Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/0svTDrSwReSoeecG4nyIp0Jz5pY.roa
File: 0svTDrSwReSoeecG4nyIp0Jz5pY.roa (raw, json)
Hash identifier: o11lsgsVY6lk24EO9d7feF4yhOoTDGHXRFHXxkeY3PI=
Subject key identifier: D2:CB:D3:0E:B4:B0:45:E4:A8:79:E7:06:E2:7C:88:A7:42:73:E6:96
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01A060A481F97FD44FD569556D227E407C45
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/0svTDrSwReSoeecG4nyIp0Jz5pY.roa
Signing time: Wed 02 Sep 2026 05:43:08 +0000
ROA not before: Wed 02 Sep 2026 05:43:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.151.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.64.0/24 maxlen: 24
212.16.65.0/24 maxlen: 24
212.16.66.0/24 maxlen: 24
212.16.67.0/24 maxlen: 24
212.16.68.0/24 maxlen: 24
212.16.69.0/24 maxlen: 24
212.16.74.0/24 maxlen: 24
212.16.75.0/24 maxlen: 24
212.16.76.0/24 maxlen: 24
212.16.77.0/24 maxlen: 24
212.16.82.0/24 maxlen: 24
212.16.83.0/24 maxlen: 24
212.16.84.0/24 maxlen: 24
212.16.88.0/24 maxlen: 24
212.16.90.0/24 maxlen: 24
212.16.91.0/24 maxlen: 24
212.16.95.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.1.0/24 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.3.0/24 maxlen: 24
212.80.5.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
212.80.16.0/24 maxlen: 24
212.80.17.0/24 maxlen: 24
212.80.28.0/24 maxlen: 24
212.80.30.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:a4:81:f9:7f:d4:4f:d5:69:55:6d:22:7e:40:7c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 2 05:43:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2cbd30eb4b045e4a879e706e27c88a74273e696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:b1:a8:a8:2c:52:1c:78:2c:1d:72:bc:33:
ce:7b:48:f3:bc:8b:25:f7:5d:15:bc:d0:26:64:50:
c7:77:ce:a6:20:4a:32:d4:a9:14:4b:3a:d3:97:78:
0e:30:77:7c:7d:ce:34:c5:8e:5f:16:58:b5:db:41:
30:ad:ad:ff:21:ff:23:02:e7:f1:73:87:98:0b:d8:
6f:fa:fa:a6:77:3f:7e:5a:92:cb:99:f5:bc:19:92:
81:c1:a4:93:d5:ae:fa:d7:a2:6e:36:96:a8:9f:ec:
2d:cb:b9:53:92:e0:91:6c:80:96:e2:71:f2:97:bf:
18:a1:c8:81:1a:44:e0:a4:99:0b:27:37:26:c5:99:
99:96:2d:2c:29:93:53:b0:f1:ef:60:f1:5e:ca:36:
40:13:96:d9:a3:98:0f:24:35:97:8f:09:02:90:51:
99:07:b2:7c:5e:2c:26:3c:43:31:b5:2f:34:75:d3:
7b:a5:6a:70:e7:09:c4:0f:7e:09:a5:f8:d5:cc:1a:
68:00:eb:55:c2:99:f5:f8:b2:48:17:f7:d8:d5:84:
0b:18:af:37:84:84:a1:27:20:c3:b5:ea:9d:31:89:
ca:a1:d7:01:13:06:c3:97:c9:d0:89:7f:e2:a0:45:
ad:d5:b6:5c:05:83:58:4d:cf:b0:40:34:69:57:66:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:D3:0E:B4:B0:45:E4:A8:79:E7:06:E2:7C:88:A7:42:73:E6:96
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/0svTDrSwReSoeecG4nyIp0Jz5pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.151.0/24
185.24.150.0/24
185.29.220.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
1e:11:0f:71:30:e5:84:a0:77:dc:57:7a:27:a5:7f:d9:ce:bc:
f8:20:e8:5f:2e:ec:7b:68:13:06:a9:25:ec:d0:f1:24:79:13:
46:eb:e4:bb:86:e6:71:2f:ae:03:01:79:04:7b:a5:bd:25:92:
8f:05:b1:70:84:9b:df:cf:0b:e8:18:bb:3f:ca:cc:c1:a8:00:
b3:9f:d6:b5:d3:9b:83:5d:bb:86:e8:3c:d6:f1:67:f4:19:e9:
eb:52:8c:7d:46:55:af:60:c2:c7:17:bd:1a:8e:25:fa:11:50:
dd:3c:5e:fc:d2:ec:cc:6b:e9:e6:db:1b:59:f1:fc:4d:55:af:
4f:43:d3:f7:5d:ab:2e:e0:96:63:da:1f:e0:a5:cb:53:a2:5b:
bf:73:0f:e9:d4:d9:2c:30:48:67:fa:6c:8f:2b:b6:de:06:a8:
a3:04:3b:a4:8f:8c:33:76:ea:9b:0d:b9:4b:08:5e:c4:bf:5e:
54:cf:2c:74:89:86:6e:98:ca:78:aa:01:a4:63:ac:ad:9c:6a:
ba:aa:95:20:5a:40:18:3f:b2:58:68:6d:f1:f8:c9:6d:0e:88:
0f:42:77:99:a9:39:6a:12:63:b4:6e:a6:f8:ce:15:dd:01:87:
8d:67:ff:f0:a4:fe:90:f5:8f:4b:b3:07:84:81:f1:de:83:64:
38:41:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:59:01 2026 by rpki-client