Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/rquvuLK-rYGovEC3HmK5u93318g.roa
File: rquvuLK-rYGovEC3HmK5u93318g.roa (raw, json)
Hash identifier: mwUbj+STMP20PJ2zxgTJv5v0LJixxc8GF7ah0C6+1HQ=
Subject key identifier: AE:AB:AF:B8:B2:BE:AD:81:A8:BC:40:B7:1E:62:B9:BB:DD:F7:D7:C8
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01A1AB0B904B02552513147E251B94C27448
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/rquvuLK-rYGovEC3HmK5u93318g.roa
Signing time: Thu 05 Nov 2026 09:30:24 +0000
ROA not before: Thu 05 Nov 2026 09:30:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218780
IP address blocks: 46.233.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:0b:90:4b:02:55:25:13:14:7e:25:1b:94:c2:74:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Nov 5 09:30:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aeabafb8b2bead81a8bc40b71e62b9bbddf7d7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:59:f8:77:f9:da:bd:45:ea:da:e5:85:1a:52:
fb:46:ec:fc:d3:a7:6b:6b:93:68:40:ac:15:70:62:
80:5b:55:bb:4b:dc:f5:ad:45:ba:48:11:4a:a7:3c:
92:48:f2:f6:a5:c9:92:02:07:0a:0e:fa:de:3d:a2:
8b:d3:3a:61:c9:15:ee:8a:34:be:e2:36:4e:40:ea:
13:fa:47:37:6a:cb:fb:61:ef:80:5c:45:3a:08:80:
93:70:47:18:83:2e:47:13:7a:90:f2:d0:d3:58:b7:
7b:18:95:37:3f:67:41:9a:51:0e:f6:ab:fe:9d:99:
1b:01:72:03:54:4b:c4:d7:a2:a4:22:5f:32:05:58:
2f:91:30:a3:70:de:4c:52:73:b4:8e:9b:a2:3c:66:
ee:99:07:3d:d9:5b:14:d9:a8:1d:27:a1:99:7f:c3:
1d:9d:0c:c1:13:aa:11:26:99:92:cd:e7:3e:a5:1b:
5b:f0:c5:b0:d7:e5:26:93:e6:88:7b:23:46:04:34:
3c:e7:4e:7c:b5:26:37:b6:57:7e:97:94:21:6d:52:
a8:d7:1b:14:0e:ed:23:39:a7:42:6a:e0:bf:d1:77:
eb:d6:c1:dd:82:ec:00:50:f7:dd:72:bd:3a:4c:e9:
20:92:13:2d:6b:fe:39:65:78:13:e1:7c:4f:92:d2:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AB:AF:B8:B2:BE:AD:81:A8:BC:40:B7:1E:62:B9:BB:DD:F7:D7:C8
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/rquvuLK-rYGovEC3HmK5u93318g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.55.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5d:7f:27:dd:23:62:6e:81:37:d5:a9:0e:4e:8e:a0:88:b4:
45:0a:6a:4d:cd:3b:b1:b7:f5:87:d3:5b:0a:1a:8a:ea:17:80:
bb:cc:e0:ba:22:06:40:d5:bb:a7:1d:43:3a:5f:db:81:15:35:
c4:b9:6b:fd:96:9b:5f:10:60:8d:2f:91:e4:ca:62:d0:a0:22:
e3:e4:9c:ef:50:37:08:fc:3d:ff:d7:8c:d3:31:a5:f6:6e:25:
04:ec:a8:c7:c9:95:d7:6a:76:d0:f6:ee:e9:0e:9d:e3:1d:f5:
27:cf:c7:55:c8:ed:30:c2:fb:ff:b5:68:7d:e0:00:d1:96:ce:
00:c9:18:59:34:07:06:19:b3:9a:38:20:e9:81:6e:04:11:3f:
98:bd:05:1c:f7:3b:5c:58:ed:f5:62:43:e8:d5:47:49:d0:3a:
68:c7:35:fa:9c:15:ad:6d:75:01:fa:06:a9:2b:c8:ef:18:57:
e5:04:f8:1a:77:70:62:e7:55:57:cd:a7:04:fb:65:d1:08:80:
40:81:2b:9c:a8:81:d1:d7:19:7c:e7:d9:82:1e:6c:dd:6d:5b:
61:0d:4e:10:ea:58:64:d1:5a:d2:10:8e:02:52:b2:1d:05:d7:
ea:f4:7b:a3:75:87:a2:f5:78:20:54:79:0a:3c:70:7e:ed:33:
38:05:b9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:52:45 2026 by rpki-client