Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/yxrkqGQZlFAWzP7p2EFdhz9L4T0.roa
File: yxrkqGQZlFAWzP7p2EFdhz9L4T0.roa (raw, json)
Hash identifier: qcYyYWPIWTP6G0c0uC3TsjboUI+iyVfrwNzja6Sgli8=
Subject key identifier: CB:1A:E4:A8:64:19:94:50:16:CC:FE:E9:D8:41:5D:87:3F:4B:E1:3D
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019D2A41A25DC1C1404068AB421EF65D7304
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/yxrkqGQZlFAWzP7p2EFdhz9L4T0.roa
Signing time: Thu 26 Mar 2026 13:07:17 +0000
ROA not before: Thu 26 Mar 2026 13:07:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.233.35.0/24 maxlen: 24
46.233.42.0/24 maxlen: 24
46.233.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:41:a2:5d:c1:c1:40:40:68:ab:42:1e:f6:5d:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Mar 26 13:07:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb1ae4a86419945016ccfee9d8415d873f4be13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:c7:33:76:bf:8f:9b:67:6a:27:47:16:d5:
b0:db:13:1d:39:fc:f1:55:a5:df:b6:71:39:bc:12:
1a:a6:68:56:53:a0:57:6a:79:70:1e:10:ba:18:30:
58:62:50:ab:53:ad:3a:f5:24:0b:32:f8:6f:67:fc:
53:f6:68:c7:c3:ea:6e:b9:89:f5:b4:78:52:5e:52:
1d:d2:1e:b7:68:35:63:b0:fa:da:36:85:65:15:20:
4a:2b:fc:92:b4:25:fe:4e:fd:14:b3:e2:c5:31:db:
e4:00:2f:cd:51:79:49:4f:ab:46:84:33:c1:fd:96:
3f:a5:78:e8:12:ea:ce:46:3b:49:f6:8b:10:f6:94:
0b:2e:28:f0:d8:09:0c:60:e9:dd:cf:73:3b:14:a6:
bb:5a:13:9b:98:c6:e3:d1:00:f6:45:c7:0e:7d:69:
dc:f8:16:fe:5f:ae:2e:ab:d4:28:94:f1:5c:93:6b:
58:b8:51:29:67:34:ce:9b:f7:e0:cc:9f:7f:a2:ee:
62:10:54:ca:9e:58:e1:82:28:b4:66:cd:09:ab:c9:
e0:85:d0:8e:b9:b2:58:de:77:aa:f0:c8:19:68:a0:
0e:b2:73:90:7b:45:03:a2:16:5c:9a:13:5f:1e:4a:
cd:01:7c:a3:97:80:cf:c7:c3:88:f7:71:18:c1:92:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1A:E4:A8:64:19:94:50:16:CC:FE:E9:D8:41:5D:87:3F:4B:E1:3D
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/yxrkqGQZlFAWzP7p2EFdhz9L4T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.35.0/24
46.233.42.0/24
46.233.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:22:d2:11:6d:0c:5d:f3:63:a9:4c:56:f3:04:09:3c:06:d4:
54:90:7c:d3:29:f1:06:3c:d2:b0:7d:3e:dc:fe:f2:50:3f:1b:
8a:53:61:93:f3:ba:c6:90:63:c4:d7:93:c3:65:84:b6:8f:48:
c2:46:d3:e1:1d:49:8b:89:d0:e1:57:d0:51:df:7e:af:48:20:
13:73:22:54:c4:3d:aa:fb:cf:d5:c8:f6:7c:8e:6a:85:0f:2b:
45:7a:6f:51:23:cb:c3:84:36:5b:fb:46:c2:09:7c:5d:dd:2d:
b9:d6:c5:97:11:34:cb:a5:22:07:60:83:86:b6:2c:a7:82:2c:
89:ca:08:df:20:51:83:15:e0:e0:6d:15:2f:3c:e2:52:ed:e0:
13:20:1b:b7:f1:b6:2b:f4:31:8c:03:72:1f:93:6d:23:f0:76:
0f:d2:ea:70:54:fc:40:55:47:6f:42:74:c4:7e:5f:9c:d6:47:
c5:87:9f:ef:b7:39:af:08:33:c8:b3:48:8a:9b:7f:38:c4:83:
b1:4e:42:e6:64:71:c4:bb:6b:70:8c:31:c8:a9:e8:fd:41:80:
88:6c:c2:84:a0:f3:8f:e8:54:ef:65:00:6c:0a:5b:0b:89:7f:
8a:18:8d:08:32:e1:26:2d:73:51:67:7e:55:ba:8d:d8:d0:34:
65:59:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:37:12 2026 by rpki-client