Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hzxxPGg5MDjjd1W04A0XjAEt6KU.roa
File: hzxxPGg5MDjjd1W04A0XjAEt6KU.roa (raw, json)
Hash identifier: pd+5JuUo6DGsgLgsFzJ04mH4wsYQ42Nz8tr3ubdP9Iw=
Subject key identifier: 87:3C:71:3C:68:39:30:38:E3:77:55:B4:E0:0D:17:8C:01:2D:E8:A5
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019D967C487BE127FA00209BD09B55BD381E
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hzxxPGg5MDjjd1W04A0XjAEt6KU.roa
Signing time: Thu 16 Apr 2026 13:30:20 +0000
ROA not before: Thu 16 Apr 2026 13:30:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 46.233.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:7c:48:7b:e1:27:fa:00:20:9b:d0:9b:55:bd:38:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Apr 16 13:30:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=873c713c68393038e37755b4e00d178c012de8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:e5:ae:55:58:ca:0c:f5:51:ec:2e:0a:f3:
96:61:a2:8d:ac:97:d9:52:8c:50:de:30:7c:96:c9:
8a:85:6a:3a:2c:50:92:58:91:9f:2e:bd:1b:b5:3e:
3b:dc:38:69:2e:42:c1:81:f7:c3:0a:68:3d:a6:4a:
0f:05:04:d5:d8:92:c3:b9:0c:52:87:77:42:30:d1:
77:d7:cc:39:73:7a:ea:de:81:8a:03:b7:c1:81:d6:
3e:08:88:f5:9e:31:48:8d:85:e5:f4:ca:73:26:40:
d5:52:cb:bc:44:53:3d:55:fb:b1:78:9d:2d:85:96:
3c:74:64:b4:22:12:05:5f:88:27:01:bb:28:f6:3a:
ce:a7:c4:ee:c8:f8:df:9b:ba:40:3a:f0:27:10:45:
bb:5b:c6:28:4c:e8:4f:d9:e5:fe:5c:f9:14:f4:1d:
ec:1a:1a:5d:ab:cf:7e:15:69:cc:e1:37:f7:ec:f9:
c9:89:38:62:10:2a:83:f6:d2:6d:19:49:5f:97:f7:
db:3d:bf:d1:30:e8:2b:42:d7:1b:98:5a:69:9c:a8:
ce:67:a7:7a:14:5d:3c:82:e7:bd:91:bd:00:07:e3:
6e:5c:ba:f8:13:27:1a:a5:6c:0b:46:5a:89:6a:8d:
93:9d:16:67:ee:59:6e:d2:40:74:f7:84:86:54:f0:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3C:71:3C:68:39:30:38:E3:77:55:B4:E0:0D:17:8C:01:2D:E8:A5
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hzxxPGg5MDjjd1W04A0XjAEt6KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.34.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6f:48:47:66:7d:15:55:1e:f8:09:4c:5a:a2:62:24:91:e0:
c9:dc:60:80:3a:be:b7:c1:06:5a:01:c7:b2:23:f3:fe:e0:a5:
bd:f7:e1:77:33:33:69:1a:41:60:27:dd:2e:55:d6:f1:83:36:
f1:fb:36:01:78:25:e7:b7:1d:ba:0f:29:2f:c6:7f:81:32:8a:
4f:73:13:3c:53:69:4d:d3:5a:6b:6b:5b:02:c6:f2:e0:a6:33:
4c:74:28:a0:c4:d1:ec:20:1f:9c:46:ce:74:85:0f:25:ed:ea:
e5:0a:64:74:09:95:7c:e7:a6:ab:2e:a3:af:2b:f2:c3:f1:71:
46:5e:a6:11:68:b2:81:2d:a2:84:b5:44:8e:bb:39:13:01:85:
cf:67:30:e5:19:ec:8d:c3:d4:5f:2d:b4:ce:c9:3f:83:ac:12:
10:90:ae:36:65:f1:b0:15:b7:84:cb:e6:48:76:03:a5:74:c2:
ba:7b:92:c4:94:3e:2c:8f:49:ad:d8:e6:ae:a0:30:96:b2:30:
aa:fe:4b:8a:6b:90:0d:3e:b2:ec:7c:31:dc:e1:58:db:35:59:
f9:af:2e:7f:b8:b4:13:8d:2d:6f:1a:c8:d8:b2:a0:ed:52:8d:
5f:84:1c:79:24:a7:e1:22:a2:b6:8c:a4:4d:f6:ce:af:e2:38:
fc:22:60:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2WfEh74Sf6ACCb0JtVvTgeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjYwNDE2MTMzMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzNjNzEzYzY4MzkzMDM4ZTM3NzU1YjRlMDBkMTc4YzAxMmRlOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6nlrlVYygz1UewuCvOWYaKNrJfZ
UoxQ3jB8lsmKhWo6LFCSWJGfLr0btT473DhpLkLBgffDCmg9pkoPBQTV2JLDuQxS
h3dCMNF318w5c3rq3oGKA7fBgdY+CIj1njFIjYXl9MpzJkDVUsu8RFM9VfuxeJ0t
hZY8dGS0IhIFX4gnAbso9jrOp8TuyPjfm7pAOvAnEEW7W8YoTOhP2eX+XPkU9B3s
Ghpdq89+FWnM4Tf37PnJiThiECqD9tJtGUlfl/fbPb/RMOgrQtcbmFppnKjOZ6d6
FF08gue9kb0AB+NuXLr4EycapWwLRlqJao2TnRZn7llu0kB094SGVPDESwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIc8cTxoOTA443dVtOANF4wBLeilMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvaHp4eFBHZzVNRGpqZDFXMDRBMFhqQUV0NktVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALukiMA0G
CSqGSIb3DQEBCwUAA4IBAQBSb0hHZn0VVR74CUxaomIkkeDJ3GCAOr63wQZaAcey
I/P+4KW99+F3MzNpGkFgJ90uVdbxgzbx+zYBeCXntx26Dykvxn+BMopPcxM8U2lN
01pra1sCxvLgpjNMdCigxNHsIB+cRs50hQ8l7erlCmR0CZV856arLqOvK/LD8XFG
XqYRaLKBLaKEtUSOuzkTAYXPZzDlGeyNw9RfLbTOyT+DrBIQkK42ZfGwFbeEy+ZI
dgOldMK6e5LElD4sj0mt2OauoDCWsjCq/kuKa5ANPrLsfDHc4VjbNVn5ry5/uLQT
jS1vGsjYsqDtUo1fhBx5JKfhIqK2jKRN9s6v4jj8ImBA
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:11:29 2026 by rpki-client