Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/pHMZMf1tCoAPsA4GXttxHs821MQ.roa
File: pHMZMf1tCoAPsA4GXttxHs821MQ.roa (raw, json)
Hash identifier: qfAC5pme0mB6vVr6G9xHVpC5/6gd8tlEleK+lZeipXg=
Subject key identifier: A4:73:19:31:FD:6D:0A:80:0F:B0:0E:06:5E:DB:71:1E:CF:36:D4:C4
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019F1D2619C6B37B6EEDA7BC013E03EC17C7
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/pHMZMf1tCoAPsA4GXttxHs821MQ.roa
Signing time: Wed 01 Jul 2026 10:07:44 +0000
ROA not before: Wed 01 Jul 2026 10:07:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.64.0/24 maxlen: 24
212.16.65.0/24 maxlen: 24
212.16.66.0/24 maxlen: 24
212.16.67.0/24 maxlen: 24
212.16.68.0/24 maxlen: 24
212.16.69.0/24 maxlen: 24
212.16.74.0/24 maxlen: 24
212.16.75.0/24 maxlen: 24
212.16.76.0/24 maxlen: 24
212.16.77.0/24 maxlen: 24
212.16.82.0/24 maxlen: 24
212.16.83.0/24 maxlen: 24
212.16.84.0/24 maxlen: 24
212.16.88.0/24 maxlen: 24
212.16.90.0/24 maxlen: 24
212.16.91.0/24 maxlen: 24
212.16.95.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.1.0/24 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.3.0/24 maxlen: 24
212.80.5.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
212.80.16.0/24 maxlen: 24
212.80.17.0/24 maxlen: 24
212.80.28.0/24 maxlen: 24
212.80.29.0/24 maxlen: 24
212.80.30.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:26:19:c6:b3:7b:6e:ed:a7:bc:01:3e:03:ec:17:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 1 10:07:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4731931fd6d0a800fb00e065edb711ecf36d4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:29:ad:a0:b4:7a:c5:9a:a4:ff:b9:89:1c:
60:46:6b:1a:61:68:4f:76:d0:09:71:8a:ad:b9:79:
3b:12:4f:1c:b6:c4:f8:a4:ff:f2:c7:5f:02:a2:20:
80:ad:81:4e:83:25:9c:19:46:96:ba:dc:0d:ca:d7:
3d:e9:77:26:7c:01:6a:87:ea:d3:31:0f:26:44:2e:
6e:3f:19:d7:08:34:93:ef:b9:10:36:ec:6d:d8:74:
eb:e0:c8:3e:c7:21:c2:8f:b7:b7:d1:b0:0e:7d:72:
02:2e:71:e8:04:c1:06:f2:7a:8d:b9:e7:06:10:13:
9c:57:b4:2c:14:69:7c:96:92:15:07:1f:62:4f:31:
c0:de:ca:07:25:fc:f8:6d:1d:74:a9:f2:f1:1a:82:
04:fc:85:aa:f1:9a:7f:8d:33:b4:b3:25:cb:74:bd:
3e:e0:e7:4d:7b:1d:64:ac:e6:2c:bd:65:dd:71:de:
1f:48:21:dd:aa:1b:1b:44:e8:96:50:f0:d0:90:1d:
cd:d6:29:49:04:7d:94:c1:a1:7e:8e:aa:f3:85:60:
e1:b0:20:b2:0a:d0:bb:df:47:0f:d7:c9:65:87:fd:
f5:3a:0d:98:df:0c:01:8c:5c:38:db:d8:fb:0b:69:
9e:f4:92:62:ac:41:4c:af:0e:b2:76:79:62:92:65:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:73:19:31:FD:6D:0A:80:0F:B0:0E:06:5E:DB:71:1E:CF:36:D4:C4
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/pHMZMf1tCoAPsA4GXttxHs821MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
185.24.150.0/24
185.29.220.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
6b:18:2e:3f:21:67:df:47:fb:cc:a2:8a:52:a6:ca:a5:77:e8:
46:ee:59:8b:aa:24:3f:4a:dd:b2:66:fc:32:f3:9b:5c:15:04:
94:b4:7e:fe:d2:04:63:7d:12:9e:f0:be:11:91:31:a1:d1:ad:
27:1a:f3:91:9d:f0:bd:c5:81:8e:3c:6a:f1:3f:14:aa:24:76:
77:1f:1d:02:bb:52:14:5f:64:03:83:04:94:6e:13:4a:59:e3:
4e:a3:f1:0f:d1:c9:bd:8a:da:e4:ba:39:b6:c3:bf:2f:d3:ff:
de:bd:c7:a9:e5:94:90:fd:bc:80:85:62:29:1c:23:9f:9b:4c:
e4:11:2b:58:86:50:a2:95:09:ba:cf:e7:79:d7:aa:e7:d6:f4:
ec:b3:4c:43:ea:28:d8:ed:88:34:86:ed:10:30:b0:79:b9:25:
dd:42:0f:a8:34:51:34:fb:3d:44:ae:0a:e3:88:59:3e:50:c1:
d5:e1:f8:20:2c:81:70:ff:6e:22:12:78:8f:f5:18:83:08:84:
16:f0:fa:0e:c3:09:51:07:02:76:9d:be:fd:d3:e4:64:1a:dd:
b7:27:6e:ed:79:75:b3:f4:87:e8:24:a7:de:70:fe:01:af:09:
a9:30:12:91:0c:ad:5e:82:80:d5:59:53:12:57:5f:f3:d5:be:
5a:f3:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:56:25 2026 by rpki-client