Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/tbUnyuDY7UDc9s9Pi2PMZZi8JHs.roa
File: tbUnyuDY7UDc9s9Pi2PMZZi8JHs.roa (raw, json)
Hash identifier: nJyY8ay9th+CegqldK3i2YFyDGeEiiTQjam/4aSux9E=
Subject key identifier: B5:B5:27:CA:E0:D8:ED:40:DC:F6:CF:4F:8B:63:CC:65:98:BC:24:7B
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01A1AB0B8FEC0DC57CC14E65967D57422E8C
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/tbUnyuDY7UDc9s9Pi2PMZZi8JHs.roa
Signing time: Thu 05 Nov 2026 09:30:23 +0000
ROA not before: Thu 05 Nov 2026 09:30:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.233.32.0/24 maxlen: 24
46.233.34.0/24 maxlen: 24
46.233.35.0/24 maxlen: 24
46.233.42.0/24 maxlen: 24
46.233.44.0/24 maxlen: 24
46.233.52.0/24 maxlen: 24
46.233.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:0b:8f:ec:0d:c5:7c:c1:4e:65:96:7d:57:42:2e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Nov 5 09:30:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5b527cae0d8ed40dcf6cf4f8b63cc6598bc247b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b9:8f:0c:8e:f8:34:3c:c2:d9:ad:0f:c5:de:
63:e7:ce:c9:cd:4f:c1:d5:dc:ec:7a:e4:68:dd:18:
4c:47:f7:25:4d:a8:99:24:a4:38:77:0e:22:db:4a:
f4:ca:30:e3:91:97:7e:d0:a3:c2:41:14:7b:1d:ce:
6f:87:89:ed:34:00:3a:55:55:74:70:42:9f:c3:84:
53:4c:3b:e1:ca:85:db:5d:b4:dc:9e:d7:49:19:54:
c1:6a:14:0b:18:eb:88:2f:e9:3d:f1:a6:88:a9:7a:
e2:8b:1c:e8:d0:f8:57:a7:2f:3e:a0:bc:f7:83:3c:
1b:98:e6:5a:c9:db:47:f5:68:fe:6e:2c:70:7b:0f:
3b:66:c0:b1:1f:84:bd:e2:d1:fc:36:97:de:b0:00:
fe:64:cd:68:ca:7a:88:4c:da:d6:64:08:3a:93:93:
16:93:6e:4f:48:ff:bb:67:d4:88:11:02:5e:99:d6:
4b:d5:f1:34:d3:0e:4f:63:ce:92:f7:b2:ec:fe:b0:
d6:45:2c:6e:de:89:5e:08:1e:ba:b4:66:ef:93:3d:
13:e6:b9:11:7f:ae:e4:37:b7:f8:31:9b:29:76:04:
27:33:c2:1b:a8:44:98:5b:95:0b:5c:db:f2:d1:74:
8d:0a:70:c8:0a:01:2d:6d:e6:35:98:a5:60:c6:c0:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B5:27:CA:E0:D8:ED:40:DC:F6:CF:4F:8B:63:CC:65:98:BC:24:7B
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/tbUnyuDY7UDc9s9Pi2PMZZi8JHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/24
46.233.34.0/23
46.233.42.0/24
46.233.44.0/24
46.233.52.0/24
46.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
08:3e:be:5c:12:84:44:d6:62:d9:e2:cf:6c:dd:64:a6:e0:76:
01:71:90:59:e0:ee:2b:64:9d:7f:2e:c4:15:4a:9d:f7:3e:4f:
51:3f:c3:2f:11:80:c3:fb:f1:16:b3:51:52:cb:4d:20:e5:5b:
6f:f6:a0:41:43:6c:bf:24:23:a7:a3:d7:89:df:20:dc:c3:16:
0e:8e:d9:0d:b1:19:02:e1:29:3c:ae:62:7f:e7:dd:2c:3c:db:
e3:a0:ff:fe:6d:c0:c8:de:21:ca:cb:cd:d7:e9:fd:13:f3:78:
6f:3c:8b:e1:e3:86:2d:3e:b2:88:00:5f:94:7c:f5:db:98:25:
0b:e8:2f:20:48:d6:8a:95:4e:a8:8c:98:f8:ae:16:6a:4b:d6:
b9:44:47:b4:c6:f1:ee:4a:93:cb:c7:47:3f:37:72:e0:2c:d6:
87:96:20:16:52:4d:19:c2:86:33:be:ff:d6:e5:ce:3b:f8:20:
b6:a7:a5:e5:d2:ca:6d:34:e1:6d:e5:e2:9b:d4:74:92:93:2e:
25:74:c6:6c:08:71:f4:6c:e7:00:f7:ec:2e:d2:a9:fd:5f:41:
f5:91:9f:c5:61:c1:55:3b:ec:78:d0:3d:c6:1c:f3:f5:36:7b:
ba:12:01:a1:cb:32:90:60:f4:6f:63:19:71:85:f8:e8:8f:00:
0e:78:ae:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 03:22:19 2026 by rpki-client