Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/ErxTNyERBBDMhHQ30nH0srvQHWE.roa
File: ErxTNyERBBDMhHQ30nH0srvQHWE.roa (raw, json)
Hash identifier: vCvge335d0b4IZOO+kvKrubjYExpx9nKBs7ZlxM4sEY=
Subject key identifier: 12:BC:53:37:21:11:04:10:CC:84:74:37:D2:71:F4:B2:BB:D0:1D:61
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01A0F67E7A6FC19C3876A17D246980F1CB26
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/ErxTNyERBBDMhHQ30nH0srvQHWE.roa
Signing time: Thu 01 Oct 2026 08:04:39 +0000
ROA not before: Thu 01 Oct 2026 08:04:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 46.233.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7e:7a:6f:c1:9c:38:76:a1:7d:24:69:80:f1:cb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Oct 1 08:04:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12bc533721110410cc847437d271f4b2bbd01d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:1a:19:6b:c2:d4:15:43:60:f3:77:67:b2:
b9:3f:aa:1e:a9:43:f8:52:ce:ee:66:44:49:19:8f:
11:81:76:7e:88:9a:1d:47:6c:ae:04:a5:4c:52:d0:
ea:c4:e1:5b:27:43:d0:77:5f:f7:57:a5:6f:27:9b:
13:fe:d7:b9:f7:db:10:cb:b2:ac:9b:bc:72:b9:48:
6d:1a:53:30:d0:07:20:55:9a:8f:f1:96:58:88:28:
3f:86:50:3e:a5:7c:d4:83:51:34:90:a9:d7:06:65:
80:62:0a:2a:88:06:51:a0:c6:81:05:11:c6:5b:00:
c6:50:6a:b5:02:b3:e7:e4:86:0c:0c:98:04:e9:48:
6a:c4:ab:1b:57:f0:f3:fa:b1:fc:df:b4:04:20:fe:
e3:ee:cc:0f:f9:7c:a9:77:f1:32:1a:6e:a6:cf:1c:
dc:1d:62:8a:7c:05:b8:1f:b3:f5:2c:96:28:1f:8b:
85:50:e8:a5:f2:db:bd:00:18:71:9b:b4:06:b2:ea:
89:bd:4f:ef:ff:70:4b:2e:5e:02:b0:1c:15:66:8a:
c1:eb:25:b1:b9:03:9a:8a:2c:fd:15:4f:94:c8:62:
37:11:3a:17:f6:af:b3:7c:71:dd:52:7e:fa:f5:7b:
f1:cc:b2:03:5b:c1:30:5b:37:14:f9:88:3d:87:32:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BC:53:37:21:11:04:10:CC:84:74:37:D2:71:F4:B2:BB:D0:1D:61
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/ErxTNyERBBDMhHQ30nH0srvQHWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:99:02:5d:7b:d4:fd:42:67:dc:a1:78:ea:cb:a6:d1:c2:0c:
90:b7:4a:d8:5a:15:e6:0f:c7:c5:8b:b9:a6:bd:08:81:ac:a4:
63:7f:d7:5c:f3:82:d3:52:d3:d4:36:f9:bf:45:c7:af:ae:09:
26:74:7c:80:76:0e:d2:07:35:c6:0e:e7:8a:55:12:77:51:8e:
cc:e7:ad:18:97:96:15:90:f9:6d:cb:f3:24:16:a3:09:f8:d6:
62:b9:b4:7b:5c:8d:13:b0:c9:a9:b2:94:cb:66:72:06:6f:da:
6d:30:e5:1d:46:62:1b:7d:66:81:3c:b2:79:51:81:3c:58:19:
ae:6c:0b:c9:2f:51:6b:b6:e9:b4:ab:f8:00:a0:62:b5:b5:51:
6d:86:16:ea:d0:77:c1:cb:e1:e8:90:5b:bd:da:a5:8f:c4:1e:
71:15:42:ee:e9:62:ee:6c:f9:b7:12:ca:8a:e8:44:5e:9d:78:
4b:96:c3:27:fc:e3:e9:4e:ac:47:01:75:bb:78:1d:fc:85:0c:
4d:a3:c2:04:bc:9d:99:74:91:5c:af:5f:80:4a:20:3d:3c:6d:
69:84:c7:87:99:b2:e5:29:0a:97:13:d3:ce:da:99:00:b1:e1:
cd:83:fa:c0:ac:ad:59:9c:eb:f9:89:89:a8:cf:7f:77:c5:00:
ef:d9:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:51:07 2026 by rpki-client