Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ORZDsHph5eHXFHRzWNh5a9BXHBE.roa
File: ORZDsHph5eHXFHRzWNh5a9BXHBE.roa (raw, json)
Hash identifier: pZ63MWL54t3M8TTURqSwCxfa7MbN1Q+ESSbwXqAgw+g=
Subject key identifier: 39:16:43:B0:7A:61:E5:E1:D7:14:74:73:58:D8:79:6B:D0:57:1C:11
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01A071F16485D8A253AAF1806DFDA46B847C
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ORZDsHph5eHXFHRzWNh5a9BXHBE.roa
Signing time: Sat 05 Sep 2026 14:20:40 +0000
ROA not before: Sat 05 Sep 2026 14:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213665
IP address blocks: 46.38.136.0/24 maxlen: 24
46.38.137.0/24 maxlen: 24
46.38.148.0/24 maxlen: 24
46.38.149.0/24 maxlen: 24
109.94.165.0/24 maxlen: 24
212.80.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:f1:64:85:d8:a2:53:aa:f1:80:6d:fd:a4:6b:84:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 5 14:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=391643b07a61e5e1d714747358d8796bd0571c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:00:d5:06:38:c5:c7:b1:d4:b0:02:e0:d9:
48:bc:c9:9c:30:3b:80:78:c9:39:34:af:c1:dc:54:
cf:03:f4:6c:be:d7:26:94:18:a1:5e:6b:58:26:a1:
ee:59:d7:e2:d3:25:2a:fa:76:31:87:83:cf:f5:1b:
1e:f2:d6:85:ed:88:f5:ba:30:dd:32:d5:6e:40:e9:
d8:71:35:7b:f8:bd:37:2c:5b:f9:b7:69:1e:d8:91:
40:a5:69:9b:ff:9b:ef:0c:f2:28:76:bf:3b:55:73:
6b:cb:d4:ab:7c:e6:cb:98:1b:8b:29:cb:13:6d:af:
d2:3f:44:66:d2:05:97:18:1d:ed:59:f7:3b:6a:8f:
ef:38:85:7d:17:92:a0:b7:90:46:fe:2b:f8:e1:dd:
9a:77:7a:08:73:d5:ef:16:32:a9:b2:4a:50:42:3c:
ed:75:a6:ee:c1:0c:37:72:01:e5:81:f7:bd:ff:8d:
ad:d0:79:be:cb:3a:d8:ba:3e:4e:4f:5d:d9:64:ad:
45:5b:af:c7:b7:90:16:5f:bc:6d:f3:7c:41:ca:99:
50:33:47:f5:e4:74:37:be:68:9e:03:18:e2:32:ea:
e3:c1:1c:52:1e:e8:e6:4b:78:62:d0:5f:d8:fb:c7:
f1:4c:37:93:eb:73:96:60:f0:f2:f1:00:85:e4:6c:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:16:43:B0:7A:61:E5:E1:D7:14:74:73:58:D8:79:6B:D0:57:1C:11
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ORZDsHph5eHXFHRzWNh5a9BXHBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.136.0/23
46.38.148.0/23
109.94.165.0/24
212.80.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9b:4f:68:f4:9d:87:8d:7c:7f:a0:07:a1:ae:8f:77:54:87:
cb:0e:57:ec:33:43:4a:af:cd:af:c2:9d:19:fe:25:df:ba:2a:
e3:08:f3:8e:fd:b7:e8:78:c1:a6:48:ff:20:43:46:5e:88:1a:
1f:f5:b7:bc:c0:50:dc:b8:84:f1:fc:06:a0:f9:35:d3:96:85:
24:43:1e:ad:15:3a:de:ce:2d:04:5f:ac:1b:26:8b:29:1c:9f:
df:77:25:a7:3d:5a:fd:4b:fd:c0:97:00:e3:9b:e9:92:89:10:
62:ac:0f:e6:57:e5:f7:7b:44:4a:9e:76:b2:5f:53:d7:f4:f2:
b5:f6:d7:b1:a0:3c:b2:29:45:80:72:69:18:4f:98:e1:e3:1d:
d5:42:7c:25:01:98:2a:2c:87:32:4d:86:1a:0e:bd:1c:36:07:
92:43:b1:0d:f4:c7:24:7e:72:10:38:96:8f:d8:fd:85:8e:8d:
2d:4b:9a:c2:32:99:0e:9b:62:6c:bd:3f:b5:83:78:40:2d:9c:
ff:bd:9e:33:c3:d2:71:8f:ca:c5:91:d1:ae:34:9b:b1:39:2d:
b5:3c:fc:00:5f:5f:14:3b:5e:40:44:05:46:af:48:48:75:65:
8c:3b:cc:95:bd:9d:9a:ac:78:43:9e:34:e4:3c:d2:4f:8c:3f:
d8:a5:a5:39
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaBx8WSF2KJTqvGAbf2ka4R8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwOTA1MTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTE2NDNiMDdhNjFlNWUxZDcxNDc0NzM1OGQ4Nzk2YmQwNTcxYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX8A1QY4xcex1LAC4NlIvMmcMDuA
eMk5NK/B3FTPA/RsvtcmlBihXmtYJqHuWdfi0yUq+nYxh4PP9Rse8taF7Yj1ujDd
MtVuQOnYcTV7+L03LFv5t2ke2JFApWmb/5vvDPIodr87VXNry9SrfObLmBuLKcsT
ba/SP0Rm0gWXGB3tWfc7ao/vOIV9F5Kgt5BG/iv44d2ad3oIc9XvFjKpskpQQjzt
dabuwQw3cgHlgfe9/42t0Hm+yzrYuj5OT13ZZK1FW6/Ht5AWX7xt83xByplQM0f1
5HQ3vmieAxjiMurjwRxSHujmS3hi0F/Y+8fxTDeT63OWYPDy8QCF5GxlmQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDkWQ7B6YeXh1xR0c1jYeWvQVxwRMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvT1JaRHNIcGg1ZUhYRkhSeldOaDVhOUJYSEJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLiaIAwQB
LiaUAwQAbV6lAwQA1FAYMA0GCSqGSIb3DQEBCwUAA4IBAQAMm09o9J2HjXx/oAeh
ro93VIfLDlfsM0NKr82vwp0Z/iXfuirjCPOO/bfoeMGmSP8gQ0ZeiBof9be8wFDc
uITx/Aag+TXTloUkQx6tFTrezi0EX6wbJospHJ/fdyWnPVr9S/3AlwDjm+mSiRBi
rA/mV+X3e0RKnnayX1PX9PK19texoDyyKUWAcmkYT5jh4x3VQnwlAZgqLIcyTYYa
Dr0cNgeSQ7EN9MckfnIQOJaP2P2Fjo0tS5rCMpkOm2JsvT+1g3hALZz/vZ4zw9Jx
j8rFkdGuNJuxOS21PPwAX18UO15ARAVGr0hIdWWMO8yVvZ2arHhDnjTkPNJPjD/Y
paU5
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:28:04 2026 by rpki-client