Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/LXYs4o7bK9nlGjR9RbDwaNPptno.roa
File: LXYs4o7bK9nlGjR9RbDwaNPptno.roa (raw, json)
Hash identifier: tlrbGu5sV7aPZHtzRFPenswRUbp8n337kM/lq6z5UgM=
Subject key identifier: 2D:76:2C:E2:8E:DB:2B:D9:E5:1A:34:7D:45:B0:F0:68:D3:E9:B6:7A
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019E58864C8498724F389D7618AC32970CE1
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/LXYs4o7bK9nlGjR9RbDwaNPptno.roa
Signing time: Sun 24 May 2026 05:47:36 +0000
ROA not before: Sun 24 May 2026 05:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 46.38.138.0/24 maxlen: 24
46.38.143.0/24 maxlen: 24
109.94.164.0/24 maxlen: 24
212.80.8.0/24 maxlen: 24
212.80.9.0/24 maxlen: 24
212.80.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:58:86:4c:84:98:72:4f:38:9d:76:18:ac:32:97:0c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 24 05:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d762ce28edb2bd9e51a347d45b0f068d3e9b67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b7:3e:6c:74:77:a0:85:70:e4:85:8b:78:92:
9c:b3:0b:67:1e:a2:d1:e3:99:bf:2e:db:41:dd:13:
b2:72:da:45:ad:56:91:87:6c:4e:bb:73:1c:2f:ff:
44:97:99:3d:54:23:4e:53:ae:b2:35:9b:80:97:5e:
9e:21:ea:77:06:30:9b:af:ae:5c:8e:56:6e:0f:0d:
09:0c:02:1f:88:03:c5:1c:e3:2f:e7:8b:79:eb:10:
22:f8:8b:40:fc:92:ad:e5:81:81:7e:4d:9f:ed:ff:
eb:4d:4a:81:09:7a:fa:9c:d4:01:3a:8b:f3:69:04:
ce:49:af:19:03:f3:13:c5:0a:8b:a6:23:fb:61:bc:
38:94:23:17:ee:3c:3b:9a:6b:e6:8a:91:8d:d1:bd:
0f:01:cc:9b:4f:a4:d2:28:8d:45:b3:7f:29:7c:33:
7c:1c:79:55:73:0d:2b:0c:76:24:e3:85:62:6b:03:
23:9e:c6:25:f4:51:54:6e:87:bf:77:b5:bf:25:56:
4b:99:f6:9b:53:39:a8:9f:40:08:05:ca:1b:f6:b2:
1a:0f:4b:4d:a1:f4:a1:d9:83:39:0d:71:9d:a7:5f:
7d:36:aa:c6:89:f4:7a:f3:2d:76:b2:f8:b2:97:6d:
26:f2:f4:c6:99:1b:8e:d2:3e:54:a5:4c:09:63:8a:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:2C:E2:8E:DB:2B:D9:E5:1A:34:7D:45:B0:F0:68:D3:E9:B6:7A
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/LXYs4o7bK9nlGjR9RbDwaNPptno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.138.0/24
46.38.143.0/24
109.94.164.0/24
212.80.8.0-212.80.10.255
Signature Algorithm: sha256WithRSAEncryption
6f:0d:5b:53:2d:f8:12:07:07:d6:61:58:f8:66:72:90:7a:85:
e5:76:e4:6f:cf:7e:14:5a:74:2d:da:9a:5b:72:54:b3:83:da:
64:46:af:fe:a1:4a:27:d5:c0:6e:97:18:a6:45:d9:fd:32:66:
2a:4c:57:6f:8b:4b:b8:a8:3e:c5:69:8d:56:b9:13:39:b6:3f:
20:ec:34:19:b7:40:e7:19:11:ee:1f:34:d8:3c:aa:e1:a7:0e:
e4:c9:06:de:b4:32:89:e0:36:b8:0c:48:af:10:49:f7:c2:37:
f7:00:0f:73:c5:47:55:ff:b8:e9:be:29:21:96:f0:01:58:ca:
25:d9:d2:5e:18:da:ca:77:10:9f:c3:72:1a:a9:3b:d7:df:06:
4a:63:7c:55:66:c8:57:77:b3:dd:31:0f:dd:fd:54:17:b6:ac:
ec:97:f8:44:ce:09:0c:23:a9:ca:d1:e3:43:e5:aa:12:7d:07:
c6:43:87:12:01:f0:a7:d7:59:31:d3:81:8c:59:e0:f6:8a:cf:
b5:ec:12:e4:de:78:4d:dd:e4:fe:76:3a:ed:87:cb:75:88:63:
03:ae:32:d9:ec:d1:d6:46:f3:3a:4e:35:af:88:c2:81:54:07:
99:c1:f2:d0:18:97:f6:3e:7a:ea:42:70:6b:08:51:5e:38:8c:
4b:4d:41:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:08 2026 by rpki-client