Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/LDXf-e0_0yjYBSpbY7yBQR6hJQM.roa
File: LDXf-e0_0yjYBSpbY7yBQR6hJQM.roa (raw, json)
Hash identifier: Cl8VUoZG4+wHaQi1NJPsOz4tVV0LD4o/I0HW7pYlbS8=
Subject key identifier: 2C:35:DF:F9:ED:3F:D3:28:D8:05:2A:5B:63:BC:81:41:1E:A1:25:03
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019C98F5BB012F12BFE09E6B80B7588248D5
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/LDXf-e0_0yjYBSpbY7yBQR6hJQM.roa
Signing time: Thu 26 Feb 2026 07:59:26 +0000
ROA not before: Thu 26 Feb 2026 07:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.233.32.0/24 maxlen: 24
46.233.34.0/23 maxlen: 24
46.233.42.0/24 maxlen: 24
46.233.52.0/24 maxlen: 24
46.233.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:98:f5:bb:01:2f:12:bf:e0:9e:6b:80:b7:58:82:48:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Feb 26 07:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c35dff9ed3fd328d8052a5b63bc81411ea12503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:f7:c5:b5:1f:06:69:ad:40:08:be:1b:8f:
c6:16:74:ca:9b:d7:86:c1:4f:87:3f:80:07:e4:41:
e5:fb:66:ca:02:01:0c:74:8c:bb:70:78:db:a4:b9:
0f:88:46:00:46:7a:c6:bc:84:b1:80:53:3c:35:54:
e4:da:8d:8b:99:14:41:a8:ac:fb:0a:b9:6c:28:b7:
51:6a:1d:a4:75:13:ea:12:b9:4a:1e:bf:66:a3:2e:
0f:67:2c:2c:1c:6a:9c:af:2a:e6:71:5b:97:76:d6:
aa:a1:bf:2e:5f:18:b1:74:36:ac:59:53:76:b3:1f:
b4:32:58:79:ba:05:94:08:68:a3:9a:de:30:d0:f7:
f1:82:09:74:b5:ac:b0:2f:07:d4:7c:0d:2e:d7:2a:
6b:a4:7e:ab:0b:64:62:a2:42:3d:40:7d:3b:d8:1e:
04:eb:38:40:11:fe:e7:29:c9:d3:53:10:99:9e:5d:
78:1a:f4:71:65:36:b4:8f:e2:2b:ef:61:62:0e:e1:
74:dd:26:fb:e3:5c:4b:01:69:4b:17:25:a7:e8:55:
6e:86:22:92:b9:97:dc:54:2b:d4:82:b0:24:4a:09:
a4:45:92:81:d8:bb:d8:52:d5:fa:f9:8f:82:46:26:
e5:c4:e2:8b:9d:91:e0:2c:61:a0:f8:46:25:ca:da:
91:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:DF:F9:ED:3F:D3:28:D8:05:2A:5B:63:BC:81:41:1E:A1:25:03
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/LDXf-e0_0yjYBSpbY7yBQR6hJQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/24
46.233.34.0/23
46.233.42.0/24
46.233.52.0/24
46.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:fc:97:75:ab:3f:6c:ad:16:23:8d:0e:c1:96:ea:54:3b:7c:
ae:80:3b:2f:4c:62:11:ff:20:98:54:d8:15:a1:51:61:d4:5f:
15:84:4d:be:62:0c:a1:bc:a1:98:e7:f2:b2:0d:a4:34:6a:77:
75:6c:e4:49:2c:37:9a:b0:80:35:ff:87:9b:84:1b:31:c5:e5:
a6:20:48:b8:6a:47:db:c6:d6:b6:c0:0c:9d:dd:72:96:6d:fb:
30:e0:e7:d6:b7:46:f9:e2:c0:b3:67:9d:c6:7f:d9:25:c3:19:
a5:62:8f:12:4e:6a:86:fd:33:21:06:e3:e0:1c:08:9e:f0:81:
38:e4:c4:70:66:7f:23:a4:a5:27:66:ca:36:ef:16:45:ba:ef:
29:82:c4:75:46:04:f1:9f:f5:03:11:d4:4c:d7:d0:8b:a7:eb:
20:28:11:b7:35:da:9f:85:77:45:31:cf:f3:b7:a1:7c:8b:36:
32:34:95:7c:8a:9a:8a:bb:17:76:90:ec:82:1c:26:7a:e7:dc:
a0:cd:c0:48:7a:4c:79:80:aa:9c:19:3d:30:91:b2:2a:45:6f:
6f:06:02:8f:9f:aa:9a:05:16:eb:90:e2:07:1e:34:68:2e:19:
ce:cf:b2:19:f3:72:4b:11:3e:e3:9d:c2:a3:f2:bc:f2:9b:53:
cb:09:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:59 2026 by rpki-client