Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5kJ-KBOslxl7eMMVxRA35-Jf9wk.roa
File: 5kJ-KBOslxl7eMMVxRA35-Jf9wk.roa (raw, json)
Hash identifier: iy3DwQD9iS+0vnz5GqNL6+JAoJO5FEqtMUwE9gE3Dgo=
Subject key identifier: E6:42:7E:28:13:AC:97:19:7B:78:C3:15:C5:10:37:E7:E2:5F:F7:09
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019D6308AC1D775A10A79B6831F1E30E02C1
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5kJ-KBOslxl7eMMVxRA35-Jf9wk.roa
Signing time: Mon 06 Apr 2026 13:43:25 +0000
ROA not before: Mon 06 Apr 2026 13:43:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.136.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.68.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:08:ac:1d:77:5a:10:a7:9b:68:31:f1:e3:0e:02:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 6 13:43:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6427e2813ac97197b78c315c51037e7e25ff709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:f0:34:cb:20:14:0b:53:25:11:48:bb:28:
67:65:ff:cc:a0:0e:ae:00:cb:f1:c8:b0:9d:81:64:
20:15:87:7e:69:2e:ba:08:4e:ca:c1:01:82:99:29:
a2:b5:a7:0d:c4:e3:81:0d:8f:40:15:e2:61:a2:6a:
ab:3e:a1:69:fe:04:5c:2c:81:95:c1:29:01:a6:5a:
f9:72:60:bb:e1:d0:c2:4e:05:c7:1e:e1:66:73:53:
82:84:df:e9:d8:df:eb:71:df:b3:d6:86:55:e8:ce:
01:50:3f:80:62:c6:a7:e5:d2:c1:b7:6b:9d:86:1b:
5c:f2:0a:06:8f:f8:ab:b3:fd:53:77:31:75:ae:fe:
7f:72:47:8b:8b:ee:69:73:a3:16:7a:a8:a2:49:d1:
cb:26:5b:6b:29:89:fe:3f:11:f9:40:68:67:30:77:
4f:27:cb:b9:71:84:b8:53:40:d8:04:3e:1c:c0:cb:
47:46:21:d2:c4:ac:bc:0c:29:6b:b4:21:e4:d4:f3:
7d:00:14:97:6d:c0:d6:43:07:80:53:62:44:4d:60:
ec:97:13:e3:2f:44:4c:f3:67:75:93:fb:fe:e1:1b:
16:d3:03:29:b8:d0:17:66:89:23:58:7e:a1:b2:24:
63:d2:96:77:27:59:f8:9d:b1:91:cf:27:b5:80:5c:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:42:7E:28:13:AC:97:19:7B:78:C3:15:C5:10:37:E7:E2:5F:F7:09
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5kJ-KBOslxl7eMMVxRA35-Jf9wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.136.0/24
185.24.150.0/24
185.29.220.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
49:07:60:91:7b:d7:ef:0b:78:a0:27:b1:58:60:10:92:a9:e3:
56:e9:48:53:e0:6f:eb:6f:47:96:69:5a:50:12:ca:8b:46:39:
6f:79:70:08:0c:70:9e:28:ed:16:63:98:df:8e:0c:ab:bd:34:
fa:b6:13:14:44:20:96:63:19:54:e3:d9:91:d7:d5:e3:bb:da:
45:a7:d6:e1:08:97:98:4d:9f:b3:90:11:24:ed:eb:63:92:8a:
cb:2f:33:39:84:ee:95:41:69:5b:f4:2d:59:3f:54:33:37:28:
26:73:b1:e7:1e:c9:cb:70:79:99:e5:c2:eb:03:56:9f:0d:3e:
8e:1e:36:ec:36:c1:41:83:f6:b9:10:65:73:c1:1f:fd:f3:7c:
97:96:f9:3b:4b:c3:c7:f2:d8:d7:f9:aa:81:f2:be:c9:16:d2:
c8:e5:2a:b5:57:2d:9f:52:f9:03:48:8b:1f:17:68:39:ed:1a:
ec:a8:27:3e:83:67:b3:9a:31:aa:97:5a:17:5b:2a:de:5d:30:
9d:24:cf:db:28:00:e6:5a:f5:eb:1c:6f:66:c3:ea:31:02:27:
7d:ed:b6:28:68:e5:00:e3:ce:51:c9:3c:b2:eb:fe:aa:be:cf:
1a:c2:43:34:d1:fe:92:a4:13:2d:de:9d:62:51:53:3a:77:b0:
fb:6b:cd:4b
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZ1jCKwdd1oQp5toMfHjDgLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwNDA2MTM0MzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjQyN2UyODEzYWM5NzE5N2I3OGMzMTVjNTEwMzdlN2UyNWZmNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyPwNMsgFAtTJRFIuyhnZf/MoA6u
AMvxyLCdgWQgFYd+aS66CE7KwQGCmSmitacNxOOBDY9AFeJhomqrPqFp/gRcLIGV
wSkBplr5cmC74dDCTgXHHuFmc1OChN/p2N/rcd+z1oZV6M4BUD+AYsan5dLBt2ud
hhtc8goGj/irs/1TdzF1rv5/ckeLi+5pc6MWeqiiSdHLJltrKYn+PxH5QGhnMHdP
J8u5cYS4U0DYBD4cwMtHRiHSxKy8DClrtCHk1PN9ABSXbcDWQweAU2JETWDslxPj
L0RM82d1k/v+4RsW0wMpuNAXZokjWH6hsiRj0pZ3J1n4nbGRzye1gFylwwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFOZCfigTrJcZe3jDFcUQN+fiX/cJMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvNWtKLUtCT3NseGw3ZU1NVnhSQTM1LUpmOXdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQALiaBAwQA
LiaDAwQALiaIAwQAuRiWAwQBuR3cAwQF1BBAAwQF1FAAMA0EAgACMAcDBQMqAH2A
MA0GCSqGSIb3DQEBCwUAA4IBAQBJB2CRe9fvC3igJ7FYYBCSqeNW6UhT4G/rb0eW
aVpQEsqLRjlveXAIDHCeKO0WY5jfjgyrvTT6thMURCCWYxlU49mR19Xju9pFp9bh
CJeYTZ+zkBEk7etjkorLLzM5hO6VQWlb9C1ZP1QzNygmc7HnHsnLcHmZ5cLrA1af
DT6OHjbsNsFBg/a5EGVzwR/983yXlvk7S8PH8tjX+aqB8r7JFtLI5Sq1Vy2fUvkD
SIsfF2g57RrsqCc+g2ezmjGql1oXWyreXTCdJM/bKADmWvXrHG9mw+oxAid97bYo
aOUA485RyTyy6/6qvs8awkM00f6SpBMt3p1iUVM6d7D7a81L
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:05 2026 by rpki-client