Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Xgtl1N4Ruf8u6gGWffhsfOzMbyA.roa
File: Xgtl1N4Ruf8u6gGWffhsfOzMbyA.roa (raw, json)
Hash identifier: KS9k+vAoTmeVddVl70xEIHdq3MtgGYFqpL51M+ZPClE=
Subject key identifier: 5E:0B:65:D4:DE:11:B9:FF:2E:EA:01:96:7D:F8:6C:7C:EC:CC:6F:20
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019FE1A89AE841CEE204B9CE455A76089710
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Xgtl1N4Ruf8u6gGWffhsfOzMbyA.roa
Signing time: Sat 08 Aug 2026 13:55:51 +0000
ROA not before: Sat 08 Aug 2026 13:55:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 46.233.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:a8:9a:e8:41:ce:e2:04:b9:ce:45:5a:76:08:97:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Aug 8 13:55:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e0b65d4de11b9ff2eea01967df86c7ceccc6f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:44:0d:7b:3a:0f:4c:e6:e0:7e:1f:66:d7:
bb:08:b1:79:d1:bd:b0:b5:1b:27:61:46:1f:0b:89:
0d:7f:64:89:78:23:91:e3:a3:24:e2:67:56:35:8a:
b1:1a:a4:77:2d:88:82:b3:d3:0b:f8:d8:bf:1e:59:
4f:ae:45:e9:5c:d0:7d:c2:d9:9d:18:ad:ad:ae:6e:
61:fa:99:31:65:a0:a4:6a:4e:fb:31:f7:72:70:53:
36:ab:f5:9e:88:c3:3f:21:a0:a7:6a:24:80:9a:08:
df:1b:03:d3:86:e6:6c:5f:14:14:09:23:74:e9:66:
e5:c9:37:b2:d6:c8:68:04:77:cd:8b:6f:8e:12:ed:
7a:99:e7:92:e3:56:a4:d1:1a:e7:cf:42:d4:4b:20:
9c:ed:e8:9b:d6:57:b9:23:f1:06:8c:be:d8:38:1d:
38:64:0c:ca:2a:c6:fb:77:5c:00:5e:a0:4b:66:cf:
d5:e6:1b:47:24:ef:40:12:c6:ab:6f:ea:ef:8e:31:
9e:62:0e:48:cd:98:0c:93:da:95:45:c5:e3:9c:4c:
43:1e:2f:e4:72:57:06:e5:5b:89:21:af:b9:2e:63:
1b:a1:2b:d9:e5:c0:ce:20:d2:c3:b0:83:43:56:08:
35:af:a6:ad:fb:be:65:d7:af:c4:c6:eb:13:e5:a9:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0B:65:D4:DE:11:B9:FF:2E:EA:01:96:7D:F8:6C:7C:EC:CC:6F:20
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Xgtl1N4Ruf8u6gGWffhsfOzMbyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.44.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6c:e7:03:34:f7:f7:e6:e0:3a:07:e5:22:51:c4:46:37:6e:
0b:fb:cb:71:42:3d:4a:fd:54:c1:60:62:05:df:26:c8:50:06:
9e:3a:c5:a6:10:96:f5:13:28:fc:41:2e:35:e5:b9:62:fb:fd:
d9:51:76:6b:af:b3:4c:0b:71:02:d3:03:67:44:fe:ec:36:79:
f7:d8:08:f5:45:ef:e2:f2:59:97:eb:78:b2:0f:60:b7:70:02:
38:b6:20:29:16:78:41:04:1d:f8:f6:a1:99:02:40:6f:64:5d:
40:d6:c4:db:2f:18:b2:a8:69:29:5e:08:04:ab:98:50:4e:9c:
dd:85:9f:a7:98:d2:3e:29:2e:0b:0a:31:59:0e:64:dc:c1:f3:
1a:b8:82:c5:5c:2e:e4:19:72:b3:a9:a3:4b:e2:be:45:b7:2c:
5e:58:5a:bf:e0:ec:58:b8:1e:99:50:3f:36:79:9d:28:19:90:
4f:86:e9:2a:fa:a3:25:23:a6:4c:24:96:6d:2a:8b:99:06:ae:
85:36:ce:29:38:95:ea:9a:c1:19:1c:87:1c:2d:e2:98:ea:5e:
7b:26:f2:c6:0f:db:ee:14:59:02:c1:0e:31:de:b8:64:e6:f6:
5e:df:4a:8a:a8:54:df:8c:3f:29:a6:4c:3a:5e:d3:44:2e:fd:
a6:3d:26:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:07:46 2026 by rpki-client