Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Z2DHR1sumS0RA2QWTG0U4Jj74Q4.roa
File: Z2DHR1sumS0RA2QWTG0U4Jj74Q4.roa (raw, json)
Hash identifier: GJtGGgvojDwXFlZv8aLVok2bhFiJ4o3T2AhZH4yUbsE=
Subject key identifier: 67:60:C7:47:5B:2E:99:2D:11:03:64:16:4C:6D:14:E0:98:FB:E1:0E
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01A1205B9509FFFB1C941F1D94008735BC3C
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Z2DHR1sumS0RA2QWTG0U4Jj74Q4.roa
Signing time: Fri 09 Oct 2026 11:10:35 +0000
ROA not before: Fri 09 Oct 2026 11:10:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 46.38.128.0/24 maxlen: 24
46.38.141.0/24 maxlen: 24
185.143.72.0/24 maxlen: 24
185.143.74.0/24 maxlen: 24
185.143.75.0/24 maxlen: 24
212.16.79.0/24 maxlen: 24
212.16.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:5b:95:09:ff:fb:1c:94:1f:1d:94:00:87:35:bc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 9 11:10:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6760c7475b2e992d110364164c6d14e098fbe10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:be:bb:71:22:14:8a:32:4e:1a:85:0f:35:48:
01:bf:59:75:54:cd:03:94:29:aa:6e:51:51:a6:18:
8a:90:cf:ef:1b:db:7b:2e:eb:b8:27:a7:12:ca:98:
f4:40:66:c7:d5:64:95:76:ca:5a:80:d0:cc:20:3c:
0e:c8:0b:4c:91:f0:66:28:a4:e3:75:e3:bd:7d:47:
19:12:41:8c:6a:3f:36:7c:4d:57:7a:e0:b2:65:d1:
1e:36:5d:47:c7:d6:1d:23:61:54:ac:9c:9d:89:20:
51:8a:d8:0f:0d:7f:7a:be:80:a0:6b:d6:70:f7:8a:
1b:99:8f:9f:30:6c:6f:fa:d6:b1:71:dd:fa:2c:88:
28:32:47:f4:92:0f:79:4e:97:98:d0:c7:13:c5:03:
ca:ff:18:dc:a6:c1:56:ec:c8:57:15:08:d4:c6:12:
cd:ad:8c:a7:79:d7:77:e8:08:97:cc:ed:a7:63:9f:
eb:bc:fe:5e:df:83:b4:af:02:f3:e6:5e:d3:9e:3b:
d9:9c:a7:20:7b:52:2f:b6:47:fe:4f:e4:37:cf:60:
4a:40:60:d6:7a:e4:b2:ca:36:ba:54:00:3f:95:fc:
30:8b:32:5b:f3:38:04:4d:1e:a6:aa:d5:47:2c:2c:
23:91:58:82:bc:b9:db:10:42:7e:6b:df:56:95:90:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:60:C7:47:5B:2E:99:2D:11:03:64:16:4C:6D:14:E0:98:FB:E1:0E
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Z2DHR1sumS0RA2QWTG0U4Jj74Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.128.0/24
46.38.141.0/24
185.143.72.0/24
185.143.74.0/23
212.16.79.0/24
212.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
10:fb:9c:d7:55:03:ad:17:0b:af:3c:fb:f6:4a:f6:e2:9a:2e:
30:dd:b4:3d:97:22:bd:34:b3:93:f4:e8:c8:0e:a4:f4:f8:4e:
08:a3:df:66:01:1f:ba:fc:bc:06:22:4a:58:87:96:4b:ff:32:
c4:c9:08:32:65:be:d3:53:4a:8e:c8:f8:39:b5:1d:fb:6a:a9:
f4:af:22:ab:c6:a9:7a:b3:97:72:f3:0d:5a:18:e8:53:6c:fe:
91:10:22:9b:f4:8e:52:14:94:4a:58:cf:c3:50:a7:1e:a2:b2:
7c:43:05:4c:d9:08:3e:ea:e0:cf:24:15:be:4d:29:15:a9:64:
6c:68:da:f5:7b:d1:6e:5b:6b:55:9e:7b:00:eb:dc:fd:19:1c:
3e:12:a9:8c:fd:79:e4:71:eb:fc:ec:69:f4:38:bc:06:d4:70:
ff:08:43:09:13:50:18:c2:35:54:e1:d0:f2:eb:cc:35:34:c7:
26:c5:5a:9a:69:5e:df:6d:91:bd:e9:29:01:ae:cc:12:5e:73:
01:c8:93:9a:54:05:26:b1:98:a3:31:b7:aa:79:fc:3a:17:92:
72:57:92:61:dd:74:0f:cc:c7:fd:d8:7d:b1:6e:ea:b6:fd:98:
16:fa:e7:10:d5:56:5f:e5:c0:50:59:36:ea:5a:93:47:e5:15:
c0:83:7a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:49:21 2026 by rpki-client