Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jxkZe3j_fOWOpKpLuQiOyP6n0mI.roa
File: jxkZe3j_fOWOpKpLuQiOyP6n0mI.roa (raw, json)
Hash identifier: dT4/mXl8tUgb28GqNE7joGgtqXmeGY2aKBETadjrtyg=
Subject key identifier: 8F:19:19:7B:78:FF:7C:E5:8E:A4:AA:4B:B9:08:8E:C8:FE:A7:D2:62
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019EB1E5DB1C3963B1E3A3FB9D16DE9C6D45
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jxkZe3j_fOWOpKpLuQiOyP6n0mI.roa
Signing time: Wed 10 Jun 2026 14:18:11 +0000
ROA not before: Wed 10 Jun 2026 14:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.64.0/24 maxlen: 24
212.16.65.0/24 maxlen: 24
212.16.66.0/24 maxlen: 24
212.16.67.0/24 maxlen: 24
212.16.68.0/24 maxlen: 24
212.16.69.0/24 maxlen: 24
212.16.74.0/24 maxlen: 24
212.16.75.0/24 maxlen: 24
212.16.76.0/24 maxlen: 24
212.16.77.0/24 maxlen: 24
212.16.82.0/24 maxlen: 24
212.16.83.0/24 maxlen: 24
212.16.84.0/24 maxlen: 24
212.16.88.0/24 maxlen: 24
212.16.90.0/24 maxlen: 24
212.16.91.0/24 maxlen: 24
212.16.95.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.1.0/24 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.3.0/24 maxlen: 24
212.80.5.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
212.80.16.0/24 maxlen: 24
212.80.17.0/24 maxlen: 24
212.80.28.0/24 maxlen: 24
212.80.30.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:e5:db:1c:39:63:b1:e3:a3:fb:9d:16:de:9c:6d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 10 14:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f19197b78ff7ce58ea4aa4bb9088ec8fea7d262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:57:63:75:00:20:a8:34:82:28:f3:67:15:
53:d4:b1:a5:64:aa:03:c2:a3:9b:b9:06:01:36:ff:
ab:2a:8f:9f:b7:0f:c0:8d:3e:2b:83:d7:55:8f:68:
7a:30:ff:29:b3:14:de:83:ec:87:2d:34:12:25:a9:
f2:e3:1f:b5:03:a8:17:9a:fc:f1:ef:38:77:66:b9:
4c:b2:0f:32:bc:89:6e:9f:77:16:7d:dd:c1:02:76:
ba:79:46:2a:a4:be:d0:9f:82:3d:d3:2a:6a:ba:5c:
5a:fb:a9:a2:47:a0:e7:2f:f5:d4:07:75:79:94:ad:
d0:90:a7:12:41:0b:5d:59:57:68:c4:e1:5f:76:d5:
f2:d7:8a:46:a5:cb:1b:30:08:ca:84:5e:e4:a1:08:
f3:a8:bd:f0:3e:d7:c9:21:47:68:7c:30:8a:86:11:
4b:10:1c:f1:10:af:58:38:dc:70:e3:ed:5b:ca:78:
80:f3:90:d8:e4:6a:49:52:e5:4b:31:9f:5c:41:1b:
71:1d:e2:15:7b:10:65:bf:e5:4d:62:c8:9c:41:99:
54:23:3d:1a:78:65:c3:b4:34:31:0d:65:1e:5c:2e:
7b:40:bc:71:14:fc:ee:a2:6a:dd:4a:aa:16:5d:56:
e1:56:f5:71:5a:96:97:5d:cc:33:45:b5:29:53:a3:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:19:19:7B:78:FF:7C:E5:8E:A4:AA:4B:B9:08:8E:C8:FE:A7:D2:62
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jxkZe3j_fOWOpKpLuQiOyP6n0mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
185.24.150.0/24
185.29.220.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
43:7c:0f:73:1b:f1:d8:f5:49:ab:f7:bb:e5:3a:3b:76:3b:59:
6a:0a:d8:c1:33:46:72:73:9a:7b:c8:16:86:05:c9:55:51:de:
d4:8e:31:29:12:f2:5f:ac:25:99:12:8c:44:9c:e3:55:da:c2:
46:39:86:48:8f:64:62:79:cf:7d:67:7f:68:63:f4:c2:ff:f5:
44:fd:29:f0:91:4d:cf:9b:e7:7b:0c:95:52:bc:f7:ef:0a:18:
f5:12:40:0a:1a:2f:ea:ce:3f:e2:46:b6:5a:75:5d:7a:dd:66:
aa:43:68:a4:b2:dc:70:fa:61:2e:42:61:73:3a:01:42:f4:5a:
f8:9f:12:15:76:14:1f:7b:55:e9:31:f2:8d:16:37:22:a0:4f:
61:06:d7:e4:8a:65:2e:67:df:d5:65:37:8c:45:c6:03:fa:b4:
c6:ab:90:f1:c1:c3:56:e6:ab:50:69:fc:33:9b:ee:10:85:cf:
49:6b:b7:02:49:12:9d:2b:7a:d2:77:76:fa:de:50:f2:9a:56:
0f:6b:11:16:11:75:e6:e2:32:52:41:d5:f9:15:1d:60:29:70:
3c:3a:3d:77:9a:56:5e:4f:cc:a0:f2:ee:d0:9c:b9:43:73:b2:
38:d2:51:db:c9:91:fa:e0:7b:1b:09:ad:49:83:73:d1:a5:09:
9f:b8:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:45 2026 by rpki-client