98:77:2f:ca:ac:ff:88:75:fd:
34:0b:3c:e7:63:41:f7:fb:a0:4e:75:d1:77:12:cf:75:f7:4f:
f3:44:9f:bc:c4:b5:ab:44:1b:23:fe:78:ad:d5:53:05:d5:21:
00:bf:18:9f:0c:8a:ef:c2:72:0f:b2:66:c2:aa:9e:c6:b3:f3:
7c:9a:60:64:6b:e3:e4:0d:15:6b:8e:2c:e6:24:57:29:88:9a:
9a:26:d6:7b:4f:95:a2:4a:b7:71:ea:e2:ef:e0:d7:af:84:b0:
9c:62:e5:53:0e:a6:95:05:41:76:3f:b6:97:8d:7c:cc:6a:7a:
d4:35:7d:0e:90:27:b0:2e:0a:e1:e0:68:9d:02:fb:d5:a2:aa:
5d:24:88:9b:45:1d:e8:63:5c:a3:4a:54:44:eb:4e:44:0a:80:
35:25:5a:9e:3b:38:4e:8d:31:62:5c:26:5e:22:51:ab:c8:6f:
94:6d:25:01:de:55:91:2c:d9:80:7e:ba:a1:b1:8a:17:41:89:
06:52:f1:0e:ae:49:94:64:d5:1f:9a:da:67:a5:b1:63:a3:27:
d1:4a:78:a2:70:e3:f0:26:05:14:9c:f4:da:fc:c2:23:72:1a:
8b:94:0d:0d:32:20:84:87:ba:6a:81:28:64:ed:4e:49:2e:c4:
9b:82:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:34 2026 by rpki-client