Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PokY1-YVU7o9KpwDhgm_MWRw-8w.roa
File: PokY1-YVU7o9KpwDhgm_MWRw-8w.roa (raw, json)
Hash identifier: jb/bhrYLiC4QfIZE4eJOZMdGEP9UU5CsjQCvwRA4UBI=
Subject key identifier: 3E:89:18:D7:E6:15:53:BA:3D:2A:9C:03:86:09:BF:31:64:70:FB:CC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019CED97BC243048EDB9DF2C2E6FA041B0AB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PokY1-YVU7o9KpwDhgm_MWRw-8w.roa
Signing time: Sat 14 Mar 2026 18:24:30 +0000
ROA not before: Sat 14 Mar 2026 18:24:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26769
IP address blocks: 185.218.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:97:bc:24:30:48:ed:b9:df:2c:2e:6f:a0:41:b0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 14 18:24:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e8918d7e61553ba3d2a9c038609bf316470fbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:6d:cb:e8:60:43:f5:4d:62:ba:ef:86:cc:
55:3b:b6:25:eb:28:08:a4:7d:a4:b5:b4:6d:c2:d6:
b8:b6:c9:f7:32:89:e0:2b:4c:6a:c4:0d:49:65:75:
a1:ef:02:85:f1:ed:78:05:58:6f:87:53:f6:61:a1:
15:de:3c:85:a7:19:ce:bf:77:8e:6f:9e:67:6d:7a:
9e:a0:18:0a:ca:94:2e:86:2e:d5:e8:d7:45:95:f9:
7e:78:84:c9:49:16:ba:6e:64:c6:07:d8:d8:eb:a7:
27:ad:e1:c9:d5:22:d8:81:ec:00:82:b1:f2:a5:12:
87:51:ba:bf:1b:e7:b9:8b:0a:81:36:b5:a5:56:e9:
0e:2e:37:af:a5:ab:c5:ee:41:5b:54:00:e3:79:29:
d3:b8:9c:4c:46:c7:a8:10:ad:ed:8f:db:eb:5f:6d:
fa:d0:b2:b4:a8:4a:7a:bd:a7:5f:07:41:32:92:9b:
a0:82:2d:ef:ba:79:e5:9b:5f:15:5a:cc:d0:bf:db:
d5:85:22:9e:b7:39:ed:98:38:44:d0:05:e4:df:c3:
ee:e3:30:fa:ac:44:46:1b:33:b0:35:c0:04:e9:23:
de:36:c0:67:63:0b:e0:ca:66:68:d0:d3:77:68:e2:
af:5b:95:42:9f:c0:88:4c:f7:44:67:61:01:74:d8:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:89:18:D7:E6:15:53:BA:3D:2A:9C:03:86:09:BF:31:64:70:FB:CC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PokY1-YVU7o9KpwDhgm_MWRw-8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:44:39:7d:87:5b:85:3f:8a:d4:6a:4f:79:1c:9a:27:19:95:
4b:ed:1d:21:0d:97:3d:b6:0b:c2:aa:b8:02:db:7a:b0:3d:66:
21:55:96:a0:cd:d1:d3:52:9f:8b:9b:97:19:81:a7:30:60:ec:
bd:85:2e:94:49:65:d3:b2:3f:2d:a6:df:65:46:0d:bd:52:34:
e1:12:d4:9b:17:1f:fc:a7:c5:96:0e:38:0d:6f:3c:6f:f3:a8:
3d:6d:d8:fe:80:07:3d:13:3c:80:f7:9e:69:26:3f:d1:f3:9c:
2d:89:64:68:78:63:dd:fb:1f:b9:68:91:aa:00:6b:a4:fa:75:
2c:b6:48:3e:64:35:9c:92:ee:28:6a:cc:98:1b:3d:ff:63:82:
f9:5a:61:82:cd:d5:91:90:36:35:0a:67:04:d3:67:97:34:c0:
be:ca:3c:1d:47:9e:59:f0:d1:89:7f:e3:81:43:8f:20:3c:2b:
36:36:71:a4:a8:a7:45:8a:d2:6b:c7:d6:70:37:0a:10:5a:87:
08:c8:51:df:77:55:e7:b8:52:57:02:52:d3:8e:7b:3d:da:a1:
a2:b3:8e:80:9b:07:1f:fb:c7:fb:70:1f:bd:ce:a6:1b:5c:4d:
0f:8a:99:b3:03:97:4b:8a:1c:85:44:ed:ec:93:1a:74:72:c9:
63:fd:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 22:35:35 2026 by rpki-client