Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/yhQ6xBNVu2d9gMvHbWmdb3fTnDU.roa
File: yhQ6xBNVu2d9gMvHbWmdb3fTnDU.roa (raw, json)
Hash identifier: QpVyxb1Mu2qXGgc7DSw5FLEOPavgu3Uy/ZdRkYO4Cds=
Subject key identifier: CA:14:3A:C4:13:55:BB:67:7D:80:CB:C7:6D:69:9D:6F:77:D3:9C:35
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01989E924CAEC0A1217D3B1D9AFD80E910A5
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/yhQ6xBNVu2d9gMvHbWmdb3fTnDU.roa
Signing time: Tue 12 Aug 2025 13:57:24 +0000
ROA not before: Tue 12 Aug 2025 13:57:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.233.32.0/22 maxlen: 24
46.233.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:92:4c:ae:c0:a1:21:7d:3b:1d:9a:fd:80:e9:10:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Aug 12 13:57:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca143ac41355bb677d80cbc76d699d6f77d39c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:9f:d6:91:39:ec:60:c8:38:4c:ca:3d:e1:
29:fb:e3:ab:df:d8:55:96:ed:47:4e:d9:93:49:74:
ab:37:91:68:7d:3f:1e:77:34:41:d6:f0:2a:ea:76:
28:3a:1b:fc:e8:a8:d6:9d:4e:85:7a:c4:c8:21:93:
6a:55:e5:03:04:09:5e:63:7d:92:f4:de:f6:06:5e:
71:ef:62:39:d7:f2:8c:32:7c:e7:e6:b0:17:a7:94:
ca:10:db:6b:74:8a:ea:8d:f2:d3:24:3a:52:54:48:
6c:42:f1:38:96:fa:99:2a:e4:6f:3b:97:c5:77:cc:
2e:bf:f1:0c:a6:6a:6e:b8:43:34:f0:da:22:9a:1e:
9c:be:e3:1e:55:48:6f:f4:d1:21:b5:96:18:66:e4:
fd:17:6d:09:b5:30:ea:c1:97:1b:ad:b4:55:44:e3:
b7:90:5f:89:15:df:21:f1:b6:0e:f0:35:3e:aa:e5:
76:da:d2:95:ef:c3:27:27:64:20:7c:e5:e0:45:0e:
1b:55:71:94:f6:93:ef:b3:7c:83:c8:b5:da:60:a2:
d7:23:98:de:1e:11:cf:ca:73:9d:c5:de:b8:47:85:
f0:ee:c1:f8:de:a2:4c:eb:4f:8d:44:20:d5:a5:09:
67:eb:b1:0e:b4:7e:81:24:e8:f3:01:d4:25:87:9a:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:14:3A:C4:13:55:BB:67:7D:80:CB:C7:6D:69:9D:6F:77:D3:9C:35
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/yhQ6xBNVu2d9gMvHbWmdb3fTnDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/22
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:a1:d0:c5:fa:4b:0f:80:03:29:3b:93:57:58:01:24:94:bf:
db:c2:60:bc:9f:56:80:8f:76:e6:d0:c9:85:00:8d:6d:dd:e2:
d4:a1:e7:f7:e1:10:24:c4:54:5c:f7:82:54:9c:ec:1c:bf:78:
72:7b:41:9c:61:f1:7f:e9:f9:58:aa:11:58:2f:e8:22:a8:1b:
5e:e3:42:37:cc:d1:aa:b6:08:ef:81:2a:db:11:ab:a3:b2:71:
d7:c3:14:e3:a1:65:b5:39:39:16:79:8c:b3:33:c8:8b:1a:e8:
06:1d:03:c0:9e:c0:dd:ee:4f:9c:ae:11:08:af:69:8f:58:05:
a0:d1:16:b8:ea:d4:ad:e2:0f:c5:00:35:c4:e6:dd:77:ac:a9:
39:a6:ea:a8:ad:69:3c:59:bb:e1:41:21:52:ad:a6:3b:8a:75:
af:ba:55:92:98:a8:ea:98:be:da:18:20:5d:0f:64:f1:4c:45:
03:0c:3e:d8:9d:2f:61:11:3e:28:89:d9:8b:ce:24:37:7e:68:
44:e3:4f:0c:d6:7b:7b:7f:98:0c:ee:cb:9c:25:2e:33:a2:05:
a2:5c:92:47:3f:95:3c:75:1c:e2:94:a0:35:37:fd:f9:65:e8:
8b:3f:ec:51:f2:f8:2b:0b:e9:ac:1a:f8:ac:f5:f7:a5:5e:23:
f0:7c:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:46:30 2025 by rpki-client