Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/w49hc9pt-rI9dE1aJPepq6cVJrc.roa
File: w49hc9pt-rI9dE1aJPepq6cVJrc.roa (raw, json)
Hash identifier: XRnzI4j7+4a/orI2utUUHksc2DUd94oqWcO8QziYrqE=
Subject key identifier: C3:8F:61:73:DA:6D:FA:B2:3D:74:4D:5A:24:F7:A9:AB:A7:15:26:B7
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019D0B02DB2114E6CAF463B777C92B39E375
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/w49hc9pt-rI9dE1aJPepq6cVJrc.roa
Signing time: Fri 20 Mar 2026 11:30:29 +0000
ROA not before: Fri 20 Mar 2026 11:30:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402203
IP address blocks: 46.233.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:02:db:21:14:e6:ca:f4:63:b7:77:c9:2b:39:e3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Mar 20 11:30:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c38f6173da6dfab23d744d5a24f7a9aba71526b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:55:15:8d:58:0a:ca:45:3a:0a:0a:96:42:
ea:06:e0:c7:57:83:eb:e5:6e:bb:ab:d3:e7:7a:30:
b4:d5:d2:c3:ef:e4:a5:98:88:f8:96:b0:11:44:83:
0d:3e:55:fd:1f:a1:00:d1:89:83:b4:78:65:32:f8:
23:07:09:e0:23:00:73:aa:e7:47:bf:62:7b:54:94:
a9:42:8b:88:1e:52:df:55:d4:a8:a0:ed:8e:64:a6:
23:1c:6a:03:30:4d:26:9a:00:31:9c:4d:98:62:77:
6c:38:f7:e0:d5:de:c3:69:81:b6:e7:22:bd:fa:3b:
b9:67:4b:3e:37:48:98:73:e7:46:26:03:99:1a:0a:
97:b7:3a:1c:84:e8:b9:ec:e9:b9:cc:0f:5c:29:86:
cc:fc:a0:ff:fc:0f:eb:ca:4b:81:de:e4:e8:22:86:
50:a8:7f:17:d4:87:d2:fd:d4:0d:6a:0c:3d:66:72:
19:98:b3:b9:3b:11:05:0e:d0:1c:1f:15:e7:3b:26:
75:7e:f6:32:d6:b1:f7:d4:6c:7c:16:93:2b:6b:a8:
4a:db:a6:59:05:40:e9:38:6c:48:76:a8:b6:a8:ed:
60:c5:45:01:c5:a2:bc:04:d0:4d:fa:f4:3f:09:39:
d4:45:e3:1b:c6:c1:64:c0:99:9d:08:6f:8f:e8:7d:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:61:73:DA:6D:FA:B2:3D:74:4D:5A:24:F7:A9:AB:A7:15:26:B7
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/w49hc9pt-rI9dE1aJPepq6cVJrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/24
Signature Algorithm: sha256WithRSAEncryption
83:89:d5:ed:6a:b3:c5:56:d5:4b:29:77:cd:4e:e8:d2:a0:ba:
db:66:5e:7f:1f:50:3a:f0:ed:49:9c:e9:4e:7d:9e:51:3d:f1:
13:d3:eb:2a:1e:45:84:65:2b:72:64:8a:a5:e5:fe:ff:06:48:
87:9d:c3:37:95:82:fe:cb:a3:6f:22:e3:28:c9:f6:eb:d4:96:
3f:4f:14:9e:0b:94:9f:43:76:9c:71:52:be:1b:e9:44:5b:58:
06:5c:be:39:e5:be:88:8e:14:ed:12:2f:60:28:01:bc:42:10:
0f:95:81:7a:43:47:92:13:61:b8:c1:c8:de:2d:03:5c:e9:5e:
cb:1b:15:8c:a4:37:56:7a:73:c3:12:09:bd:87:97:52:dc:89:
3f:a4:89:0e:7e:50:84:9e:fb:bb:f4:09:0e:a6:26:38:f2:18:
dc:87:5a:4d:32:cf:f0:3a:53:98:18:e2:1b:e3:00:75:15:2b:
e7:e1:6c:5f:5b:3d:4c:75:09:d3:af:12:c8:16:9e:3e:1c:79:
d2:75:d2:9c:39:06:a0:45:a5:bc:6a:b6:8b:8f:7d:3b:7d:46:
71:89:f8:c0:27:76:1b:a4:3e:8b:9e:e3:65:48:22:78:f1:02:
51:7f:e3:7f:f0:59:20:90:1d:9e:a8:ea:a8:5c:31:38:d3:18:
e0:72:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:13 2026 by rpki-client