Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SuUC7rg6zKaIqAQr-O-xeK2gM60.roa
File: SuUC7rg6zKaIqAQr-O-xeK2gM60.roa (raw, json)
Hash identifier: qZ9eVygiiy3ggG2jA1ir/Et4kJBvE0yFLRS8S0vXW+A=
Subject key identifier: 4A:E5:02:EE:B8:3A:CC:A6:88:A8:04:2B:F8:EF:B1:78:AD:A0:33:AD
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019E644051251C14A47F80E9514790FA6DCD
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SuUC7rg6zKaIqAQr-O-xeK2gM60.roa
Signing time: Tue 26 May 2026 12:26:37 +0000
ROA not before: Tue 26 May 2026 12:26:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.136.0/24 maxlen: 24
46.38.139.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.145.0/24 maxlen: 24
46.38.147.0/24 maxlen: 24
46.38.150.0/24 maxlen: 24
46.38.151.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.64.0/24 maxlen: 24
212.16.65.0/24 maxlen: 24
212.16.66.0/24 maxlen: 24
212.16.67.0/24 maxlen: 24
212.16.68.0/24 maxlen: 24
212.16.69.0/24 maxlen: 24
212.16.74.0/24 maxlen: 24
212.16.75.0/24 maxlen: 24
212.16.76.0/24 maxlen: 24
212.16.77.0/24 maxlen: 24
212.16.82.0/24 maxlen: 24
212.16.83.0/24 maxlen: 24
212.16.84.0/24 maxlen: 24
212.16.88.0/24 maxlen: 24
212.16.90.0/24 maxlen: 24
212.16.91.0/24 maxlen: 24
212.16.95.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:40:51:25:1c:14:a4:7f:80:e9:51:47:90:fa:6d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 26 12:26:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ae502eeb83acca688a8042bf8efb178ada033ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8e:c8:bb:80:62:ed:cc:a2:f3:0a:47:09:9f:
57:95:25:30:f8:13:89:22:d5:00:6b:fb:bc:bb:a8:
a4:5b:18:ce:02:50:ec:04:b7:a4:b2:55:79:10:fe:
25:62:f1:11:34:b3:89:b8:d2:0a:25:ce:d8:d9:dd:
4f:ad:2f:3f:cc:32:d9:ed:64:a8:67:40:4d:33:dd:
54:5d:27:89:cd:3c:25:a2:77:9c:e7:a1:eb:4b:9c:
31:94:db:d8:d8:d2:a5:66:1f:9b:04:59:e0:8a:29:
eb:89:c3:39:5a:3f:f3:96:20:f7:1d:f9:53:60:a0:
d8:df:73:dd:f0:02:ff:c2:c2:d1:ef:34:10:cb:79:
9e:fc:8a:c7:05:34:fb:60:a5:01:30:90:37:15:9b:
57:56:73:26:e8:3c:02:b4:93:61:e1:1e:7b:a6:fc:
e3:55:33:e6:0c:50:69:67:1f:5b:18:93:60:cf:ea:
55:d3:d4:03:f7:c7:71:1b:a6:4f:ba:87:e5:f0:58:
c8:7c:36:2e:2d:30:50:de:af:65:2d:b9:c0:09:df:
ac:68:85:79:fe:d6:6b:37:0c:d9:e3:90:3c:34:1f:
63:0b:6b:27:e9:99:14:7e:74:e5:d4:54:4e:d1:19:
2e:27:e7:72:9f:eb:7e:50:e0:80:a3:d9:bd:5a:f6:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E5:02:EE:B8:3A:CC:A6:88:A8:04:2B:F8:EF:B1:78:AD:A0:33:AD
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SuUC7rg6zKaIqAQr-O-xeK2gM60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.136.0/24
46.38.139.0-46.38.140.255
46.38.145.0/24
46.38.147.0/24
46.38.150.0/23
185.24.150.0/24
185.29.220.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
32:f9:5b:27:0d:e0:cb:1a:b1:07:e4:24:54:7d:9c:e7:68:f1:
62:e4:a2:31:da:cb:88:78:9d:f3:8b:61:08:50:26:b6:15:6c:
d6:56:ba:32:22:49:d3:a5:ca:02:4a:cb:fd:2f:78:ba:d5:bc:
e7:3f:92:e1:0b:7e:29:2b:6e:f3:82:d4:2a:61:6f:4e:09:d6:
a0:64:e9:13:46:99:13:1d:3e:2b:11:af:46:6d:da:1e:aa:53:
1a:e6:7a:94:a6:01:d5:23:70:bb:00:b6:6f:66:d6:af:0b:da:
c2:a2:bf:27:73:e5:7e:67:af:bf:34:9c:64:d0:16:cf:5a:21:
19:9d:09:03:5a:88:51:6e:ca:54:c2:92:f5:63:49:12:2f:9d:
ea:ef:b9:21:fe:ca:f2:a9:48:de:76:b5:62:58:9a:60:c3:d8:
ac:0d:c1:87:f5:d2:40:ec:dc:77:f9:13:04:8b:17:9b:c5:11:
4a:cb:7c:ae:33:99:e0:27:21:f3:54:8b:80:34:2d:0e:46:18:
df:67:a8:54:fc:c0:d3:4c:7f:39:c0:b5:85:b2:ad:65:c2:7a:
92:b4:c0:38:cd:14:78:14:12:ed:37:7f:df:bf:48:54:f8:54:
d6:3c:40:e7:19:76:49:a8:2d:4d:2a:9c:1e:38:73:93:b5:63:
ef:7e:ee:5f
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAZ5kQFElHBSkf4DpUUeQ+m3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwNTI2MTIyNjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWU1MDJlZWI4M2FjY2E2ODhhODA0MmJmOGVmYjE3OGFkYTAzM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk47Iu4Bi7cyi8wpHCZ9XlSUw+BOJ
ItUAa/u8u6ikWxjOAlDsBLekslV5EP4lYvERNLOJuNIKJc7Y2d1PrS8/zDLZ7WSo
Z0BNM91UXSeJzTwlonec56HrS5wxlNvY2NKlZh+bBFngiinricM5Wj/zliD3HflT
YKDY33Pd8AL/wsLR7zQQy3me/IrHBTT7YKUBMJA3FZtXVnMm6DwCtJNh4R57pvzj
VTPmDFBpZx9bGJNgz+pV09QD98dxG6ZPuofl8FjIfDYuLTBQ3q9lLbnACd+saIV5
/tZrNwzZ45A8NB9jC2sn6ZkUfnTl1FRO0RkuJ+dyn+t+UOCAo9m9WvaJiwIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFErlAu64OsymiKgEK/jvsXitoDOtMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvU3VVQzdyZzZ6S2FJcUFRci1PLXhlSzJnTTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBQBAIAATBKAwQALiaBAwQA
LiaDAwQALiaIMAwDBAAuJosDBAAuJowDBAAuJpEDBAAuJpMDBAEuJpYDBAC5GJYD
BAG5HdwDBAXUEEADBAXUUAAwDQQCAAIwBwMFAyoAfYAwDQYJKoZIhvcNAQELBQAD
ggEBADL5WycN4MsasQfkJFR9nOdo8WLkojHay4h4nfOLYQhQJrYVbNZWujIiSdOl
ygJKy/0veLrVvOc/kuELfikrbvOC1Cphb04J1qBk6RNGmRMdPisRr0Zt2h6qUxrm
epSmAdUjcLsAtm9m1q8L2sKivydz5X5nr780nGTQFs9aIRmdCQNaiFFuylTCkvVj
SRIvnervuSH+yvKpSN52tWJYmmDD2KwNwYf10kDs3Hf5EwSLF5vFEUrLfK4zmeAn
IfNUi4A0LQ5GGN9nqFT8wNNMfznAtYWyrWXCepK0wDjNFHgUEu03f9+/SFT4VNY8
QOcZdkmoLU0qnB44c5O1Y+9+7l8=
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:52 2026 by rpki-client