Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Q0S0vKeH1qE3DztlQsaMZcL_rdM.roa
File: Q0S0vKeH1qE3DztlQsaMZcL_rdM.roa (raw, json)
Hash identifier: EfiDKy3AvswJNKh8pdzYyd3VC1uN6AzI3TYPRG8NcaE=
Subject key identifier: 43:44:B4:BC:A7:87:D6:A1:37:0F:3B:65:42:C6:8C:65:C2:FF:AD:D3
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019A0078D45F183090C7EDCD8BB9D53DF12D
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Q0S0vKeH1qE3DztlQsaMZcL_rdM.roa
Signing time: Mon 20 Oct 2025 07:15:09 +0000
ROA not before: Mon 20 Oct 2025 07:15:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215348
IP address blocks: 46.233.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:78:d4:5f:18:30:90:c7:ed:cd:8b:b9:d5:3d:f1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Oct 20 07:15:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4344b4bca787d6a1370f3b6542c68c65c2ffadd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:f3:c2:a8:41:f9:76:f8:f5:68:03:cc:5b:
a6:77:13:8a:aa:77:8b:e9:01:5b:ea:3e:07:95:bd:
7c:07:ea:93:d1:88:86:3f:20:8f:a5:6d:58:e6:c3:
c3:ed:a3:c7:65:ab:d2:85:72:7c:08:ff:7a:fd:f7:
4b:32:1d:4b:eb:c1:e4:b0:53:10:09:e4:ee:6b:4e:
68:d8:82:31:14:76:68:59:69:88:9c:d0:d7:a6:67:
47:ea:40:51:bd:23:a6:47:8c:01:82:3f:3b:c6:78:
33:1a:d7:8c:f7:52:d1:01:3a:03:6f:1b:a3:67:b0:
84:8d:05:a1:a4:e5:2e:cf:d4:43:11:41:28:12:49:
3d:2d:b2:78:c8:f9:3b:3a:ab:72:04:6d:3f:ed:3b:
35:98:c4:db:7d:02:3b:69:1e:6c:10:ea:10:90:a5:
1f:de:d9:86:4b:40:a2:de:2b:1a:b9:0a:cb:d4:8d:
2d:b3:f9:8c:6b:f0:c0:fe:3b:fb:74:32:4f:91:fa:
e2:c2:64:d0:a5:0f:3e:b1:e4:21:75:44:95:fc:34:
34:0c:42:f8:c5:f4:fc:4b:64:d9:04:74:ef:27:6b:
70:3e:22:40:1e:4c:88:4b:d9:d7:26:1e:af:a9:3d:
00:62:00:7b:6a:24:c2:6a:0c:3d:e4:4a:55:89:ae:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:B4:BC:A7:87:D6:A1:37:0F:3B:65:42:C6:8C:65:C2:FF:AD:D3
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Q0S0vKeH1qE3DztlQsaMZcL_rdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.53.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:44:0a:cc:88:6a:1d:97:bd:51:54:cb:5f:d1:48:28:90:b2:
ca:04:ba:55:2d:a1:38:73:7b:5f:82:72:1d:92:76:ed:ff:33:
97:54:fe:af:af:1d:96:b2:ea:a8:c9:8d:5d:ee:b4:f2:20:e2:
57:ee:0d:35:83:67:b2:9b:59:6e:e3:ae:2b:89:8f:c9:c5:27:
c8:f8:b5:76:49:43:b5:d8:4c:f7:bc:8d:eb:0b:98:62:fc:06:
06:51:8c:6a:11:5d:2a:e5:01:07:20:ce:24:9e:ff:94:72:9e:
cd:bd:a8:39:d1:77:91:0b:a6:6b:2f:35:4f:6b:cc:89:d8:3b:
07:87:6f:4e:f5:44:3a:a5:18:38:51:3c:cb:3d:52:d1:e4:2f:
a2:4f:cc:99:68:9b:c2:38:81:0b:a6:2d:35:e6:f8:53:be:5f:
cd:2c:7c:81:76:6d:59:97:8c:16:89:69:67:f5:fe:82:b7:19:
fa:9b:76:61:b6:56:8c:01:cb:33:ef:43:f0:ac:4e:8c:4f:f6:
55:7a:dd:8e:2a:6e:8f:be:69:74:88:ee:c2:79:41:6b:ed:6e:
a1:c7:47:65:03:1a:69:30:94:d1:bd:7f:2c:7e:05:1b:a0:be:
01:c2:b7:68:af:b7:d8:8e:c3:65:cc:2c:43:4e:83:61:3e:47:
25:14:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:29:33 2025 by rpki-client