Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DT1CX2hsBnirrw8xFTx3cJLINro.roa
File: DT1CX2hsBnirrw8xFTx3cJLINro.roa (raw, json)
Hash identifier: tXO0Eu7OPEQuORWeyrmM+b5/Ao2L50cGQdejbv/Nx0A=
Subject key identifier: 0D:3D:42:5F:68:6C:06:78:AB:AF:0F:31:15:3C:77:70:92:C8:36:BA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D5A527425FD0FBFF3EE8897F98A294BA2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DT1CX2hsBnirrw8xFTx3cJLINro.roa
Signing time: Sat 04 Apr 2026 21:07:26 +0000
ROA not before: Sat 04 Apr 2026 21:07:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 185.218.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5a:52:74:25:fd:0f:bf:f3:ee:88:97:f9:8a:29:4b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 4 21:07:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d3d425f686c0678abaf0f31153c777092c836ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:7d:fe:4e:d7:b2:45:d8:d3:02:7f:f3:23:
97:c0:3b:d3:c6:df:25:cb:7e:ca:b4:0b:cb:a1:a4:
f0:db:c1:1d:67:5f:c2:c1:ae:4f:73:64:6a:65:6d:
cb:29:53:62:c1:d8:8b:60:07:ca:78:e9:e4:17:e9:
3f:c4:ba:f4:76:ac:01:a5:36:1a:2e:ba:88:0a:7c:
d9:eb:ae:0f:63:e4:e5:f6:cb:7c:54:c7:cf:c2:44:
25:bc:65:fb:7b:4e:92:c5:eb:d0:eb:e4:67:56:8b:
9d:fa:65:54:d1:d4:44:1d:5d:f2:fe:b2:29:73:28:
ff:c1:ea:4f:fc:cd:7b:4e:98:d8:ae:f5:91:9f:68:
85:4a:bf:55:20:48:29:66:bd:6c:1c:ce:4e:2a:aa:
77:6f:2d:20:24:e6:2c:fb:c0:8f:b8:1a:1a:c5:28:
e1:6e:33:30:5f:b0:8f:44:9b:52:bf:c8:33:a6:f0:
91:8f:44:1c:91:68:f6:05:b1:b2:8f:4e:d3:0d:d6:
af:cc:e1:72:76:7e:d3:9d:e3:91:c6:ac:3b:bf:87:
a4:85:ec:38:ac:83:70:90:87:39:f3:70:c5:3c:b8:
da:f7:f4:a9:be:47:96:e0:5d:d4:99:6e:fe:15:bf:
f1:7e:f0:f0:a5:2c:cb:0a:77:b4:bf:69:96:c7:5e:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3D:42:5F:68:6C:06:78:AB:AF:0F:31:15:3C:77:70:92:C8:36:BA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DT1CX2hsBnirrw8xFTx3cJLINro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.20.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b1:24:ba:53:68:3f:81:07:fe:5f:89:4e:f6:ca:8c:b0:72:
11:e7:20:a3:1d:bc:b0:e6:d3:a5:80:d6:bb:cc:fe:e5:07:47:
f2:b7:dd:82:a0:e0:b1:40:54:85:49:0b:47:ce:e8:a6:c1:a8:
d5:87:ad:6d:f6:ef:3e:4c:e5:d8:ab:22:19:c5:01:c9:61:cc:
9d:0e:cf:1d:35:60:20:02:90:c1:2b:b8:7c:87:94:9a:31:2b:
cd:c4:26:98:a9:c8:fd:65:7a:19:cf:17:4b:14:bf:81:f8:ea:
14:4d:31:a2:51:fe:d5:86:1c:9f:50:fd:22:01:1f:82:c8:a6:
01:78:b7:52:35:58:3e:ad:89:7c:60:bc:95:d5:f6:e0:e0:21:
1a:81:2b:e5:06:03:3c:a0:5d:98:83:0f:0d:71:92:07:16:c6:
d3:6c:e4:a4:97:15:11:90:92:13:cc:b2:14:4d:0a:a7:dd:fe:
47:f7:4c:bd:44:aa:f8:a6:30:f0:97:cd:dd:92:8e:cf:41:90:
d8:fa:3f:0d:34:1b:74:d8:ef:ce:b3:9b:49:95:fd:50:d3:2e:
fc:93:51:9a:d0:aa:ba:f2:af:09:f6:40:ec:01:74:29:d1:85:
48:c2:c5:03:15:e4:d0:2f:e0:ec:d9:1d:59:3d:41:d2:d1:ae:
76:1f:92:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 06:07:29 2026 by rpki-client