Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dJcVzSXLrXhN35XvOmghmuu1zsY.roa
File: dJcVzSXLrXhN35XvOmghmuu1zsY.roa (raw, json)
Hash identifier: 1GC5+oczmTiO1myaYE2toWu6R3tnkWCH5TUHutd+uMk=
Subject key identifier: 74:97:15:CD:25:CB:AD:78:4D:DF:95:EF:3A:68:21:9A:EB:B5:CE:C6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D67B5E9FF2F07AE3F8A78F42C1FC9E032
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dJcVzSXLrXhN35XvOmghmuu1zsY.roa
Signing time: Tue 07 Apr 2026 11:31:08 +0000
ROA not before: Tue 07 Apr 2026 11:31:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138195
IP address blocks: 185.214.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 02:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:b5:e9:ff:2f:07:ae:3f:8a:78:f4:2c:1f:c9:e0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 7 11:31:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=749715cd25cbad784ddf95ef3a68219aebb5cec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:3e:3b:77:9e:0e:df:f5:2d:de:1c:a9:64:
b9:97:b9:d2:c8:fa:29:0d:c2:2c:b3:34:44:0d:71:
e4:90:c0:82:bd:15:d1:c9:b0:1d:d6:1e:5f:1b:cb:
25:e8:73:dd:86:35:00:0e:46:da:16:d1:6a:3a:b0:
af:4f:c7:f6:64:5b:fc:18:8f:05:0e:87:6b:2d:87:
68:32:9f:d0:94:77:64:0c:4d:b8:7f:04:b3:52:b7:
59:a6:94:6e:b1:a5:eb:67:7a:55:fd:d6:eb:e0:79:
32:3d:4c:eb:e0:d7:05:e6:10:c1:a1:7b:fb:98:2c:
af:5b:44:e3:22:a5:97:a8:c7:c9:68:34:18:3b:3b:
27:5d:4d:e1:db:1b:7f:4a:23:32:75:95:ae:8f:3b:
b0:f4:7a:1a:bb:ef:58:d1:12:a3:16:41:f9:9c:a2:
8e:c0:e3:a2:70:b8:84:cc:8c:0b:88:46:c5:02:0a:
d3:22:0b:4b:f4:0a:19:6b:5f:08:f3:0d:d8:6d:33:
00:00:6b:64:0a:d0:df:5f:c7:dd:95:f2:bc:0a:9f:
63:0b:56:0a:b2:1b:29:bd:a3:06:37:bd:25:e8:f3:
18:16:7b:41:ee:d4:78:04:08:8f:9b:9b:d6:77:19:
a4:29:c8:c7:d1:61:d5:a2:cd:36:4e:81:a0:8d:81:
46:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:15:CD:25:CB:AD:78:4D:DF:95:EF:3A:68:21:9A:EB:B5:CE:C6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dJcVzSXLrXhN35XvOmghmuu1zsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.103.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9e:b2:ff:2c:e3:fb:25:a1:f3:1d:c6:e2:f4:f8:be:e8:c6:
a7:4c:57:19:cd:ac:d2:f4:dd:e1:3d:c5:b2:b4:55:14:7d:d6:
8b:16:3f:e9:d3:7c:61:00:62:e6:b9:b7:1f:a0:94:f4:89:ed:
6d:01:4a:66:ca:d2:f9:88:c0:93:e3:a8:e0:d0:21:c1:48:4e:
52:0b:69:57:b7:a4:97:dd:19:88:22:0e:08:50:56:5c:da:98:
fb:60:17:8f:44:6a:a2:a3:81:67:ae:8b:dc:f9:7b:6d:4c:fb:
8b:5d:b7:df:36:3f:d4:56:a1:d0:d4:3e:90:fe:73:fb:e2:7b:
cd:cb:08:b3:d4:7f:b0:7f:87:6d:89:84:15:72:c9:3e:51:bd:
09:6a:20:64:87:59:77:2b:ff:ac:50:15:96:aa:7b:e2:32:5b:
df:e0:93:01:a2:4c:24:30:2e:f1:ba:1b:d7:d1:5c:52:4e:70:
85:b6:8e:d5:f4:b1:fa:b6:06:78:c3:7f:84:cb:74:bb:bc:24:
9d:da:d0:fe:01:6f:3b:17:72:12:19:93:3c:ed:a7:6d:4f:a7:
d2:0e:e5:58:77:9f:dc:06:f7:d2:a9:36:b2:82:b0:7f:41:b3:
1a:6e:fe:3c:70:ca:22:b6:7c:e6:b3:fb:17:1b:3b:34:4b:02:
f7:2e:3d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:09:12 2026 by rpki-client