Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/LvyPqPyFFN-1pBcoXn_N7wYhYsI.roa
File: LvyPqPyFFN-1pBcoXn_N7wYhYsI.roa (raw, json)
Hash identifier: 7RYkLz7rm+gOi67pge0BfE5yBJYItLHKAHOteIJne9M=
Subject key identifier: 2E:FC:8F:A8:FC:85:14:DF:B5:A4:17:28:5E:7F:CD:EF:06:21:62:C2
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019D00D8ED2546BF56287B8BE3034CB4B62B
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/LvyPqPyFFN-1pBcoXn_N7wYhYsI.roa
Signing time: Wed 18 Mar 2026 12:08:29 +0000
ROA not before: Wed 18 Mar 2026 12:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 46.233.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:d8:ed:25:46:bf:56:28:7b:8b:e3:03:4c:b4:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Mar 18 12:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2efc8fa8fc8514dfb5a417285e7fcdef062162c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:66:e2:b8:8c:71:3e:de:b4:da:ad:9d:9f:
ff:1a:08:44:20:19:68:ce:7f:3f:1e:ed:8c:ac:06:
8a:1c:72:16:ae:b9:30:60:58:e2:2e:4b:5c:7c:1a:
e6:a5:9c:49:08:f0:08:e5:a9:3b:b7:87:53:46:09:
81:a7:91:c7:72:ce:f0:ac:bd:e4:6b:7c:a6:bd:5e:
18:7e:9b:a2:38:b9:66:8a:fe:0c:76:b6:3c:96:a1:
ee:c1:70:49:0a:02:56:e0:c8:74:ac:34:42:09:ef:
c2:a4:6d:55:24:41:4a:76:13:28:b4:a7:95:cf:a4:
a4:a4:8e:72:42:5a:8a:c9:3f:6a:76:c4:26:41:1a:
00:c3:e5:7f:6d:29:68:a0:ca:4e:f1:1a:cc:a9:8d:
b8:d9:97:8e:60:64:7c:66:ef:2e:80:f2:24:07:e0:
98:e4:c1:56:5a:ca:22:0c:8b:b4:5d:0c:f7:de:5c:
ed:1c:bc:59:a9:f0:cb:e8:ec:63:04:65:45:40:b3:
34:dc:24:d9:d4:8c:95:07:44:80:60:e4:0c:9f:32:
d7:3f:49:ce:0f:0c:98:5d:31:d0:95:3c:e4:25:85:
55:63:82:35:b1:88:6d:fa:cb:e0:3e:d5:ee:2c:62:
83:6e:c6:97:d3:14:c6:9d:a2:4a:63:b5:1f:9d:b6:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FC:8F:A8:FC:85:14:DF:B5:A4:17:28:5E:7F:CD:EF:06:21:62:C2
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/LvyPqPyFFN-1pBcoXn_N7wYhYsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a2:c7:55:d6:df:67:f8:c6:e9:78:ca:cb:28:f4:2e:e0:dd:
71:fa:14:34:c4:cd:ec:e6:59:09:08:8d:e9:73:4b:ed:c2:a6:
be:38:57:14:a7:2b:2e:3b:82:dc:3a:fa:d4:73:4e:79:33:d5:
54:23:a2:43:9d:e0:9c:3a:e8:4d:f3:45:1a:e6:be:bd:24:a0:
fc:05:32:2a:4e:3c:06:29:31:ae:df:b6:aa:e7:5c:91:89:d8:
37:69:81:7d:89:aa:15:25:85:55:1d:90:a0:a0:45:88:a6:98:
c3:c2:f0:e7:8d:34:41:64:97:73:b7:f2:d9:9e:98:32:62:13:
b2:79:6d:26:13:e0:f8:f2:90:3e:13:30:d9:5b:e4:85:6a:09:
c8:07:95:e5:b6:31:c7:2c:11:7c:c8:32:c1:83:d2:9c:61:b1:
ec:3b:4e:4d:48:ff:31:0a:1d:8d:1b:39:43:7d:3d:b4:8c:f7:
b1:2d:f3:69:a9:1d:6d:72:73:13:0c:32:13:2c:8e:a3:1c:45:
78:d0:43:22:a3:dc:2d:a1:2b:79:e6:ee:b7:48:94:eb:2b:be:
5c:b6:f0:ce:9e:54:15:7a:72:5d:6c:42:0f:97:45:00:c9:52:
c1:c7:c0:ee:e6:ba:51:0e:86:3d:04:ad:e6:73:08:8b:de:dd:
d8:c6:ab:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:02:35 2026 by rpki-client