Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/phY6ZCk8aqSttC6-yTKQykjbTyE.roa
File: phY6ZCk8aqSttC6-yTKQykjbTyE.roa (raw, json)
Hash identifier: exlZn0QuTXCMh9FQhgXHs9KQ4ozOsEVMgXXaoQJ4z6o=
Subject key identifier: A6:16:3A:64:29:3C:6A:A4:AD:B4:2E:BE:C9:32:90:CA:48:DB:4F:21
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019EE05860C5B25C862B12BEF5661BCA922D
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/phY6ZCk8aqSttC6-yTKQykjbTyE.roa
Signing time: Fri 19 Jun 2026 14:45:48 +0000
ROA not before: Fri 19 Jun 2026 14:45:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 46.38.152.0/24 maxlen: 24
185.143.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:58:60:c5:b2:5c:86:2b:12:be:f5:66:1b:ca:92:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 19 14:45:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6163a64293c6aa4adb42ebec93290ca48db4f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:c3:c3:bb:93:91:dc:ad:3e:27:b0:59:07:
ff:2b:96:05:f7:bc:1d:a7:ad:e5:a6:12:90:7e:e8:
53:b7:28:65:20:4c:49:6b:9c:2f:e6:0b:8b:48:a0:
14:55:31:98:df:35:7d:d7:dd:da:71:78:c5:dd:85:
8c:eb:1a:3d:e3:c1:0c:06:01:4e:c9:4f:41:cc:35:
3a:da:7c:f9:a0:28:b0:94:21:96:39:13:db:2f:25:
05:33:72:7a:17:0f:f2:95:b3:e7:37:7e:82:a5:d6:
e5:da:c5:4d:63:cb:49:9d:fe:b2:98:8e:be:5d:46:
c6:dc:27:53:cb:41:33:9e:d3:f8:8c:59:eb:2b:64:
b2:1b:62:7d:4c:0d:7e:32:b9:aa:69:e0:1d:f0:0b:
12:c3:0b:70:c1:4e:5f:4e:a4:3b:46:cf:4e:97:16:
81:ee:2e:73:95:90:40:c6:df:68:f5:b2:25:71:1f:
4d:a9:9f:8f:e0:a5:e4:fa:ce:8c:91:d9:32:c7:c9:
5d:f7:38:d4:03:6f:d1:00:93:26:8e:9f:32:a3:69:
54:d9:e5:39:15:d2:5b:9c:cd:b8:45:45:26:9b:c9:
45:f6:0e:d3:ca:4d:6f:53:68:e6:4c:ee:f4:bd:f4:
46:4b:8c:55:58:a3:f3:6b:f3:d0:b6:d1:73:05:5c:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:3A:64:29:3C:6A:A4:AD:B4:2E:BE:C9:32:90:CA:48:DB:4F:21
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/phY6ZCk8aqSttC6-yTKQykjbTyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.152.0/24
185.143.73.0/24
Signature Algorithm: sha256WithRSAEncryption
61:da:0e:2f:65:c9:09:33:f1:7b:3d:25:12:71:66:c8:3b:16:
92:30:29:5a:52:33:56:38:76:31:39:63:91:83:cd:89:d5:4d:
59:6a:a2:e5:d1:55:1d:a8:e9:b0:79:c1:2c:9f:34:f0:7e:c8:
42:3b:ad:e1:01:81:a0:64:9b:95:2f:bc:b6:7e:b8:22:41:35:
90:62:b7:d1:34:17:39:02:c3:82:11:f2:92:78:c7:20:52:ec:
ce:79:b6:fd:f5:e9:e4:32:fd:71:d2:8e:d5:63:77:a2:74:36:
f3:fa:cd:c8:27:c4:3d:0d:4a:6e:4f:88:89:b7:5b:b1:f9:cd:
61:70:16:64:f4:32:b0:04:fe:b1:79:9b:51:23:f0:8a:c4:17:
52:83:dc:4f:f6:da:dc:c5:6e:9b:f5:79:52:10:59:12:d2:fd:
ad:f9:75:dd:79:db:b7:85:f8:ff:cc:e7:59:ff:9e:be:06:a5:
0c:53:21:33:49:ce:72:14:28:1b:e4:98:64:7c:9a:fd:6d:08:
56:a1:5b:45:c8:b5:bb:20:a0:5c:06:a4:11:0e:23:ab:1e:45:
d2:e4:56:a5:f5:5c:10:f3:02:b1:61:6d:88:0a:d7:a1:b9:e8:
af:e6:e7:75:75:73:16:6e:d9:ee:9b:60:5a:30:e5:a6:62:e6:
00:f3:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:45 2026 by rpki-client