Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/fc4acbvNm8eL7oGsRsgVou-N-Dc.roa
File: fc4acbvNm8eL7oGsRsgVou-N-Dc.roa (raw, json)
Hash identifier: +7YGm7DsfQNaJ/x1pn93s/gp9V84BIKegCYeTVVZ0jE=
Subject key identifier: 7D:CE:1A:71:BB:CD:9B:C7:8B:EE:81:AC:46:C8:15:A2:EF:8D:F8:37
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0199F7A001CBC97BDC19BB6D2BB9E3A09694
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/fc4acbvNm8eL7oGsRsgVou-N-Dc.roa
Signing time: Sat 18 Oct 2025 14:01:22 +0000
ROA not before: Sat 18 Oct 2025 14:01:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 46.233.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f7:a0:01:cb:c9:7b:dc:19:bb:6d:2b:b9:e3:a0:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Oct 18 14:01:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dce1a71bbcd9bc78bee81ac46c815a2ef8df837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9c:90:73:8e:bf:36:26:6b:ec:65:9d:f1:23:
74:bb:17:f4:10:2a:a7:8b:07:89:a6:1c:7d:0e:02:
0c:fa:9b:86:b3:61:7c:b6:40:9d:95:06:6e:11:c9:
45:a1:67:38:e0:7d:79:c0:1f:36:25:31:f6:2d:72:
8c:ba:69:ed:d2:8d:c8:6a:67:8a:10:1d:be:7d:71:
d9:dc:8f:25:b3:62:e7:97:4b:df:0a:63:da:8a:c8:
e7:d4:3e:d6:e6:86:11:8a:22:1c:de:f7:d3:f3:78:
c0:e1:e7:8a:b5:56:87:a2:4f:e0:d5:a6:a5:1c:ff:
e6:cd:7b:15:87:af:10:32:75:23:90:91:56:5d:8e:
83:df:e0:b5:19:18:e1:df:d9:7d:7a:46:94:80:a1:
79:fe:23:4c:51:e0:21:8e:d8:6e:8e:3c:90:c1:b8:
b5:f5:5f:4a:43:7a:24:29:ee:27:4c:0b:c8:03:4e:
58:9d:a7:f8:f9:24:32:b9:98:89:60:cc:84:6d:5c:
85:85:ee:c8:58:da:9f:89:78:46:87:27:2f:94:47:
75:3d:a7:7c:7a:ae:1a:da:80:e8:01:09:61:e7:32:
d4:24:56:f4:e8:c4:81:f4:1c:1e:3a:ac:cd:31:bd:
c7:27:c2:c7:68:21:43:dc:91:5a:ed:9c:8c:b0:1c:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:1A:71:BB:CD:9B:C7:8B:EE:81:AC:46:C8:15:A2:EF:8D:F8:37
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/fc4acbvNm8eL7oGsRsgVou-N-Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0d:4f:5e:85:dc:56:ed:54:3d:89:51:6d:86:a2:06:0c:05:
7a:ce:bc:38:99:69:52:26:70:39:83:cc:ed:b8:cd:df:a6:04:
cd:b2:5f:b3:18:2b:eb:72:05:fc:61:16:b0:9e:f8:00:66:59:
cc:d8:7d:23:4c:ea:70:c1:d6:cb:a3:a1:8c:ac:64:01:59:f5:
da:0c:03:62:2a:aa:b7:47:07:4e:9d:08:29:56:0a:86:ee:63:
98:2f:c0:90:b3:63:c7:e4:47:19:de:e7:c7:eb:6e:ef:a7:77:
94:6b:52:2d:d5:9d:11:4c:06:3f:26:a1:67:86:89:ee:db:0d:
98:e3:bf:a2:19:e4:4e:7d:f4:b3:c5:06:16:e5:ef:80:9a:e1:
46:06:e0:e2:36:ba:88:7c:e7:7a:8a:23:7c:a1:6b:05:7a:0c:
6a:ed:02:3c:8e:ee:4a:54:87:46:6f:b6:ba:6f:43:60:f4:8a:
2a:4f:d7:dd:5c:54:e2:6b:54:86:b0:b7:58:77:73:85:88:88:
e6:05:57:a2:ae:83:2a:7e:a2:69:7a:16:58:55:f9:7b:44:c7:
c6:eb:53:19:41:ee:95:0c:ef:54:eb:c2:7e:ec:d6:5f:e1:10:
9c:3d:1b:6b:48:43:01:03:f4:46:c0:ee:e1:f8:ec:5b:62:f2:
07:45:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:10 2025 by rpki-client