Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Bl7qLc9FykJGYpXpYNwQhUyoG74.roa
File: Bl7qLc9FykJGYpXpYNwQhUyoG74.roa (raw, json)
Hash identifier: W8SX4TsUCyntFAGgOTDaNHhl7cr4kTreCBySNi2bbWI=
Subject key identifier: 06:5E:EA:2D:CF:45:CA:42:46:62:95:E9:60:DC:10:85:4C:A8:1B:BE
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019CE7A9C908FC2F661F90A0A89C1A58BEF3
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Bl7qLc9FykJGYpXpYNwQhUyoG74.roa
Signing time: Fri 13 Mar 2026 14:46:29 +0000
ROA not before: Fri 13 Mar 2026 14:46:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 46.233.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:a9:c9:08:fc:2f:66:1f:90:a0:a8:9c:1a:58:be:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Mar 13 14:46:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=065eea2dcf45ca42466295e960dc10854ca81bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:4a:c4:59:14:b8:00:33:69:f8:87:be:2e:
69:9a:c9:fd:62:19:15:fb:84:fe:c9:15:47:66:bf:
e8:80:66:33:d3:e8:77:d5:42:a3:ae:9f:38:80:6d:
4f:e0:de:d8:1e:8a:af:67:85:2d:ae:ce:35:a3:5c:
ca:35:16:73:61:4b:c7:6e:9d:a4:74:63:d8:19:6d:
11:ad:a2:d5:57:19:e4:52:29:15:cc:59:50:60:3b:
00:91:56:f4:87:e6:f9:b6:cf:cc:4f:49:9f:14:6f:
53:09:00:65:ac:2d:a1:91:fb:73:18:fe:fd:e5:b9:
b0:b4:c9:14:60:d0:de:39:39:05:92:ac:32:f7:eb:
69:45:52:3f:f4:76:c2:9f:23:2f:c4:9b:76:41:37:
50:2b:c6:69:03:64:c8:df:6f:d8:81:51:c7:f2:d4:
08:58:b3:45:1e:23:6a:ce:4f:b5:47:38:4d:71:b1:
c2:8e:1b:cd:40:a1:4d:ca:59:02:1f:dc:58:78:52:
d3:65:57:d4:0d:dd:93:5b:d0:60:c8:ab:ba:40:e6:
18:68:9f:38:b1:39:8a:e6:0d:0c:c8:7a:67:d4:68:
e8:25:0a:64:3d:1f:12:15:1f:f0:13:2b:df:e0:85:
2b:30:39:8d:aa:b7:c6:d5:1d:85:3c:8b:71:31:d1:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5E:EA:2D:CF:45:CA:42:46:62:95:E9:60:DC:10:85:4C:A8:1B:BE
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Bl7qLc9FykJGYpXpYNwQhUyoG74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
37:31:c1:85:16:d0:b9:90:c4:2a:00:8c:38:e1:ea:be:b8:48:
e7:21:2e:d2:0e:99:d9:f3:7f:6e:d7:b8:9e:63:25:33:8c:4e:
a2:e8:14:5a:06:4f:17:aa:bd:f2:76:bd:40:7a:00:bf:01:6c:
be:5c:bd:e3:13:d4:ed:33:5e:32:65:f0:92:0d:7b:b5:d6:71:
31:73:ef:2f:81:bd:9e:c3:80:61:6e:ae:7f:ff:32:2b:0d:c0:
31:ce:da:0e:0f:04:83:28:b5:3e:59:19:df:9f:ca:ec:58:72:
52:ab:e8:9b:26:fa:c4:11:36:01:11:c2:79:e6:eb:0a:20:9d:
e7:1c:a3:64:08:29:5b:38:d5:f4:36:76:ce:b6:d8:e3:2f:4f:
d5:5f:be:23:b4:53:70:d0:22:1f:25:1f:9e:78:71:e0:5f:ca:
6a:c3:8a:a5:c3:ed:31:fb:e3:12:a1:e3:bb:1a:60:18:cf:dd:
ba:79:b3:eb:98:f5:6e:17:3c:58:b5:32:bb:73:ca:77:fd:96:
26:d3:fd:9d:14:3c:e8:13:b0:d5:af:35:b7:25:c6:b6:94:46:
e1:16:42:4a:a4:d7:6c:3c:76:ea:4d:d9:1c:ae:ce:a1:14:37:
ed:33:4d:da:1e:3f:f2:8b:3a:04:37:f3:4f:ff:2a:77:30:2f:
65:c5:d6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:16:28 2026 by rpki-client