Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/jNMygHuRSXpYzNj6gZQgWERxLwM.roa
File: jNMygHuRSXpYzNj6gZQgWERxLwM.roa (raw, json)
Hash identifier: EzxdwTNVGjMMNxavYpEugHu0kyIdYQMSnG65UmI66ZU=
Subject key identifier: 8C:D3:32:80:7B:91:49:7A:58:CC:D8:FA:81:94:20:58:44:71:2F:03
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01993778965B05C077139E86E230A7227F22
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/jNMygHuRSXpYzNj6gZQgWERxLwM.roa
Signing time: Thu 11 Sep 2025 06:31:13 +0000
ROA not before: Thu 11 Sep 2025 06:31:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.233.32.0/22 maxlen: 24
46.233.38.0/24 maxlen: 24
46.233.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:78:96:5b:05:c0:77:13:9e:86:e2:30:a7:22:7f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Sep 11 06:31:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cd332807b91497a58ccd8fa8194205844712f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ac:2c:06:de:5b:bc:39:3c:fa:06:33:3b:d8:
45:02:c9:cf:34:14:23:7d:04:35:87:90:37:b7:91:
49:58:23:67:c8:cc:04:46:06:d5:ea:ac:49:b4:76:
17:5c:07:93:1c:9a:98:6b:7a:2e:38:d6:da:59:8b:
8c:5b:d9:1b:a1:8a:2a:e8:2a:c3:7f:d0:fb:d0:e2:
46:3c:3e:59:bd:75:90:99:21:90:5b:15:06:20:c4:
03:e3:2d:3b:52:0c:66:09:d8:ef:26:75:32:96:49:
e1:d3:c0:96:d4:63:3c:98:0e:9a:6a:62:8a:31:ce:
2e:18:3f:22:e6:5d:49:d7:23:6f:de:09:52:27:22:
cb:b6:c4:21:8c:b5:c2:04:dc:75:52:31:e3:80:fb:
9c:27:e9:7e:50:5e:d3:36:6b:37:38:0e:72:e8:91:
ac:cb:93:0f:cd:b6:9e:c2:e9:82:ad:d5:dd:e2:5f:
b7:d2:f0:7b:7e:c4:c2:16:ea:79:fc:7d:51:5c:b0:
da:50:6b:c6:b0:16:1c:1a:94:1f:9b:dc:31:f8:12:
9a:9a:98:bf:54:5e:bd:59:25:67:22:8c:6d:d1:91:
24:cd:9a:4e:1f:9f:e3:42:f9:7f:49:91:da:98:17:
6c:11:37:95:0b:0f:8f:7b:e0:e0:a5:c4:c4:9b:48:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D3:32:80:7B:91:49:7A:58:CC:D8:FA:81:94:20:58:44:71:2F:03
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/jNMygHuRSXpYzNj6gZQgWERxLwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/22
46.233.38.0/24
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
85:24:69:bc:0c:62:78:7e:71:57:0f:55:c4:fb:27:63:f0:be:
ec:55:f9:10:1c:d6:02:f8:e7:32:63:ac:a9:05:fa:e3:a1:48:
12:80:f4:d8:b1:51:15:78:d6:69:72:a1:97:34:ee:b1:18:fa:
e2:2a:34:57:c9:dd:bf:9a:e6:7d:1e:a5:de:68:6f:1e:fd:da:
32:41:4c:04:13:83:49:13:6a:53:3d:ba:0e:0a:78:df:33:1d:
d9:18:a6:72:90:c1:f3:d9:7b:3b:0e:6e:27:b9:01:1d:83:30:
99:a6:0a:d7:0c:aa:61:98:01:90:74:32:3f:27:0d:74:32:89:
ef:bd:2b:b1:af:52:4b:37:2f:dc:b3:17:16:44:32:db:2d:3e:
74:13:c1:11:56:35:3f:8f:0a:48:00:39:66:c4:bf:1c:f6:b8:
61:e7:7c:b5:29:8a:87:b0:87:92:16:04:0b:6b:e2:da:df:5e:
6a:ac:48:1f:66:e2:c1:00:3e:02:30:72:15:ff:e2:ec:03:f6:
cd:97:cf:c6:de:a3:b1:78:66:2a:fd:67:db:52:4c:50:1b:54:
e9:4c:b4:b4:87:44:1a:d0:bb:35:43:49:47:5c:92:4d:35:10:
af:2f:fd:30:33:7e:75:7f:e7:67:83:04:d3:a6:4d:ce:29:35:
02:64:32:9b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZk3eJZbBcB3E56G4jCnIn8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjUwOTExMDYzMTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2QzMzI4MDdiOTE0OTdhNThjY2Q4ZmE4MTk0MjA1ODQ0NzEyZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6awsBt5bvDk8+gYzO9hFAsnPNBQj
fQQ1h5A3t5FJWCNnyMwERgbV6qxJtHYXXAeTHJqYa3ouONbaWYuMW9kboYoq6CrD
f9D70OJGPD5ZvXWQmSGQWxUGIMQD4y07UgxmCdjvJnUylknh08CW1GM8mA6aamKK
Mc4uGD8i5l1J1yNv3glSJyLLtsQhjLXCBNx1UjHjgPucJ+l+UF7TNms3OA5y6JGs
y5MPzbaewumCrdXd4l+30vB7fsTCFup5/H1RXLDaUGvGsBYcGpQfm9wx+BKampi/
VF69WSVnIoxt0ZEkzZpOH5/jQvl/SZHamBdsETeVCw+Pe+DgpcTEm0i2cQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIzTMoB7kUl6WMzY+oGUIFhEcS8DMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvak5NeWdIdVJTWHBZek5qNmdaUWdXRVJ4THdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLukgAwQA
LukmAwQBLukqMA0GCSqGSIb3DQEBCwUAA4IBAQCFJGm8DGJ4fnFXD1XE+ydj8L7s
VfkQHNYC+OcyY6ypBfrjoUgSgPTYsVEVeNZpcqGXNO6xGPriKjRXyd2/muZ9HqXe
aG8e/doyQUwEE4NJE2pTPboOCnjfMx3ZGKZykMHz2Xs7Dm4nuQEdgzCZpgrXDKph
mAGQdDI/Jw10MonvvSuxr1JLNy/csxcWRDLbLT50E8ERVjU/jwpIADlmxL8c9rhh
53y1KYqHsIeSFgQLa+La315qrEgfZuLBAD4CMHIV/+LsA/bNl8/G3qOxeGYq/Wfb
UkxQG1TpTLS0h0Qa0Ls1Q0lHXJJNNRCvL/0wM351f+dngwTTpk3OKTUCZDKb
-----END CERTIFICATE-----
Generated at Thu Sep 18 03:38:47 2025 by rpki-client