Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/FAuOtrXNKmVoe0UVfgMS7z52GWI.roa
File: FAuOtrXNKmVoe0UVfgMS7z52GWI.roa (raw, json)
Hash identifier: ejy8Ba9et0jrx8rbx90DwGnqH7uUUb3RZuJ9l/lc/mA=
Subject key identifier: 14:0B:8E:B6:B5:CD:2A:65:68:7B:45:15:7E:03:12:EF:3E:76:19:62
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019FD7AE551257AD3E7E07D7EE9CF0A3BE2B
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/FAuOtrXNKmVoe0UVfgMS7z52GWI.roa
Signing time: Thu 06 Aug 2026 15:25:54 +0000
ROA not before: Thu 06 Aug 2026 15:25:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 46.233.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:ae:55:12:57:ad:3e:7e:07:d7:ee:9c:f0:a3:be:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Aug 6 15:25:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=140b8eb6b5cd2a65687b45157e0312ef3e761962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:cc:a8:24:04:13:09:e9:e2:12:87:e9:db:
af:25:5a:2c:64:52:a5:2b:17:f5:c4:95:41:f7:07:
d6:17:54:ab:a0:01:8b:68:5a:ad:d4:ff:c0:28:16:
6b:30:9d:8f:51:2b:d3:99:c4:6a:f9:cc:e4:03:e0:
f2:ad:cd:d2:92:13:0b:64:e5:e7:65:7d:07:cf:3e:
17:ae:74:51:fd:6f:9e:48:e9:ab:09:6e:04:19:68:
b6:da:d6:a2:dd:6f:f9:5d:ea:90:16:73:d0:da:25:
fe:c1:f6:00:18:cf:3c:73:4b:e0:f7:34:ee:eb:e9:
bc:88:a9:ff:3b:e2:ae:69:e9:b2:18:b4:c3:9a:b8:
6b:8b:f1:b3:da:6a:7c:c2:57:44:74:e2:46:f4:dd:
73:35:86:d3:51:ce:6a:5c:1d:e6:73:ee:6c:c8:b2:
c7:66:99:49:39:28:72:82:0f:3a:ce:97:0a:4f:67:
15:9c:5f:55:87:22:ff:c5:7b:60:dc:e0:d8:15:9b:
d0:04:08:62:b1:4a:f8:d1:f1:66:40:e2:72:5d:db:
d4:a0:6a:1b:bc:86:cd:7f:13:31:df:16:bd:46:04:
8a:5a:bb:2b:20:e8:9f:e9:a7:dd:8e:13:f6:69:3e:
60:18:1a:53:e5:10:f2:96:52:4a:08:00:06:18:50:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:8E:B6:B5:CD:2A:65:68:7B:45:15:7E:03:12:EF:3E:76:19:62
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/FAuOtrXNKmVoe0UVfgMS7z52GWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.44.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a2:04:35:28:fd:0c:ce:a9:ad:8f:8b:e3:c4:59:08:4e:54:
15:54:54:f2:44:1b:de:d6:32:8c:b6:2a:b4:40:9a:83:ba:c4:
0d:53:ad:70:1f:8c:b6:8b:d1:0f:e9:79:da:28:cd:e5:87:5a:
02:bd:71:2c:63:1c:f7:04:95:c5:c8:59:53:bc:ce:a2:47:80:
5e:f8:93:85:c6:1f:4e:d9:a5:c1:26:a3:61:42:75:41:6d:c1:
e5:47:e7:7e:5a:ed:a9:1a:5d:e3:9a:5f:c7:b2:6a:4c:79:45:
be:6e:27:f4:d3:68:01:aa:a6:16:97:2c:26:2a:50:b5:c0:d4:
ee:e3:dd:2b:1c:7a:da:9a:5b:2d:9a:2f:89:13:68:c6:2c:53:
37:b6:87:08:02:cd:a3:93:c7:10:c6:48:8c:c7:c3:07:72:4d:
dc:85:ad:7c:0f:98:22:10:67:c3:53:99:cf:51:a1:ef:bc:eb:
22:30:57:59:6f:c3:ad:5c:2e:94:8c:9d:ca:14:dc:b4:4d:db:
48:27:15:72:12:b3:76:af:5c:d9:2e:0e:74:2e:c1:c8:f2:1f:
9b:cf:86:ef:e5:47:41:d9:bd:06:fe:33:e6:05:d4:a8:a0:9d:
45:af:5c:b2:e2:53:7a:bb:77:ad:98:d5:ed:ae:4a:16:52:0c:
25:7a:66:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/XrlUSV60+fgfX7pzwo74rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjYwODA2MTUyNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDBiOGViNmI1Y2QyYTY1Njg3YjQ1MTU3ZTAzMTJlZjNlNzYxOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE/MqCQEEwnp4hKH6duvJVosZFKl
Kxf1xJVB9wfWF1SroAGLaFqt1P/AKBZrMJ2PUSvTmcRq+czkA+Dyrc3SkhMLZOXn
ZX0Hzz4XrnRR/W+eSOmrCW4EGWi22tai3W/5XeqQFnPQ2iX+wfYAGM88c0vg9zTu
6+m8iKn/O+KuaemyGLTDmrhri/Gz2mp8wldEdOJG9N1zNYbTUc5qXB3mc+5syLLH
ZplJOShygg86zpcKT2cVnF9VhyL/xXtg3ODYFZvQBAhisUr40fFmQOJyXdvUoGob
vIbNfxMx3xa9RgSKWrsrIOif6afdjhP2aT5gGBpT5RDyllJKCAAGGFBgbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQLjra1zSplaHtFFX4DEu8+dhliMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvRkF1T3RyWE5LbVZvZTBVVmZnTVM3ejUyR1dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuksMA0G
CSqGSIb3DQEBCwUAA4IBAQCeogQ1KP0Mzqmtj4vjxFkITlQVVFTyRBve1jKMtiq0
QJqDusQNU61wH4y2i9EP6XnaKM3lh1oCvXEsYxz3BJXFyFlTvM6iR4Be+JOFxh9O
2aXBJqNhQnVBbcHlR+d+Wu2pGl3jml/HsmpMeUW+bif002gBqqYWlywmKlC1wNTu
490rHHramlstmi+JE2jGLFM3tocIAs2jk8cQxkiMx8MHck3cha18D5giEGfDU5nP
UaHvvOsiMFdZb8OtXC6UjJ3KFNy0TdtIJxVyErN2r1zZLg50LsHI8h+bz4bv5UdB
2b0G/jPmBdSooJ1Fr1yy4lN6u3etmNXtrkoWUgwlemYG
-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:12 2026 by rpki-client