Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pDZtDYM93jteZHo8xhMjlMeqOXw.roa
File: pDZtDYM93jteZHo8xhMjlMeqOXw.roa (raw, json)
Hash identifier: +c/Yk+H2i5H/C/jLIiAQ9ROcRsUoVg/AyVv3v+jFqe4=
Subject key identifier: A4:36:6D:0D:83:3D:DE:3B:5E:64:7A:3C:C6:13:23:94:C7:AA:39:7C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019C8ED811BE7FFE84522929E497306F6A75
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pDZtDYM93jteZHo8xhMjlMeqOXw.roa
Signing time: Tue 24 Feb 2026 08:50:50 +0000
ROA not before: Tue 24 Feb 2026 08:50:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 185.227.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Feb 2026 07:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:d8:11:be:7f:fe:84:52:29:29:e4:97:30:6f:6a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 24 08:50:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4366d0d833dde3b5e647a3cc6132394c7aa397c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:07:48:4b:54:13:a4:e9:7e:66:2a:c3:47:
35:b7:75:f2:3c:d8:7a:42:1b:42:28:ea:7c:3d:46:
ee:61:e4:46:1d:07:42:e4:1e:67:1f:df:e2:ea:4d:
dd:ca:28:15:5f:b1:51:99:4a:2d:5b:2c:94:85:67:
38:a0:2a:3b:41:14:5a:8b:a9:28:11:6f:58:3a:2e:
15:7a:6e:d4:07:ec:4f:f9:4d:85:89:1f:1c:46:8f:
9a:0c:f9:75:e4:bd:d5:07:0c:c8:4a:8d:24:9d:81:
ba:47:35:df:3a:b8:22:ff:5e:06:75:2e:38:72:0f:
28:46:50:d0:ef:cb:69:db:fa:1b:63:5e:93:5d:92:
61:35:15:f6:cc:6e:d8:d7:e0:fd:8b:2d:f1:59:e0:
ed:ef:ca:8c:d3:57:45:ae:af:70:64:cb:ba:13:31:
4f:30:46:46:09:28:f5:63:fa:2f:1b:56:20:f9:75:
b8:ad:e8:7e:0e:7a:39:d9:41:58:1c:e9:ee:6f:c2:
3a:c5:7f:07:0e:c9:c9:ac:1b:6f:2e:c5:5d:38:a9:
25:0c:80:de:cb:08:22:37:5a:3c:b3:10:1d:a0:40:
e5:4d:56:62:99:a1:34:89:49:89:eb:7c:b7:ad:0d:
d8:cb:0c:63:a1:30:c4:8c:0b:42:80:b9:98:5b:4c:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:36:6D:0D:83:3D:DE:3B:5E:64:7A:3C:C6:13:23:94:C7:AA:39:7C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pDZtDYM93jteZHo8xhMjlMeqOXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:eb:ca:fd:70:e3:e2:05:99:4c:8f:6a:03:5b:66:f4:0f:a3:
f7:36:2a:01:a1:10:b2:4d:0b:f3:a5:6f:3b:fc:59:b1:b5:cd:
c4:3b:1f:ee:0c:39:55:2e:a6:ce:e6:4b:88:a7:31:78:4c:74:
16:ca:48:91:e7:d7:2b:a5:90:dd:68:cf:9d:db:52:3f:b8:4c:
5c:12:14:7b:0a:15:33:51:8f:d7:b6:04:16:39:8f:4c:f2:4c:
6e:55:50:9f:0a:a7:a2:65:00:ed:25:29:d6:ad:90:fa:bb:d4:
96:0f:d9:4c:44:7d:ed:82:68:37:ee:61:e7:56:31:14:51:a6:
6e:83:bd:35:25:12:22:7e:b5:f7:7b:d3:b9:df:11:b8:39:3b:
c8:54:1f:a8:72:b0:aa:e7:a3:be:69:4f:3d:fc:88:db:d5:a4:
e7:63:8d:ea:b7:38:bd:c6:a4:24:6f:33:d4:bc:6f:8c:4d:09:
26:9c:cd:c0:c2:ee:09:20:64:9b:72:92:73:40:a7:95:f1:d1:
4b:63:39:b5:a7:0a:4e:df:f2:67:bc:ac:6f:1b:54:f3:2f:a3:
1e:4b:f3:2d:d4:25:68:e6:0d:24:98:1c:0e:94:cf:68:42:52:
6e:b6:a8:b5:a1:56:57:4b:09:10:2f:9a:dd:5c:21:60:e8:ca:
a7:50:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 12:06:01 2026 by rpki-client