Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/4deFTq_ZGU6j5Wvv1x7sF95jtLY.roa
File: 4deFTq_ZGU6j5Wvv1x7sF95jtLY.roa (raw, json)
Hash identifier: 2TrrPS30sWSSBNdC0ytp9VKstwP0OWe2UIx3Dtm2/JM=
Subject key identifier: E1:D7:85:4E:AF:D9:19:4E:A3:E5:6B:EF:D7:1E:EC:17:DE:63:B4:B6
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019A1B687A1FEFEE355C5D4C9DEB439F6793
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/4deFTq_ZGU6j5Wvv1x7sF95jtLY.roa
Signing time: Sat 25 Oct 2025 12:47:03 +0000
ROA not before: Sat 25 Oct 2025 12:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 46.233.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:68:7a:1f:ef:ee:35:5c:5d:4c:9d:eb:43:9f:67:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Oct 25 12:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1d7854eafd9194ea3e56befd71eec17de63b4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:22:da:16:dd:05:e4:88:c0:ef:f4:81:71:
30:e2:ff:fe:df:df:0b:02:01:40:48:b3:d4:ac:64:
a2:2a:65:76:45:6b:70:99:cc:e8:01:2e:86:8a:56:
73:24:e3:51:85:3d:d5:4b:ed:c5:1c:94:16:83:ea:
b0:42:55:5b:64:72:05:a7:97:a6:0c:78:e1:d0:78:
2f:5e:90:9c:c2:1b:28:3c:b3:4e:f4:92:dc:28:65:
37:5a:75:5d:84:14:88:31:c9:63:d4:0b:38:16:5d:
ed:40:62:97:d6:3f:a9:83:7b:2f:de:ed:24:89:75:
69:33:2c:59:c0:5c:86:d3:f2:a1:6e:24:80:07:2c:
67:68:b0:65:5f:91:c5:ef:86:98:0e:d9:22:fd:06:
17:ec:81:04:56:db:1d:22:9b:f8:3a:73:26:7f:17:
6d:bb:d4:3e:72:00:96:c3:d6:88:45:4e:c9:bc:00:
bd:0c:31:58:bd:60:8c:ba:d1:23:34:d4:40:c9:14:
ec:1b:56:82:16:f0:ba:62:e4:1b:a0:d0:bf:03:cf:
4f:ef:db:10:b5:91:aa:ea:8e:50:2b:7b:9a:c8:f7:
3e:34:ba:e1:cb:dd:15:50:bd:5d:83:7a:3d:0a:04:
38:6c:3d:de:61:48:a6:d8:7e:c2:3d:c0:4f:02:df:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:85:4E:AF:D9:19:4E:A3:E5:6B:EF:D7:1E:EC:17:DE:63:B4:B6
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/4deFTq_ZGU6j5Wvv1x7sF95jtLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:4d:0b:b3:36:80:13:55:e5:2d:0d:5d:9e:85:b0:45:f2:56:
1b:83:87:40:62:a2:80:eb:b3:d6:dd:17:41:08:8c:64:43:6d:
aa:77:bc:a4:86:6a:c9:42:51:3e:f2:ff:7c:7a:5d:55:99:94:
bd:2b:94:06:e2:c6:46:0f:b5:99:89:80:4e:c8:75:71:2a:d1:
fe:cb:0a:f8:71:4b:b4:43:82:bf:e4:00:f4:1a:b9:94:4c:de:
08:23:75:7e:9f:ba:bc:0f:6f:32:a1:68:7e:19:c9:fb:7f:fb:
61:02:b3:b4:59:b4:12:06:4f:25:df:da:3f:a6:7a:8d:a5:e9:
02:df:0d:f1:48:29:3d:bb:27:4f:b8:be:f2:90:4b:5e:b1:6d:
de:9f:fb:54:9e:e2:ea:a5:2f:0e:b8:17:8c:d2:05:24:c0:8d:
13:5c:93:71:e6:26:66:52:ee:2d:49:4c:43:82:68:91:78:a7:
16:fc:3e:de:8f:0a:fa:a6:3b:3d:4d:0c:03:53:f5:bc:09:f6:
e8:c4:5b:9b:e6:4d:ae:0b:5c:f7:d8:a0:6b:21:68:17:39:0e:
be:42:3e:cb:d8:64:95:d3:77:2f:f7:df:66:e4:60:23:d1:f6:
fb:07:53:6b:24:4f:38:c3:d2:48:4a:b5:b5:28:89:72:a2:e1:
6a:88:73:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZobaHof7+41XF1MnetDn2eTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjUxMDI1MTI0NzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWQ3ODU0ZWFmZDkxOTRlYTNlNTZiZWZkNzFlZWMxN2RlNjNiNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rsi2hbdBeSIwO/0gXEw4v/+398L
AgFASLPUrGSiKmV2RWtwmczoAS6GilZzJONRhT3VS+3FHJQWg+qwQlVbZHIFp5em
DHjh0HgvXpCcwhsoPLNO9JLcKGU3WnVdhBSIMclj1As4Fl3tQGKX1j+pg3sv3u0k
iXVpMyxZwFyG0/KhbiSAByxnaLBlX5HF74aYDtki/QYX7IEEVtsdIpv4OnMmfxdt
u9Q+cgCWw9aIRU7JvAC9DDFYvWCMutEjNNRAyRTsG1aCFvC6YuQboNC/A89P79sQ
tZGq6o5QK3uayPc+NLrhy90VUL1dg3o9CgQ4bD3eYUim2H7CPcBPAt9yKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOHXhU6v2RlOo+Vr79ce7BfeY7S2MB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvNGRlRlRxX1pHVTZqNVd2djF4N3NGOTVqdExZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuk3MA0G
CSqGSIb3DQEBCwUAA4IBAQC5TQuzNoATVeUtDV2ehbBF8lYbg4dAYqKA67PW3RdB
CIxkQ22qd7ykhmrJQlE+8v98el1VmZS9K5QG4sZGD7WZiYBOyHVxKtH+ywr4cUu0
Q4K/5AD0GrmUTN4II3V+n7q8D28yoWh+Gcn7f/thArO0WbQSBk8l39o/pnqNpekC
3w3xSCk9uydPuL7ykEtesW3en/tUnuLqpS8OuBeM0gUkwI0TXJNx5iZmUu4tSUxD
gmiReKcW/D7ejwr6pjs9TQwDU/W8CfboxFub5k2uC1z32KBrIWgXOQ6+Qj7L2GSV
03cv999m5GAj0fb7B1NrJE84w9JISrW1KIlyouFqiHPl
-----END CERTIFICATE-----
Generated at Tue Oct 28 08:40:57 2025 by rpki-client