Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nvmiHh7hvoXBMF2l9Luau9aPlyM.roa
File: nvmiHh7hvoXBMF2l9Luau9aPlyM.roa (raw, json)
Hash identifier: qhfMJQhMoSz8x8qUio2M4noD+p0a/clSmOw00cUm+dQ=
Subject key identifier: 9E:F9:A2:1E:1E:E1:BE:85:C1:30:5D:A5:F4:BB:9A:BB:D6:8F:97:23
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019EB1821093B556180164B36449659D7367
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nvmiHh7hvoXBMF2l9Luau9aPlyM.roa
Signing time: Wed 10 Jun 2026 12:29:11 +0000
ROA not before: Wed 10 Jun 2026 12:29:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34837
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
212.16.64.0/19 maxlen: 19
212.16.64.0/24 maxlen: 24
212.16.65.0/24 maxlen: 24
212.16.66.0/24 maxlen: 24
212.16.67.0/24 maxlen: 24
212.16.68.0/24 maxlen: 24
212.16.69.0/24 maxlen: 24
212.16.72.0/24 maxlen: 24
212.16.73.0/24 maxlen: 24
212.16.74.0/24 maxlen: 24
212.16.75.0/24 maxlen: 24
212.16.76.0/24 maxlen: 24
212.16.77.0/24 maxlen: 24
212.16.82.0/24 maxlen: 24
212.16.83.0/24 maxlen: 24
212.16.84.0/24 maxlen: 24
212.16.88.0/24 maxlen: 24
212.16.90.0/24 maxlen: 24
212.16.91.0/24 maxlen: 24
212.16.95.0/24 maxlen: 24
212.80.0.0/19 maxlen: 19
212.80.1.0/24 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.3.0/24 maxlen: 24
212.80.5.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
212.80.16.0/24 maxlen: 24
212.80.17.0/24 maxlen: 24
212.80.28.0/24 maxlen: 24
212.80.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:82:10:93:b5:56:18:01:64:b3:64:49:65:9d:73:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 10 12:29:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ef9a21e1ee1be85c1305da5f4bb9abbd68f9723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:e7:97:82:3b:77:88:fd:a9:7c:f4:e4:70:
9b:64:78:00:d9:9c:be:62:7e:9e:7a:d0:e5:4b:c7:
07:ee:59:d8:56:2c:03:63:23:91:af:24:2a:11:76:
93:34:ed:8c:f8:52:04:28:cd:7c:32:38:65:61:6d:
7a:86:a7:04:02:48:7e:80:6d:0d:75:47:bc:4f:de:
52:a4:b9:83:dd:3c:10:5f:0e:3c:0b:02:7f:2c:b2:
e5:da:3f:80:74:d8:dc:af:09:89:a7:a6:bb:19:39:
e8:eb:0e:d2:2f:e2:f1:79:31:e3:27:5e:09:37:c5:
68:94:0a:99:b2:98:c3:cc:99:9b:ce:ca:59:44:d7:
55:5c:d7:2d:eb:a3:1d:cc:b1:67:98:e7:01:b9:60:
e3:c0:9c:ab:fc:02:5c:bb:3e:d1:71:07:7d:50:2a:
3f:a8:8b:4d:5a:c9:e0:42:74:67:5e:53:56:66:b8:
22:fb:05:09:9c:32:8e:1a:25:10:ce:8c:3c:9e:42:
a4:51:26:d9:64:b4:cd:fe:c9:24:7b:a0:44:80:84:
84:7d:a4:a3:d6:ce:71:18:b8:0c:43:5b:df:b7:c4:
cf:b8:92:94:ec:b3:a3:65:3a:bd:73:9a:04:b3:a6:
21:a8:4e:5e:d2:03:0e:c9:50:c7:74:f2:e6:ac:b2:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:A2:1E:1E:E1:BE:85:C1:30:5D:A5:F4:BB:9A:BB:D6:8F:97:23
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nvmiHh7hvoXBMF2l9Luau9aPlyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
212.16.64.0/19
212.80.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:94:e2:f9:3f:2a:48:82:21:ab:c5:22:48:37:de:66:f7:37:
3b:da:2a:ba:33:a5:53:f3:1f:c2:58:cc:02:42:8a:ef:7d:47:
d7:68:65:60:af:fc:98:6a:21:09:eb:c3:2d:cb:d9:c6:1a:97:
24:d3:bf:4d:d9:88:19:0d:02:b8:95:ac:99:96:30:be:1b:ec:
ab:27:81:45:43:d5:74:89:64:32:89:2e:e1:89:fb:43:7d:47:
46:f4:1e:bc:10:bd:6e:5e:45:a1:80:84:07:c3:4d:c3:09:25:
ec:83:79:6a:4a:a1:e2:a1:bc:60:46:d2:ef:cf:99:a9:28:8c:
87:00:2a:cb:a9:8e:ba:17:81:18:aa:92:d4:06:8b:cb:57:ad:
8f:dc:fb:95:b3:db:5a:ff:7e:a7:dd:d3:ea:df:c2:20:21:64:
06:18:50:0d:e2:0c:93:ed:62:b2:55:ce:00:bf:ec:f8:e0:f9:
e2:ae:ea:84:c7:38:a9:ee:32:b3:31:0e:12:7f:f9:d3:f5:2f:
c6:b7:b0:e1:9b:e3:84:88:5c:d2:33:0a:1a:27:21:56:bb:53:
b4:58:84:64:62:60:0c:31:2c:6a:3f:eb:9a:a7:61:2e:09:6d:
bf:6d:1e:64:8e:e7:df:4e:70:22:3d:dd:28:8f:54:5c:46:52:
df:93:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:48:10 2026 by rpki-client