Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/ixO_vYd1ZiOBRHw77LkHkF7Dk7s.roa
File: ixO_vYd1ZiOBRHw77LkHkF7Dk7s.roa (raw, json)
Hash identifier: DwlRG2eiqBzIFuP5QN5WVQHfUp0z2yDCiGwvtiVae0c=
Subject key identifier: 8B:13:BF:BD:87:75:66:23:81:44:7C:3B:EC:B9:07:90:5E:C3:93:BB
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019E01CE96EDAB88A2B778A44914FDE89584
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/ixO_vYd1ZiOBRHw77LkHkF7Dk7s.roa
Signing time: Thu 07 May 2026 09:39:36 +0000
ROA not before: Thu 07 May 2026 09:39:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.233.32.0/24 maxlen: 24
46.233.34.0/24 maxlen: 24
46.233.35.0/24 maxlen: 24
46.233.42.0/24 maxlen: 24
46.233.52.0/24 maxlen: 24
46.233.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:ce:96:ed:ab:88:a2:b7:78:a4:49:14:fd:e8:95:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: May 7 09:39:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b13bfbd8775662381447c3becb907905ec393bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:25:82:30:a3:12:19:f5:ef:a6:6f:16:ad:
eb:9a:ea:30:f5:97:73:21:3b:af:a3:cb:46:8d:97:
14:32:23:74:10:bf:78:e0:aa:15:9b:12:2e:a7:61:
23:b6:ea:81:fb:71:7d:5d:8a:a2:66:3e:e6:d7:56:
65:c7:32:26:80:44:d5:c4:5b:1b:c5:7c:34:cf:cb:
5b:14:39:03:ad:ac:46:90:de:05:80:c0:bc:82:7b:
85:36:b0:08:dd:91:83:4c:47:f7:e5:b5:cd:eb:a5:
b9:92:d6:e9:20:23:79:74:63:14:3b:23:f0:78:52:
0a:cb:27:af:04:01:49:b1:c0:bd:45:30:c0:d7:e8:
21:9f:33:96:84:e8:4c:20:84:86:b3:ab:50:e0:77:
08:06:2d:43:d2:68:b5:9f:0d:5f:ee:06:cc:fe:fd:
4e:c7:1d:c5:10:f0:8f:37:aa:39:42:4e:ed:71:14:
2f:1b:9d:37:95:f8:12:80:fc:5f:6f:dc:32:ce:9a:
ee:29:7b:ea:4c:0c:fe:9f:e5:80:a0:8e:ff:df:98:
f3:20:20:07:3b:3a:a3:e8:1c:9d:5b:99:5f:7c:5b:
8e:a0:77:b7:60:71:58:e5:0f:c1:28:33:2d:35:1e:
76:5c:c0:cd:0f:dd:8d:83:a8:da:25:17:0d:67:b6:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:13:BF:BD:87:75:66:23:81:44:7C:3B:EC:B9:07:90:5E:C3:93:BB
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/ixO_vYd1ZiOBRHw77LkHkF7Dk7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/24
46.233.34.0/23
46.233.42.0/24
46.233.52.0/24
46.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:21:37:ee:2c:71:a0:6f:48:07:c7:16:97:0d:76:bc:fa:9b:
16:81:5d:83:99:1e:8b:02:be:b5:e7:2c:25:86:c4:91:76:6f:
67:7f:4d:91:45:93:c0:f9:20:bf:26:37:8f:f7:9b:0c:6e:1b:
8f:a1:7d:9c:5c:37:ab:3d:f9:fa:c8:93:46:50:38:86:a4:03:
6c:ab:2a:42:20:2b:28:6e:9d:7a:f9:59:56:ab:5a:12:e9:29:
35:4c:e4:bf:0e:9d:d3:7c:fa:8f:12:50:28:ab:14:75:18:fc:
73:58:b7:41:44:7a:6b:27:dd:37:ad:09:07:67:68:39:2a:a8:
e6:a7:e7:d3:1f:7e:9d:2a:14:70:2d:ab:c5:01:71:d5:ee:65:
ab:f6:de:ee:a5:b7:20:8a:26:de:22:c1:37:75:57:9d:1e:ee:
47:fa:d4:54:c2:b0:18:34:c0:45:05:b2:22:72:68:53:94:c1:
e0:f9:d6:44:1c:13:ab:59:71:32:46:7c:c1:c8:65:76:43:44:
b9:e3:7f:4f:0d:c4:d5:ff:8e:bb:ad:2b:23:77:cc:1e:b8:9f:
76:6f:76:99:14:a2:99:e2:59:d0:24:64:ab:31:73:09:d2:e9:
f1:a6:6e:e0:58:cb:e0:94:e5:25:1b:68:b4:c9:48:b1:2f:25:
76:e1:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:08 2026 by rpki-client