Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/gTujkA02GQdrXkYs9LvYQSXEp34.roa
File: gTujkA02GQdrXkYs9LvYQSXEp34.roa (raw, json)
Hash identifier: eBwiP+U3LL8DVRN00/r1vpnJByqzelzjVDrrVFDV40Q=
Subject key identifier: 81:3B:A3:90:0D:36:19:07:6B:5E:46:2C:F4:BB:D8:41:25:C4:A7:7E
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01A000C1AE33DBAF1926D3530CD7D18042FC
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/gTujkA02GQdrXkYs9LvYQSXEp34.roa
Signing time: Fri 14 Aug 2026 14:51:27 +0000
ROA not before: Fri 14 Aug 2026 14:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.233.32.0/24 maxlen: 24
46.233.34.0/24 maxlen: 24
46.233.35.0/24 maxlen: 24
46.233.42.0/24 maxlen: 24
46.233.52.0/24 maxlen: 24
46.233.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:c1:ae:33:db:af:19:26:d3:53:0c:d7:d1:80:42:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Aug 14 14:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=813ba3900d3619076b5e462cf4bbd84125c4a77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:38:bb:03:65:80:2c:4e:c9:bf:45:f2:a0:
f7:ee:6a:e3:b0:fc:d6:af:79:b9:b1:55:be:23:b1:
12:30:df:a9:9c:1c:bc:9f:83:2a:b8:25:c9:f1:65:
5a:6a:77:e2:65:9e:6f:07:70:d1:62:43:ff:07:11:
a3:eb:32:31:1b:1f:32:34:ad:a7:47:97:5b:4e:c8:
be:21:a7:51:13:0a:0a:41:37:0e:7a:fa:e3:2a:a8:
86:e9:cb:7f:da:68:02:61:c3:28:65:68:da:cb:f8:
53:8d:a5:65:29:10:83:fc:00:cd:0e:0c:fa:b5:37:
e4:cd:27:7c:c2:b6:84:66:df:5e:1e:66:24:d7:d3:
1d:9f:56:97:0b:dd:fa:b4:a7:d1:75:b6:95:25:23:
e4:a6:1d:ed:50:d6:de:46:5e:af:db:eb:09:a8:03:
56:88:f0:75:c2:c7:36:f4:65:d7:36:5a:e9:c0:40:
3d:a8:c1:0b:41:31:b6:7d:2f:6d:27:1b:02:a1:e0:
c7:32:67:ae:ea:34:18:02:bb:70:c8:e2:02:54:fd:
48:93:06:d9:8e:55:d5:6f:20:9d:68:94:d9:c4:32:
16:46:f2:59:bc:72:98:72:69:5d:d6:2d:03:ff:8e:
d2:24:89:a7:ac:a8:c3:07:ef:82:03:fa:2e:a8:9c:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3B:A3:90:0D:36:19:07:6B:5E:46:2C:F4:BB:D8:41:25:C4:A7:7E
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/gTujkA02GQdrXkYs9LvYQSXEp34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/24
46.233.34.0/23
46.233.42.0/24
46.233.52.0/24
46.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ff:92:ec:ee:44:ff:19:f4:18:f8:77:fa:92:45:1a:f1:8c:
a6:1b:eb:8a:ff:c0:13:b7:a9:ac:fe:ec:c1:c5:38:1c:76:34:
9e:c2:cc:8b:9d:21:c9:fc:9d:f7:f4:15:b9:ad:67:5b:bb:90:
3e:4a:59:1f:b4:1b:3b:4d:c5:73:af:46:75:66:e4:2e:ed:ca:
e7:62:06:13:d0:07:3b:34:a0:73:13:af:a6:a1:2e:7a:04:f3:
9d:ef:c5:83:ae:31:63:a7:61:fb:ca:63:f5:93:e9:04:b4:82:
cb:b9:9a:66:89:8c:17:9e:62:a6:f4:ce:ed:f1:d4:d7:23:49:
5e:10:e6:b3:59:6c:80:fc:fd:da:cf:43:70:7d:c1:b2:d4:ba:
de:5a:d7:c4:4c:b8:71:3a:67:7f:92:2e:5b:70:de:0a:d7:66:
6c:7c:1f:2d:0a:70:ae:db:54:02:ce:f0:51:9d:2f:f7:52:df:
11:bd:89:07:62:4c:87:20:58:78:0e:de:d1:fa:dc:e0:32:0b:
4b:1a:c3:65:8e:6d:ba:50:3e:d0:82:9e:02:d6:da:15:13:8a:
2c:06:cf:8f:0c:e0:c8:e8:74:16:5d:8a:3d:78:98:e4:a7:1e:
68:48:d5:fe:4d:a9:3e:13:37:6f:95:b9:18:b2:d1:a8:01:ba:
57:0d:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:07:54 2026 by rpki-client