Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/h6L7Hu9h-WRsvEVUYJvrCBj7EO0.roa
File: h6L7Hu9h-WRsvEVUYJvrCBj7EO0.roa (raw, json)
Hash identifier: H7jR89trSYSnXKR1ihEqgmmJtnhfIxvnyG0FDPgKVnw=
Subject key identifier: 87:A2:FB:1E:EF:61:F9:64:6C:BC:45:54:60:9B:EB:08:18:FB:10:ED
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 019F7B9F22F9304AF186F0BEF2E3AD02A6A3
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/h6L7Hu9h-WRsvEVUYJvrCBj7EO0.roa
Signing time: Sun 19 Jul 2026 18:24:14 +0000
ROA not before: Sun 19 Jul 2026 18:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 2a13:4a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7b:9f:22:f9:30:4a:f1:86:f0:be:f2:e3:ad:02:a6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Jul 19 18:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87a2fb1eef61f9646cbc4554609beb0818fb10ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:3f:7c:a5:00:b1:ac:1a:b7:83:f2:96:3f:
00:1f:5a:9d:7b:db:23:47:8f:fc:c5:1b:c3:96:49:
22:97:74:27:e2:2b:96:9c:55:7a:90:10:b7:08:b4:
64:be:34:18:3a:8b:5a:a0:85:b7:87:6a:fb:7a:39:
43:a9:a2:b0:d6:29:83:7b:2d:41:b0:7d:90:23:79:
8e:47:5c:a3:3f:1d:30:9c:ed:e4:d8:99:4b:cd:5f:
fe:6d:09:b8:a2:47:14:6f:bc:04:12:ff:5d:0e:4b:
f0:f1:e9:f0:76:df:8a:52:36:e9:91:ff:07:ea:bd:
15:a2:3d:60:34:70:b8:0c:cf:8a:32:d6:87:1b:99:
75:fd:48:37:09:b6:88:0d:a2:ff:ee:18:42:f6:07:
34:e9:01:62:75:ba:b5:75:a1:8b:08:52:4d:a6:c7:
a9:76:58:1d:08:e8:41:b4:0e:75:48:e1:60:1e:af:
a3:55:db:3b:e4:3a:70:08:fb:e9:0a:df:a1:b9:c9:
73:6c:71:41:10:2a:c2:47:de:fa:76:a5:f5:b8:f7:
7a:d1:81:13:44:71:02:c3:5a:7b:86:28:35:bf:67:
61:95:02:26:31:fe:fe:22:88:d2:7e:5d:d3:41:37:
25:5d:9d:97:e5:17:c0:62:c8:70:a6:b5:41:38:e3:
41:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A2:FB:1E:EF:61:F9:64:6C:BC:45:54:60:9B:EB:08:18:FB:10:ED
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/h6L7Hu9h-WRsvEVUYJvrCBj7EO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4a80::/32
Signature Algorithm: sha256WithRSAEncryption
5a:79:f3:e8:cf:f3:8a:ae:c9:08:c3:b0:fe:a1:5a:72:e7:1f:
57:03:1b:ba:6a:70:31:23:79:35:3e:92:a9:cb:52:66:fa:4f:
2f:68:55:72:94:1b:bd:31:e7:ae:8e:34:5d:60:76:38:64:a2:
8b:b5:b7:d2:32:6a:fc:41:2f:bc:a7:c4:86:9c:a3:b4:0e:4b:
c2:34:f6:11:ff:14:4f:96:a1:3b:0a:fa:dc:3e:e0:41:f3:53:
cf:b6:28:af:56:9b:10:27:a0:d6:77:a5:b9:a1:75:5b:c4:84:
7a:cf:f7:9c:aa:26:e9:32:1b:a7:a3:c0:09:33:ba:76:5e:75:
aa:9d:80:7d:8b:5c:25:d2:13:53:65:63:ba:a7:3b:54:7b:aa:
3a:fe:bf:c6:16:e6:b9:68:81:a2:d1:bb:c6:7c:96:7b:f3:13:
12:c2:15:2e:b2:71:d2:dc:6f:9c:17:94:d5:39:23:c9:37:f8:
cd:9b:6d:62:7c:ff:62:bd:aa:89:8c:1f:09:f4:c2:d6:41:15:
2c:78:e1:cb:42:f1:7e:50:8b:0c:ae:b8:4c:d1:1a:db:38:02:
a8:a4:3a:c0:5e:07:79:4c:a7:21:a0:8f:63:34:12:e7:fa:5e:
89:3c:4d:e8:44:14:b0:1d:b7:56:1d:08:70:bc:8d:58:c3:eb:
11:9b:8f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:55 2026 by rpki-client