Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/vbkUkoSSvSBZWgO04-XIKz79J_g.roa
File: vbkUkoSSvSBZWgO04-XIKz79J_g.roa (raw, json)
Hash identifier: rJWBZTHWqIREoHZuiUQTaD5sySodS5E6pv5B11Juiwo=
Subject key identifier: BD:B9:14:92:84:92:BD:20:59:5A:03:B4:E3:E5:C8:2B:3E:FD:27:F8
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01A0F67E79D6170DA794E10ABF192AFDAF42
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/vbkUkoSSvSBZWgO04-XIKz79J_g.roa
Signing time: Thu 01 Oct 2026 08:04:38 +0000
ROA not before: Thu 01 Oct 2026 08:04:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.233.32.0/24 maxlen: 24
46.233.34.0/24 maxlen: 24
46.233.35.0/24 maxlen: 24
46.233.42.0/24 maxlen: 24
46.233.44.0/24 maxlen: 24
46.233.52.0/24 maxlen: 24
46.233.55.0/24 maxlen: 24
46.233.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7e:79:d6:17:0d:a7:94:e1:0a:bf:19:2a:fd:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Oct 1 08:04:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdb914928492bd20595a03b4e3e5c82b3efd27f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:9d:a6:f9:d5:8d:de:c1:b1:fc:d8:55:e6:
0e:24:b0:74:52:b5:18:d4:22:e2:1c:09:45:ea:a0:
86:f7:eb:33:5f:3d:a1:a0:d9:1d:43:f9:e4:3b:e4:
25:7c:c7:9c:07:a0:d9:5e:ba:8c:dd:c0:cc:5f:e9:
c0:e1:0f:53:80:10:e3:80:24:dd:09:ba:8c:6b:41:
44:23:ef:3c:5d:b4:56:c9:5e:03:e3:53:dd:42:9d:
23:c8:14:d4:56:ef:5c:85:37:13:29:18:9d:ed:ad:
ca:93:48:d5:55:04:13:66:49:f2:87:64:64:1e:40:
33:62:ea:10:d1:4d:c3:bd:fc:7d:f0:ed:51:6b:cc:
ae:c0:54:9f:58:45:f6:c1:dc:e6:bb:c0:98:3d:1b:
e6:20:c0:49:ed:d3:5c:f0:89:ff:0a:9e:80:f6:a6:
0d:20:e3:69:c3:6e:a7:c2:fa:c1:78:51:60:2e:bc:
5d:8a:17:ef:17:37:76:ad:3c:20:c6:73:b9:f7:2a:
b8:1d:03:5e:b5:10:35:e8:62:f7:5f:25:b1:d1:a8:
1f:f5:b2:50:22:92:eb:f4:b6:6e:c3:0a:b1:e3:62:
6b:f7:ab:02:a9:c0:76:7f:2f:1e:29:34:fa:3b:f5:
87:57:d2:aa:af:ab:fb:33:82:41:c1:80:63:02:24:
1b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B9:14:92:84:92:BD:20:59:5A:03:B4:E3:E5:C8:2B:3E:FD:27:F8
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/vbkUkoSSvSBZWgO04-XIKz79J_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/24
46.233.34.0/23
46.233.42.0/24
46.233.44.0/24
46.233.52.0/24
46.233.55.0/24
46.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:91:6f:92:a6:d9:4f:b7:65:31:8f:96:ff:dc:c6:80:05:ee:
e1:56:1a:bb:bc:f9:29:e3:bb:d2:47:a4:a0:52:cc:59:9e:72:
f0:70:75:dc:57:c6:05:05:18:cf:ca:e7:c8:08:d5:f8:df:fa:
69:99:fe:91:3a:7b:c5:53:64:8b:34:2e:7f:75:39:21:43:5d:
47:f0:dc:3f:00:56:d9:ae:75:30:3a:3e:3e:c4:51:74:eb:ef:
0d:e0:78:d8:2a:c4:16:bf:f8:7a:8b:54:58:65:fe:54:c2:e2:
0c:e9:47:c4:eb:2e:7a:44:4f:a4:b6:09:f5:8a:a1:c2:25:87:
d3:db:08:a9:d7:61:1e:17:ea:dc:98:8e:1f:27:f4:58:f7:f8:
9e:cd:8f:0a:c8:bc:c7:55:28:f7:bc:02:7d:9d:27:2c:d9:96:
1d:d1:09:df:fd:2d:25:49:c7:12:10:16:c2:17:f4:ca:b0:a3:
af:6d:81:fa:4a:f8:6f:2f:14:f3:5a:b6:b4:6c:b3:32:8b:85:
87:21:ce:13:b4:f7:cc:15:be:af:17:90:1a:a6:9c:e4:dc:91:
09:e8:e4:70:8d:70:c1:9f:19:aa:df:19:0d:79:15:08:10:58:
36:08:6c:98:fd:01:79:ce:44:1b:40:ab:0b:c8:aa:36:f3:cf:
d6:18:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:24 2026 by rpki-client