Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3EwpEyvHJSMye33IKCnz-NtaroU.roa
File: 3EwpEyvHJSMye33IKCnz-NtaroU.roa (raw, json)
Hash identifier: N06TxDYnEf5xLMLlgwblNkXg5n6XZMLyD3Z8ZFfqrcM=
Subject key identifier: DC:4C:29:13:2B:C7:25:23:32:7B:7D:C8:28:29:F3:F8:DB:5A:AE:85
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019DE8F871183A208A8DB6C429599DF1221E
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3EwpEyvHJSMye33IKCnz-NtaroU.roa
Signing time: Sat 02 May 2026 13:54:49 +0000
ROA not before: Sat 02 May 2026 13:54:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34837
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
212.16.64.0/19 maxlen: 19
212.16.64.0/24 maxlen: 24
212.16.65.0/24 maxlen: 24
212.16.66.0/24 maxlen: 24
212.16.67.0/24 maxlen: 24
212.16.68.0/24 maxlen: 24
212.16.69.0/24 maxlen: 24
212.16.75.0/24 maxlen: 24
212.16.76.0/24 maxlen: 24
212.16.82.0/24 maxlen: 24
212.16.83.0/24 maxlen: 24
212.16.88.0/24 maxlen: 24
212.16.90.0/24 maxlen: 24
212.16.91.0/24 maxlen: 24
212.80.0.0/19 maxlen: 19
212.80.1.0/24 maxlen: 24
212.80.3.0/24 maxlen: 24
212.80.5.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
212.80.16.0/24 maxlen: 24
212.80.28.0/24 maxlen: 24
212.80.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e8:f8:71:18:3a:20:8a:8d:b6:c4:29:59:9d:f1:22:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 2 13:54:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc4c29132bc72523327b7dc82829f3f8db5aae85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:4b:59:2e:63:4c:cc:c2:12:3b:7f:4a:41:
b8:e4:d8:81:1e:85:9b:f4:4e:a2:1a:43:4a:b2:66:
c1:31:27:6a:64:a0:f2:d4:08:30:7f:2c:85:89:90:
e1:73:40:be:c7:9d:17:79:a4:e1:7a:af:ad:8c:36:
1d:5d:ce:72:4f:54:69:c8:6e:71:1b:fa:9b:5f:78:
b6:f8:b5:34:67:b2:5e:f7:78:74:34:c1:ba:4a:61:
32:8c:2f:d4:19:7c:1b:93:f8:55:14:c4:32:1b:a9:
c3:46:c3:9d:0f:4e:4f:d1:79:28:6e:9b:f4:d5:0d:
a8:f0:e6:cb:b5:7d:8b:16:80:ae:e2:03:78:6c:04:
cf:81:2a:19:21:08:e4:bc:f6:52:23:0d:f3:66:89:
31:a6:cd:91:d6:b2:51:05:f6:3f:1a:4d:23:25:50:
80:e1:8a:1d:2a:c0:99:8e:c5:cd:c1:3d:65:b0:fa:
43:27:0b:77:f7:72:61:36:29:c9:35:4e:ae:78:a8:
ec:43:c7:28:50:59:6e:aa:ed:9d:e3:28:a7:c1:85:
4b:28:fc:c4:d7:13:1c:a4:83:c2:99:95:e3:ff:4a:
26:a2:33:c3:72:2a:5f:38:ad:62:e5:e4:97:f6:3c:
68:d4:fa:94:91:f8:fe:b6:f2:17:04:c2:71:41:eb:
1b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4C:29:13:2B:C7:25:23:32:7B:7D:C8:28:29:F3:F8:DB:5A:AE:85
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3EwpEyvHJSMye33IKCnz-NtaroU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
212.16.64.0/19
212.80.0.0/19
Signature Algorithm: sha256WithRSAEncryption
17:2f:ee:5d:4b:5c:86:bc:58:6e:5c:39:a5:e8:65:8f:cd:d8:
93:e5:cd:46:55:b2:00:40:19:ce:4d:e9:5d:c0:73:cc:11:7e:
7f:91:84:64:74:01:5d:52:ec:9a:43:2d:cb:bf:29:78:3d:2a:
a2:e8:54:38:b5:9d:ac:a7:38:70:d8:4e:b9:8b:fe:e5:95:03:
ed:67:55:67:d6:cb:47:78:e2:11:08:78:f2:1f:c7:04:01:69:
d7:95:a9:8a:f7:62:64:8b:d3:da:43:48:f8:d3:40:6e:24:61:
38:19:fb:f6:fc:14:f0:0b:12:7f:eb:33:2f:ea:a0:9b:99:28:
9c:ea:92:89:05:d5:0e:4f:1d:1c:6a:6f:93:ec:42:10:7b:5a:
5a:20:b6:05:2a:29:b3:78:bc:48:b2:39:cf:0e:43:6e:89:ae:
09:58:18:ee:3c:4e:cc:c4:0e:2d:ca:ec:2a:8d:7e:c6:5d:c3:
92:4c:8e:dd:fb:73:1a:10:65:8f:9f:c3:ef:8f:e1:fb:69:1f:
13:0d:bc:a6:f0:b1:1f:26:f8:17:37:17:14:6e:32:48:74:f3:
29:8f:83:af:ad:85:31:fc:96:7e:d3:cc:92:2c:ef:ca:21:ff:
83:af:59:a6:49:32:11:f9:83:c6:8d:cb:93:11:c2:f9:10:c1:
f8:07:f2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:50:30 2026 by rpki-client