Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/kdSBI_9pb4sru0XZjIhpyOoJDTA.roa
File: kdSBI_9pb4sru0XZjIhpyOoJDTA.roa (raw, json)
Hash identifier: AahhJx6gs1/aCr1ScQXRa/wo3nSdwYac1ZF6rIEWe98=
Subject key identifier: 91:D4:81:23:FF:69:6F:8B:2B:BB:45:D9:8C:88:69:C8:EA:09:0D:30
Certificate issuer: /CN=a610371070667730aaf5902e9f8c6340800eec88
Certificate serial: 019F2368E04F0BA4472BAB4D7E68F9815B74
Authority key identifier: A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/kdSBI_9pb4sru0XZjIhpyOoJDTA.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1680
IP address blocks: 2a10:640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e0:4f:0b:a4:47:2b:ab:4d:7e:68:f9:81:5b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a610371070667730aaf5902e9f8c6340800eec88
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91d48123ff696f8b2bbb45d98c8869c8ea090d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:a4:9b:33:57:a7:09:3b:7d:5d:ed:12:09:
16:c3:d3:6b:e6:77:75:c1:73:98:89:7d:a6:cf:2a:
71:3c:dc:82:47:24:72:ea:66:36:bd:d8:44:fb:2e:
d1:1e:c2:dd:65:9c:d4:a0:46:9d:81:81:a9:aa:38:
18:64:3e:02:b8:b2:a4:db:6d:50:04:36:e1:1d:9a:
3c:32:ee:25:80:c6:0b:5a:cb:92:13:66:72:2b:0d:
07:37:c8:0f:99:88:a8:c7:14:cb:59:9b:60:ee:99:
5a:bf:3b:50:1a:a2:c6:2b:88:df:bd:f4:35:6a:2d:
08:f4:4d:ff:d0:8a:e2:01:33:49:67:53:7e:12:02:
2a:4c:21:8c:ab:92:22:0d:06:10:d1:b9:9e:2f:ca:
d1:90:b5:e5:43:ef:63:f6:12:07:7d:dd:3a:94:84:
8d:00:86:38:a2:8f:be:3a:86:34:e8:55:6b:39:8d:
4a:57:21:a7:ef:7b:6c:af:03:5a:98:de:9c:fb:4e:
69:24:6e:e4:1a:cf:83:44:e9:a9:12:d0:82:01:ff:
6e:50:dd:22:66:be:22:d7:99:d1:4a:9f:cf:32:45:
d9:16:e5:52:1e:39:77:92:6a:03:bb:86:bf:eb:c6:
19:c7:c7:ff:d6:b7:45:99:9c:2a:dd:1e:c6:83:5e:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D4:81:23:FF:69:6F:8B:2B:BB:45:D9:8C:88:69:C8:EA:09:0D:30
X509v3 Authority Key Identifier:
keyid:A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/kdSBI_9pb4sru0XZjIhpyOoJDTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:640::/32
Signature Algorithm: sha256WithRSAEncryption
8f:f4:34:43:40:56:71:34:9d:d9:e8:ff:34:d2:5e:14:f0:6b:
4d:3c:80:74:20:1c:71:f0:a8:27:d9:5d:12:7f:3c:60:33:b1:
9b:4e:8b:e8:09:51:76:23:ac:09:8b:1c:d1:53:8d:a8:48:19:
4b:77:66:b2:a5:5c:0f:5e:85:24:a5:38:12:fb:42:c5:78:d8:
a2:e8:f0:a2:62:31:51:42:b4:37:36:93:45:5a:2c:e3:38:5d:
02:25:98:c3:7f:de:c5:a3:ef:55:69:c2:ba:04:44:e0:52:0e:
d3:44:4d:9c:84:67:44:f5:0a:12:d2:58:c9:ba:d1:17:a7:35:
8a:0b:70:6b:36:f3:de:42:7e:6c:c3:8b:ad:68:07:69:2f:71:
c8:56:6b:eb:1a:42:b4:27:4f:91:4f:de:98:ad:c5:6b:b1:4f:
8a:af:eb:22:08:f9:ec:64:c9:3c:f7:e4:45:3d:54:b9:f6:db:
f0:52:2b:8e:6a:66:27:da:3e:00:c0:db:82:28:44:bd:9d:38:
ab:1a:2f:2f:83:da:98:5c:8c:ec:e1:bf:c1:99:db:95:5f:46:
ea:87:b2:f3:a9:75:bc:2a:8b:40:6d:32:e4:b4:2b:b7:fb:db:
81:f8:6a:06:ee:50:31:49:f6:51:aa:4a:a9:8f:5d:d4:10:be:
f1:b9:b9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:35 2026 by rpki-client