Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OHqbyCdDbarwBqNWpWKD6JsYCrk.roa
File: OHqbyCdDbarwBqNWpWKD6JsYCrk.roa (raw, json)
Hash identifier: /qdT8B3RAWwGiiAYAx2wNg49Swk6hXooFpNnlNtvEOM=
Subject key identifier: 38:7A:9B:C8:27:43:6D:AA:F0:06:A3:56:A5:62:83:E8:9B:18:0A:B9
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019DE8F871D53388E7E801F80AF5BE430879
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OHqbyCdDbarwBqNWpWKD6JsYCrk.roa
Signing time: Sat 02 May 2026 13:54:49 +0000
ROA not before: Sat 02 May 2026 13:54:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.136.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.145.0/24 maxlen: 24
46.38.147.0/24 maxlen: 24
46.38.148.0/24 maxlen: 24
46.38.149.0/24 maxlen: 24
46.38.150.0/24 maxlen: 24
46.38.151.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.64.0/24 maxlen: 24
212.16.65.0/24 maxlen: 24
212.16.66.0/24 maxlen: 24
212.16.67.0/24 maxlen: 24
212.16.68.0/24 maxlen: 24
212.16.69.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
212.80.29.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e8:f8:71:d5:33:88:e7:e8:01:f8:0a:f5:be:43:08:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 2 13:54:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=387a9bc827436daaf006a356a56283e89b180ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:e4:c8:7a:55:81:35:fe:40:8e:02:41:15:
fb:87:ca:9a:64:ed:0a:fc:ae:21:a9:15:c5:2f:43:
32:bc:83:d7:67:47:1c:95:7f:bf:f5:de:2c:40:6b:
ee:b6:4f:8e:71:53:e9:62:c1:3f:f4:ba:c3:74:4c:
83:77:e6:85:3b:84:c8:68:f8:2c:dd:bf:e0:ca:c9:
88:3a:4b:1b:7c:c0:22:39:52:37:9b:c4:fd:4f:38:
3d:01:e4:47:a8:e6:7e:fc:fc:be:34:10:da:13:65:
52:20:c3:ea:98:4d:79:ae:9b:25:f1:46:23:e8:b1:
79:42:dc:1c:62:52:c2:04:52:99:c3:08:05:08:93:
66:bd:c3:84:b8:cd:36:1c:8d:da:b6:42:cb:f1:e9:
bf:d8:c8:e1:80:00:44:03:26:82:4b:54:da:0f:da:
85:91:7b:8a:0b:d9:5b:37:b6:ca:39:a9:c6:cf:73:
d5:2f:5e:d4:44:06:35:ed:6d:39:59:6c:ea:67:87:
fa:5c:d5:aa:28:d6:45:44:53:1a:9f:1e:f9:ce:eb:
13:6d:40:ed:cc:06:60:01:55:cb:40:fa:ed:ec:47:
a8:b4:04:b6:70:f9:56:c1:96:56:fe:71:63:d4:e1:
d2:e4:73:bd:cc:5a:5c:fa:0e:b4:2e:d9:2d:d9:d1:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7A:9B:C8:27:43:6D:AA:F0:06:A3:56:A5:62:83:E8:9B:18:0A:B9
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OHqbyCdDbarwBqNWpWKD6JsYCrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.136.0/24
46.38.140.0/24
46.38.145.0/24
46.38.147.0-46.38.151.255
185.24.150.0/24
185.29.220.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
8f:8d:80:fe:01:c8:7b:3a:65:24:db:b6:11:0e:9f:49:34:88:
01:51:76:1d:29:15:c0:8d:c0:64:92:36:45:8b:4a:0f:c2:87:
12:9a:2a:4d:6b:c0:e5:13:73:5f:c2:68:4f:39:82:5d:6b:90:
14:ea:1a:1b:1f:44:00:fb:71:fe:cc:32:ec:40:c4:4c:f8:6f:
db:16:2e:a9:fd:a4:cf:3c:75:8a:44:d5:91:1e:c6:4d:c6:ea:
63:b0:83:f5:e5:d6:83:8d:08:f9:93:e3:b1:3f:51:96:c8:88:
59:7d:b7:a1:6a:f7:b0:29:fc:f0:7c:ec:38:c2:9f:20:b1:90:
83:5e:04:77:56:57:c9:28:c5:13:2b:cd:33:5f:e5:91:99:ef:
a8:41:e0:96:1f:3c:09:74:a1:29:33:00:2f:18:61:61:94:cd:
ef:0b:ef:fe:49:86:11:4b:1a:04:0b:28:03:79:c4:3f:1c:62:
2e:e4:4f:ee:31:e2:f4:05:a0:0c:59:81:84:81:33:3c:44:c1:
17:2f:d0:4c:d5:3a:cd:5c:cb:cf:45:02:ec:be:74:55:3e:38:
0d:bd:f7:86:03:f5:20:40:5a:29:cc:a1:a1:f1:a6:a4:98:88:
c7:f4:30:dd:7a:82:75:09:14:71:ec:9e:3d:e5:e3:d5:68:29:
6d:9c:e5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:13 2026 by rpki-client