Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/_H3J1Q0wf1ue0eD6RUkc1ex1fZg.roa
File: _H3J1Q0wf1ue0eD6RUkc1ex1fZg.roa (raw, json)
Hash identifier: 8E6CjmtD48iYAKj5FVW1NYd7xgq0h72auMlNwc7qpB4=
Subject key identifier: FC:7D:C9:D5:0D:30:7F:5B:9E:D1:E0:FA:45:49:1C:D5:EC:75:7D:98
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01A0A0AB7926258A569C6DE7DCD794370D67
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/_H3J1Q0wf1ue0eD6RUkc1ex1fZg.roa
Signing time: Mon 14 Sep 2026 16:06:27 +0000
ROA not before: Mon 14 Sep 2026 16:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.233.32.0/24 maxlen: 24
46.233.34.0/24 maxlen: 24
46.233.35.0/24 maxlen: 24
46.233.42.0/24 maxlen: 24
46.233.44.0/24 maxlen: 24
46.233.45.0/24 maxlen: 24
46.233.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:ab:79:26:25:8a:56:9c:6d:e7:dc:d7:94:37:0d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Sep 14 16:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc7dc9d50d307f5b9ed1e0fa45491cd5ec757d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:c6:ba:d3:50:10:55:59:cd:1d:eb:ad:63:
b5:ef:12:bf:1f:5f:b2:f2:b3:2c:8a:f0:de:5c:e6:
e3:f5:d2:9d:39:50:74:f5:a1:b0:99:cd:cf:d2:6f:
8f:a3:3c:0d:ed:37:2a:34:a1:92:79:93:03:30:26:
f1:8b:b1:db:1c:07:32:df:b7:b4:88:13:0b:5f:c6:
cc:25:62:4c:72:a0:5f:99:25:53:74:46:0a:05:18:
cb:0c:9c:7b:b7:21:c9:d0:e0:4a:22:96:bd:37:4b:
10:fa:34:ba:e2:b7:ed:8e:2a:8e:bf:02:a6:13:8f:
ad:55:5a:48:2d:4b:a4:19:57:8e:fd:4f:6b:ea:4a:
e1:43:7a:08:d8:0d:02:bd:d6:06:fb:bd:52:77:54:
29:af:b0:64:b8:b5:c1:2b:c5:3a:e6:9c:b0:fa:cc:
e9:1a:83:08:70:4c:8e:81:36:0f:59:6c:66:67:ae:
14:db:29:6c:10:b9:67:12:01:c0:6e:d8:86:ff:0c:
e2:75:ba:9c:a4:99:f2:17:3d:51:7c:ca:f5:c6:25:
f0:e7:29:fb:69:c9:aa:b3:e9:c5:58:1a:0e:62:13:
18:d0:57:37:10:53:d3:a4:c5:a2:a9:9f:54:e1:91:
f3:c4:38:64:55:96:a9:eb:95:fc:c3:8e:9f:95:7b:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:C9:D5:0D:30:7F:5B:9E:D1:E0:FA:45:49:1C:D5:EC:75:7D:98
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/_H3J1Q0wf1ue0eD6RUkc1ex1fZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/24
46.233.34.0/23
46.233.42.0/24
46.233.44.0/23
46.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:7e:c1:75:dc:a3:be:34:bf:df:83:f9:90:9a:44:08:de:e2:
cc:ad:94:b5:2c:31:4b:9d:da:6f:56:18:cb:53:e6:bf:8f:ef:
31:4b:f6:4f:6f:1d:06:f1:1f:d8:08:a7:66:da:36:ad:e4:ff:
2d:d7:51:84:ec:9b:8e:6b:5e:3d:ff:c9:8b:41:7a:fb:35:d4:
4b:85:0e:f5:be:dd:52:08:7d:bf:6a:f6:56:33:00:99:9e:43:
8f:7f:93:69:f5:54:f8:bd:7b:18:d2:ea:c5:a5:7e:52:a3:c7:
89:12:c1:08:f0:0d:3a:ae:3e:c3:c9:27:ce:c5:b1:99:27:39:
5f:88:59:7c:d8:1c:aa:1c:6b:4f:3a:4c:2d:fc:09:4a:6d:87:
32:60:f7:be:a6:df:76:07:ae:15:34:11:60:21:67:06:96:7a:
25:55:de:84:85:00:88:aa:82:d7:e0:ed:7b:e7:fd:29:63:ce:
2f:7c:eb:21:4e:22:e7:a6:02:da:a7:0b:d6:93:5a:b3:27:f4:
2a:e2:9a:42:93:fd:55:af:87:82:98:5a:61:18:b0:32:5f:47:
49:8b:14:fe:58:18:4d:84:5b:55:bb:43:56:43:18:35:3b:0d:
62:c1:2d:aa:b9:28:b2:7d:8d:9b:72:71:b0:14:d4:17:34:f4:
66:e5:bf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:24 2026 by rpki-client