Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ZMumc63o9kKMa-L12tneJpumRao.roa
File: ZMumc63o9kKMa-L12tneJpumRao.roa (raw, json)
Hash identifier: IsOdi7anu+59jN6DXbxdr8DP8Xfklel1t8aeruzdFD4=
Subject key identifier: 64:CB:A6:73:AD:E8:F6:42:8C:6B:E2:F5:DA:D9:DE:26:9B:A6:45:AA
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019E5A4254770836468D0294AD910335D0FA
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ZMumc63o9kKMa-L12tneJpumRao.roa
Signing time: Sun 24 May 2026 13:52:36 +0000
ROA not before: Sun 24 May 2026 13:52:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34837
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
212.16.64.0/19 maxlen: 19
212.16.64.0/24 maxlen: 24
212.16.65.0/24 maxlen: 24
212.16.66.0/24 maxlen: 24
212.16.67.0/24 maxlen: 24
212.16.68.0/24 maxlen: 24
212.16.69.0/24 maxlen: 24
212.16.73.0/24 maxlen: 24
212.16.74.0/24 maxlen: 24
212.16.75.0/24 maxlen: 24
212.16.76.0/24 maxlen: 24
212.16.77.0/24 maxlen: 24
212.16.82.0/24 maxlen: 24
212.16.83.0/24 maxlen: 24
212.16.84.0/24 maxlen: 24
212.16.88.0/24 maxlen: 24
212.16.90.0/24 maxlen: 24
212.16.91.0/24 maxlen: 24
212.16.95.0/24 maxlen: 24
212.80.0.0/19 maxlen: 19
212.80.1.0/24 maxlen: 24
212.80.3.0/24 maxlen: 24
212.80.5.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
212.80.16.0/24 maxlen: 24
212.80.28.0/24 maxlen: 24
212.80.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5a:42:54:77:08:36:46:8d:02:94:ad:91:03:35:d0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 24 13:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64cba673ade8f6428c6be2f5dad9de269ba645aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:9d:28:bf:b9:bc:5a:d5:0b:e7:f9:09:03:
2c:86:15:12:f3:e7:33:5a:57:d5:8f:16:40:f8:28:
54:03:68:d8:a0:28:72:b3:a8:0a:26:dd:82:c1:72:
c5:41:74:37:08:7e:f9:a0:fc:49:1d:0f:3e:85:41:
35:4a:6d:2e:77:72:5f:ab:8e:0c:3e:09:c1:13:2d:
d9:91:28:13:96:68:73:5e:77:b3:e6:44:80:45:80:
7f:a7:51:92:39:d0:84:bf:70:0a:71:b1:4c:70:60:
be:8d:0f:e7:b5:a7:ea:99:9e:3a:f3:84:c7:03:fa:
95:d5:13:dc:71:70:37:31:52:7f:66:6b:0e:e7:8c:
ca:3b:02:e9:af:f6:1b:79:48:85:bb:5d:f4:51:a6:
8f:e1:a5:f8:b0:75:67:55:12:33:41:50:1f:db:23:
3a:14:cf:e6:03:c1:75:ec:40:cc:e1:18:55:2a:5e:
dc:bb:51:8a:99:fe:f6:af:6e:eb:af:75:74:9a:32:
d5:69:69:76:54:76:8b:2c:22:de:f7:a2:31:01:1a:
18:cd:8e:6f:7e:45:ee:c8:2f:40:6d:a1:30:ef:b7:
6d:51:e2:e9:3e:fc:56:bb:93:1e:cb:76:6d:ab:6b:
e9:96:66:75:ef:1e:c9:f3:81:48:5f:e5:c4:32:de:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CB:A6:73:AD:E8:F6:42:8C:6B:E2:F5:DA:D9:DE:26:9B:A6:45:AA
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ZMumc63o9kKMa-L12tneJpumRao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
212.16.64.0/19
212.80.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:f7:a5:48:11:bc:df:8e:93:97:09:95:79:33:da:74:e0:fb:
fe:23:24:12:7c:4e:8a:a1:51:72:00:0c:7f:43:fa:fa:c2:b1:
9f:75:3a:a1:0d:5a:e6:c1:42:31:e9:e5:16:58:ef:4e:91:2b:
c9:d0:28:97:48:5f:9a:6c:f4:b3:64:18:f4:b5:6d:e2:1b:80:
40:82:b2:7e:02:93:1d:94:ef:39:43:a2:17:77:87:db:b6:c5:
85:e4:00:b8:da:22:d0:38:fa:67:a4:1e:fb:42:30:0b:06:4a:
3a:0c:86:bd:84:7b:88:d5:ce:27:03:66:57:48:93:63:f5:19:
82:de:e4:eb:23:49:8a:c1:15:15:09:90:f0:65:0e:eb:b5:f7:
e0:1b:90:a3:9b:36:65:c3:be:32:df:12:84:27:f1:07:77:b8:
85:f9:35:f2:ec:ee:bc:f1:8e:56:77:bf:7f:8e:86:70:40:df:
37:9c:12:b9:5f:76:6d:bb:7a:a9:7e:3e:9d:2b:ee:bf:ac:8e:
5f:7f:e0:7c:93:f7:e3:c9:5a:75:13:22:dd:35:6c:3a:96:c0:
45:88:3b:e8:c3:f2:ff:54:e6:ab:cd:16:fe:44:76:ad:72:28:
16:1d:39:5f:78:c3:3d:55:27:fc:c0:f8:46:36:f2:92:24:88:
74:e4:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:05 2026 by rpki-client