Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/r9JdtIjgWYLFN73CkIvKhzfgVDc.roa
File: r9JdtIjgWYLFN73CkIvKhzfgVDc.roa (raw, json)
Hash identifier: CmPRSN6yeUsikZFK6wziOdnLgCPwIkPYHU4ZmfC9JiI=
Subject key identifier: AF:D2:5D:B4:88:E0:59:82:C5:37:BD:C2:90:8B:CA:87:37:E0:54:37
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01A17D3CCF2A63745FCA46E74F7C4403D478
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/r9JdtIjgWYLFN73CkIvKhzfgVDc.roa
Signing time: Tue 27 Oct 2026 12:01:39 +0000
ROA not before: Tue 27 Oct 2026 12:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.144.0/24 maxlen: 24
46.38.151.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.64.0/24 maxlen: 24
212.16.65.0/24 maxlen: 24
212.16.66.0/24 maxlen: 24
212.16.67.0/24 maxlen: 24
212.16.68.0/24 maxlen: 24
212.16.69.0/24 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.74.0/24 maxlen: 24
212.16.75.0/24 maxlen: 24
212.16.76.0/24 maxlen: 24
212.16.77.0/24 maxlen: 24
212.16.81.0/24 maxlen: 24
212.16.82.0/24 maxlen: 24
212.16.83.0/24 maxlen: 24
212.16.84.0/24 maxlen: 24
212.16.88.0/24 maxlen: 24
212.16.90.0/24 maxlen: 24
212.16.91.0/24 maxlen: 24
212.16.95.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.1.0/24 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.3.0/24 maxlen: 24
212.80.5.0/24 maxlen: 24
212.80.11.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
212.80.16.0/24 maxlen: 24
212.80.17.0/24 maxlen: 24
212.80.28.0/24 maxlen: 24
212.80.30.0/24 maxlen: 24
212.80.31.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:cf:2a:63:74:5f:ca:46:e7:4f:7c:44:03:d4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 27 12:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afd25db488e05982c537bdc2908bca8737e05437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:59:98:7c:0d:99:38:de:17:00:6f:82:67:
ee:cd:71:d4:85:85:61:f4:b4:b9:b1:a3:47:84:a7:
d6:e2:b9:b7:32:f6:17:e2:3b:d2:06:63:a2:e0:6e:
3a:fa:46:e8:9b:f8:3e:62:ab:34:3e:09:fa:05:0e:
ff:42:cc:0a:c3:1f:44:42:c8:b5:99:f0:ba:3b:e0:
e0:e1:92:9e:11:51:2f:1b:55:bb:6e:fb:ad:6d:ab:
1d:a1:d7:d5:f4:a0:b4:90:12:c0:ff:3c:61:fd:35:
38:64:bf:cf:e9:e6:83:a0:b7:06:da:59:ef:be:c2:
3d:ba:f0:f0:8c:bb:61:12:de:94:5c:50:13:16:cc:
97:c0:df:6c:66:81:8e:f7:ac:89:f9:ca:db:ef:cf:
f8:17:e2:f9:87:dd:49:7d:67:3c:12:16:5e:70:af:
85:ec:7b:59:36:2a:e7:91:bf:ba:1b:d6:04:a2:0e:
68:bf:28:01:b9:7f:5e:b9:7a:88:6e:da:e0:d8:e1:
2e:ed:bc:93:0b:23:79:26:53:e4:d8:a9:e9:04:b1:
c2:3e:e0:cf:09:02:3a:5b:7a:f6:d9:65:a9:b2:fa:
10:64:a4:58:cb:1d:5b:30:ea:1d:d0:9b:ac:5c:46:
d7:8e:10:c0:d7:1a:66:ef:f1:18:a6:cc:1c:16:57:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D2:5D:B4:88:E0:59:82:C5:37:BD:C2:90:8B:CA:87:37:E0:54:37
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/r9JdtIjgWYLFN73CkIvKhzfgVDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.144.0/24
46.38.151.0/24
185.24.150.0/24
185.29.220.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
a4:19:b7:a6:f2:18:c5:5b:bf:07:6b:57:09:f7:51:e9:1f:a2:
cf:10:f6:4c:37:a3:8a:e5:25:be:7e:be:9b:b9:91:50:26:ba:
aa:36:ae:76:3b:23:0f:eb:55:34:0f:c4:f0:ca:5b:27:64:c9:
4f:b7:3b:fa:e0:53:08:b8:7d:a9:fc:9c:56:6d:81:9a:c9:63:
06:37:68:4a:20:c1:f8:a7:c9:b6:b0:20:32:a3:22:aa:5f:42:
24:e9:44:51:6a:fd:16:09:21:5f:60:74:41:a7:b1:b9:f5:09:
ed:33:48:cc:c9:8c:8a:52:1a:88:e4:01:87:51:af:4f:01:e7:
cd:ae:4a:96:e8:ac:3b:58:d8:e1:b0:11:c4:2c:e7:03:99:2a:
cb:fc:12:61:e3:06:46:d6:03:55:7f:5b:c4:ea:1b:ba:18:08:
ba:0a:f9:cb:3a:ab:2a:4e:ad:c0:06:ab:b1:55:73:fd:50:2b:
31:f2:00:04:b7:d2:7f:2e:45:19:b0:8d:e8:4c:c0:b7:ee:f7:
56:5d:2f:5c:6f:fa:a2:8b:67:55:d8:dd:ea:86:a8:d3:c4:c8:
73:96:b4:52:7a:5e:4c:1d:5f:1f:cf:a2:b5:1e:53:e0:70:9d:
37:44:61:06:04:08:e2:9c:fc:09:7b:f3:dd:1e:a2:88:d5:07:
6e:15:f5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 07:33:57 2026 by rpki-client