Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/PYK2EWVjncskVSm_Hdlre_awIFg.roa
File: PYK2EWVjncskVSm_Hdlre_awIFg.roa (raw, json)
Hash identifier: VWAN/Yr75jkjvzOpnYs2pejQXpvZbkMRMFEQFcncIVo=
Subject key identifier: 3D:82:B6:11:65:63:9D:CB:24:55:29:BF:1D:D9:6B:7B:F6:B0:20:58
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01996826E62C084EE71C1DA8440740150120
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/PYK2EWVjncskVSm_Hdlre_awIFg.roa
Signing time: Sat 20 Sep 2025 17:23:23 +0000
ROA not before: Sat 20 Sep 2025 17:23:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 46.233.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:68:26:e6:2c:08:4e:e7:1c:1d:a8:44:07:40:15:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Sep 20 17:23:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d82b61165639dcb245529bf1dd96b7bf6b02058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:60:39:2a:48:57:62:4d:a5:44:fa:50:d8:
a6:e6:52:47:72:2f:20:81:9b:63:af:25:cc:59:d0:
34:32:52:2b:88:45:ac:f5:d4:b3:6a:f8:c0:0b:4c:
99:fb:11:d6:c8:f3:c1:42:f8:58:4f:ab:95:ce:3f:
b4:e6:8a:6a:b3:be:be:e4:0d:e4:19:6f:9f:00:f6:
2d:20:c0:e6:11:4c:33:66:8f:4a:06:ce:8c:1d:64:
f3:7b:01:2d:f8:a6:a2:ff:cc:d1:2d:2b:ab:51:62:
7f:69:57:63:ee:8a:1d:83:d0:dd:39:60:64:b5:be:
07:6e:13:1f:c6:b4:84:98:c3:16:06:d3:ab:ab:7c:
a5:ad:d8:05:34:fc:48:c1:31:ba:7a:9e:67:27:c4:
89:f4:12:df:39:c0:a6:95:a2:58:e9:16:82:28:5e:
0d:ab:01:3e:ce:0f:df:e9:1b:1d:dc:01:c5:a1:b5:
92:47:63:0d:21:bf:13:7e:8d:40:e8:2f:d2:fb:43:
4f:30:37:da:a3:f4:89:ac:56:20:46:b9:8d:43:81:
df:43:3e:ae:57:8c:82:52:0e:25:26:af:df:90:0c:
2b:b3:49:4b:88:ec:1f:de:9c:39:d5:d0:c8:23:4e:
9f:a3:a0:70:5f:a9:d7:ee:07:a4:ed:5a:28:52:11:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:82:B6:11:65:63:9D:CB:24:55:29:BF:1D:D9:6B:7B:F6:B0:20:58
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/PYK2EWVjncskVSm_Hdlre_awIFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d7:66:26:46:43:7f:ec:01:41:0a:4f:8d:c4:4f:fe:b9:88:
dc:2d:87:31:ba:d7:a4:19:ca:bb:8f:57:f1:e7:fa:45:4a:6a:
68:5b:af:99:49:9c:90:69:c4:99:31:2d:a4:25:a3:04:a3:4a:
77:9b:7b:8c:f9:14:5e:74:13:e7:fa:2b:4e:9e:69:24:31:e7:
bd:77:a2:6a:c7:6e:ff:ef:ab:f9:49:9e:36:2a:4c:27:a8:28:
b7:01:0d:43:dd:40:44:cb:e0:4a:d3:52:7a:85:d4:15:7a:d5:
f9:51:d4:db:ee:56:72:41:16:2f:04:fe:84:09:3f:ba:75:13:
60:8a:62:3f:0e:44:68:b7:50:f4:ab:57:25:09:ea:21:a4:5f:
7a:13:95:9a:ba:43:5d:a8:08:e6:fd:c6:31:78:5b:9b:f4:bc:
d3:4a:00:41:05:aa:06:ed:06:64:eb:f6:15:8d:f3:f5:ae:e1:
73:0e:14:f9:c3:3c:71:f1:b8:49:85:42:19:c1:17:b8:ed:29:
9a:6e:7c:72:13:5d:d6:13:79:e4:ac:f5:50:c5:01:ce:15:40:
71:2f:ab:d9:08:f1:c9:9b:20:8e:fb:e7:db:4d:55:e5:7c:a6:
30:7b:58:20:a2:a8:94:c6:fe:0c:09:a8:c8:9d:12:df:1b:ad:
c7:a8:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:12 2025 by rpki-client