Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/gYYXDUTN2EgwuzGqZIb6eiBvYiM.roa
File: gYYXDUTN2EgwuzGqZIb6eiBvYiM.roa (raw, json)
Hash identifier: Zn/Y5twSU4SLe3TYCjq3+gCCGA1YygMxfdFYERXOCJ4=
Subject key identifier: 81:86:17:0D:44:CD:D8:48:30:BB:31:AA:64:86:FA:7A:20:6F:62:23
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019D9A7A03CF208C0C533921472C0ABD0511
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/gYYXDUTN2EgwuzGqZIb6eiBvYiM.roa
Signing time: Fri 17 Apr 2026 08:06:20 +0000
ROA not before: Fri 17 Apr 2026 08:06:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 46.233.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:7a:03:cf:20:8c:0c:53:39:21:47:2c:0a:bd:05:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Apr 17 08:06:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8186170d44cdd84830bb31aa6486fa7a206f6223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:df:c7:4b:ac:43:bc:b8:52:69:5b:e1:9d:
2e:69:6a:2e:4e:0e:c8:0b:d8:82:5f:53:40:a2:a1:
93:60:16:92:95:7e:b0:ea:12:be:37:2b:76:05:62:
e9:59:0b:57:29:4f:56:eb:f0:6a:c4:89:73:66:70:
55:41:1c:c3:a8:f5:d1:85:ad:50:a4:f4:c1:73:82:
20:78:a4:f6:ad:39:fe:a9:86:66:14:72:b1:88:c9:
21:88:bb:74:8d:78:a7:81:47:79:6a:d3:28:a0:a2:
fe:36:b8:b1:81:fe:44:b4:d8:30:b1:64:ba:fb:6f:
39:00:69:8b:0d:49:42:d0:ab:ba:2e:f5:c7:4e:5d:
4f:5a:50:1f:fc:4e:63:c6:a5:4c:68:b6:9d:4b:81:
6c:1f:da:95:ba:1e:10:f7:3c:a9:39:86:ab:4d:7b:
16:17:9c:ad:c2:f5:a2:9d:5a:19:8c:8b:94:68:dc:
7c:3e:ff:ab:99:a1:86:81:40:31:d8:90:08:dc:e2:
f8:dd:14:f5:3b:c8:5e:f7:b0:2c:63:59:d0:c2:28:
11:2a:22:5c:22:9f:dd:a4:90:b3:8d:4a:61:33:aa:
14:88:d2:c4:31:57:ee:38:02:ec:84:68:9e:e7:a9:
a2:4a:11:a0:23:5f:68:16:7b:af:ec:d7:03:94:61:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:86:17:0D:44:CD:D8:48:30:BB:31:AA:64:86:FA:7A:20:6F:62:23
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/gYYXDUTN2EgwuzGqZIb6eiBvYiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c1:63:be:dd:cb:f1:63:e5:d0:bb:d4:bf:34:ba:3f:89:05:
f0:1d:2b:71:6b:18:15:80:73:a0:90:d3:ab:63:a1:63:c8:6f:
b1:48:e9:04:e4:bd:92:3b:a2:29:d3:ad:72:6b:2f:0d:cd:94:
e9:93:30:40:c3:f4:79:c3:b4:e5:23:cf:b4:0b:c4:49:63:7a:
a1:ff:e0:9e:51:fd:b8:2d:29:10:45:44:68:c8:3d:76:8a:c0:
5d:62:39:73:3c:df:12:85:01:a1:36:52:1c:52:17:4b:41:83:
d9:59:80:0d:bd:b3:24:7f:5f:45:49:89:43:52:4a:82:62:a3:
30:ae:b9:80:df:f9:af:bb:f5:5d:25:9b:6f:50:e8:8c:50:b5:
35:c1:75:bb:42:73:4f:62:d2:d1:a0:d2:bc:26:db:0f:c5:ad:
bb:35:cb:a5:e7:95:d5:3f:29:f1:4d:bc:55:cb:73:e8:2a:1d:
d6:5e:db:c0:ed:32:89:f3:38:1f:42:6e:a6:dc:44:35:b4:af:
06:ca:b5:b1:58:2e:a6:df:6d:66:c1:18:f6:6a:7d:2d:07:66:
28:bd:38:03:cd:4d:1e:95:41:8f:fe:08:57:98:77:23:c1:47:
cc:9e:eb:0c:b1:62:c4:7c:7a:1b:1e:50:e7:51:cb:e9:be:6a:
39:c4:20:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:52 2026 by rpki-client