Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/aECIq53kmn8OJ2RgHuWhbVsJ2gk.roa
File: aECIq53kmn8OJ2RgHuWhbVsJ2gk.roa (raw, json)
Hash identifier: +ZhDaozPaa0XNW6L0g1DoTS8Qn7rbBIdQRWJZoxChcc=
Subject key identifier: 68:40:88:AB:9D:E4:9A:7F:0E:27:64:60:1E:E5:A1:6D:5B:09:DA:09
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019D62FD833470F9430819564DA5446C4B18
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/aECIq53kmn8OJ2RgHuWhbVsJ2gk.roa
Signing time: Mon 06 Apr 2026 13:31:14 +0000
ROA not before: Mon 06 Apr 2026 13:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 46.38.138.0/24 maxlen: 24
46.38.139.0/24 maxlen: 24
46.38.143.0/24 maxlen: 24
109.94.164.0/24 maxlen: 24
212.80.8.0/24 maxlen: 24
212.80.9.0/24 maxlen: 24
212.80.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:fd:83:34:70:f9:43:08:19:56:4d:a5:44:6c:4b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 6 13:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=684088ab9de49a7f0e2764601ee5a16d5b09da09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f0:14:15:5e:ca:58:8b:1f:cc:a6:1c:6a:02:
5a:95:67:88:9e:64:13:85:7f:7e:a8:1a:9b:a7:93:
46:a3:6c:90:7f:08:e9:ab:ba:ce:17:8b:24:e2:e6:
b6:e7:dd:46:91:c1:0c:b5:4e:c3:c0:79:52:8e:66:
0b:25:ec:c7:a6:70:57:80:bc:51:33:6d:0e:66:01:
fb:46:01:db:74:9b:44:d6:0f:af:8d:61:92:81:c0:
54:8d:b6:23:df:54:e2:c7:fb:d1:56:1c:f7:96:88:
d2:24:71:a2:3e:8d:e9:7b:3b:89:20:08:e2:ad:39:
55:2c:6d:03:c3:83:4a:d7:9a:3d:d7:0b:e6:f4:5c:
f0:2d:2f:ef:99:8c:fa:12:19:2e:e1:e8:14:3d:23:
4f:ec:f6:5e:f4:a1:52:e8:6d:97:33:6a:4d:ab:e7:
1d:44:4f:79:54:67:7e:7a:a8:e6:53:21:42:cd:8a:
ba:0f:2e:a4:67:12:1d:80:29:94:77:d2:06:6b:7f:
4c:59:4e:4b:58:03:b1:28:0e:a0:cd:c4:2c:87:a4:
28:bf:22:f6:2d:ca:1e:ac:98:b6:8c:32:ef:6c:ed:
30:17:30:16:8f:50:33:1a:b3:2b:a1:8b:c8:fb:02:
25:ee:ac:cd:a7:58:3f:9f:09:9d:cd:d7:b4:ec:ef:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:40:88:AB:9D:E4:9A:7F:0E:27:64:60:1E:E5:A1:6D:5B:09:DA:09
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/aECIq53kmn8OJ2RgHuWhbVsJ2gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.138.0/23
46.38.143.0/24
109.94.164.0/24
212.80.8.0-212.80.10.255
Signature Algorithm: sha256WithRSAEncryption
3f:c3:e1:f4:76:72:e6:0b:ef:ad:31:7e:43:fc:2e:af:84:0b:
63:be:01:9d:3a:65:35:00:54:de:e4:5e:c3:57:00:ca:c0:bd:
45:ba:9e:37:27:06:f2:8c:a3:9a:77:f1:5a:01:75:aa:56:5d:
40:0f:8d:a8:73:6c:fa:e8:40:8b:d2:7c:20:30:ef:cc:57:4b:
ff:b5:ea:0d:83:26:53:36:3c:04:c3:46:37:ca:ba:f3:4c:52:
ef:be:4a:28:dd:18:53:4a:a3:ec:87:4e:24:19:6d:51:bf:c0:
f6:93:fd:20:9e:54:4c:c0:1e:3a:2a:5c:63:29:d7:b3:fb:9d:
75:80:27:da:c6:e5:44:32:52:aa:53:33:5f:5a:fa:08:d4:d3:
bd:98:13:3a:ac:1a:02:c1:a5:d8:f0:4f:1b:2b:88:e2:f1:e6:
d5:07:73:e1:12:6f:d6:1e:61:0f:68:41:cc:95:f6:ba:9c:7e:
87:05:26:c0:b1:44:f1:32:88:8b:94:dc:fd:82:14:68:9c:ac:
ae:b2:5a:36:a0:5c:c4:8b:c1:f1:f9:73:4c:40:db:f3:15:af:
57:99:cc:db:73:1d:cd:ed:f9:b2:fe:9a:36:d2:eb:38:9a:21:
5b:7f:fc:39:fb:92:08:cd:56:80:32:6a:b2:82:12:de:2f:26:
3a:76:14:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:53 2026 by rpki-client