Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Dc6BAEltaDP2vpyBv3HQuOpTBRc.roa
File: Dc6BAEltaDP2vpyBv3HQuOpTBRc.roa (raw, json)
Hash identifier: zHQ4G3ozImFZmCROGDcBHxKHHzDIQqVZcTlnWGds6nA=
Subject key identifier: 0D:CE:81:00:49:6D:68:33:F6:BE:9C:81:BF:71:D0:B8:EA:53:05:17
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019894DBBAE40CFC6AAEDB177DB79A43765A
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Dc6BAEltaDP2vpyBv3HQuOpTBRc.roa
Signing time: Sun 10 Aug 2025 16:41:24 +0000
ROA not before: Sun 10 Aug 2025 16:41:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51788
IP address blocks: 46.148.33.0/24 maxlen: 24
46.148.34.0/24 maxlen: 24
46.148.37.0/24 maxlen: 24
46.148.41.0/24 maxlen: 24
46.148.42.0/24 maxlen: 24
46.148.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:db:ba:e4:0c:fc:6a:ae:db:17:7d:b7:9a:43:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Aug 10 16:41:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dce8100496d6833f6be9c81bf71d0b8ea530517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:aa:c6:d3:9d:79:10:49:38:86:63:e9:1c:
ae:99:8a:c3:cc:b3:c0:c0:99:7a:4d:96:b9:dc:8d:
e7:90:e5:8b:63:0e:95:1f:f0:e8:39:8b:ea:fe:55:
36:16:a7:ea:03:a9:db:9b:9a:71:b4:27:b3:ba:43:
ff:99:a5:a0:b5:b6:53:78:1a:19:8c:b2:d3:f9:23:
f5:ab:79:f3:46:72:8c:76:38:36:fb:b6:b7:a9:d9:
b8:3f:d9:d5:72:0f:53:e0:43:6d:46:7a:c1:ce:4c:
63:bd:f6:4c:d6:2d:2b:09:74:70:5f:d8:a8:45:21:
4d:36:04:79:9a:42:76:fc:a2:6b:1d:02:07:b0:a6:
4f:f0:aa:f7:10:ee:b4:18:e6:33:fe:2e:51:ae:a4:
cc:24:0b:45:72:f6:99:d3:73:41:6d:31:c2:92:51:
31:ef:da:54:f0:b2:ed:cb:cb:4b:a9:b3:f0:24:49:
83:50:25:9e:95:19:2c:c5:27:70:73:02:2d:de:1a:
2f:5f:1f:46:aa:2e:31:ee:6b:6d:19:f1:b9:74:ad:
29:cd:b9:27:f3:ae:b8:4b:ce:a1:d4:dc:63:dd:a6:
9a:6e:86:5e:01:38:6b:70:64:23:f3:28:bd:56:b2:
23:b7:4c:06:66:9e:68:fc:ad:85:f5:d4:43:ca:c7:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:81:00:49:6D:68:33:F6:BE:9C:81:BF:71:D0:B8:EA:53:05:17
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Dc6BAEltaDP2vpyBv3HQuOpTBRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.33.0-46.148.34.255
46.148.37.0/24
46.148.41.0-46.148.42.255
46.148.47.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:39:1b:fc:dc:7e:35:24:94:4c:89:a0:6a:59:dd:44:95:3c:
3b:cf:68:fb:6d:3b:57:2a:3a:ee:4e:f2:c6:cd:55:bf:df:e7:
cf:74:8e:a6:23:fb:66:eb:fc:6a:ad:e0:f6:91:5e:09:2b:48:
7d:7e:cc:21:92:60:bd:34:48:9d:35:f0:4b:3c:f0:c7:ec:9f:
da:4a:5f:c3:de:ce:5d:a7:5c:61:f2:f3:7d:d7:9e:92:f2:5d:
37:68:f4:a4:f4:71:ac:bd:3b:2d:4a:d2:3d:9d:af:d3:d7:11:
2b:95:87:3c:01:2a:15:b7:1e:27:36:c0:dc:f9:5c:6d:11:89:
e1:ad:25:f4:f6:a6:9b:bc:cd:6d:ac:f6:80:82:ed:fe:7c:36:
ef:aa:9d:ee:70:4c:0f:5b:7a:3b:39:35:d8:c2:5a:9a:a1:f6:
f6:1c:65:cb:c5:56:3b:c6:b1:70:e1:bf:bc:cf:c7:65:a5:e6:
9b:6d:de:3f:3f:3f:ef:5f:22:df:f0:b8:4d:b7:26:b0:d1:f6:
1f:b3:66:0a:0f:3d:c0:68:36:86:86:e8:93:f6:57:4d:7c:c5:
a9:85:8f:b2:b5:d3:c8:e5:1e:5d:67:39:9a:6a:db:be:23:e4:
d7:cc:da:3a:2d:e2:0b:49:b1:f9:87:a4:d3:9b:68:e0:30:a3:
cb:a6:9d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:43:51 2025 by rpki-client