Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ENW-zt_XOq72TUtcJz3AOjtHm38.roa
File: ENW-zt_XOq72TUtcJz3AOjtHm38.roa (raw, json)
Hash identifier: zsdi1ZIA59lGBKG2MSkftLbtRQ9yicDr9Hyo4DLVavw=
Subject key identifier: 10:D5:BE:CE:DF:D7:3A:AE:F6:4D:4B:5C:27:3D:C0:3A:3B:47:9B:7F
Certificate issuer: /CN=c9cc5fc8e701543763acf2cc3bc08f32463fa28c
Certificate serial: 01A10C44C70998B61A050268D94B3B62B803
Authority key identifier: C9:CC:5F:C8:E7:01:54:37:63:AC:F2:CC:3B:C0:8F:32:46:3F:A2:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycxfyOcBVDdjrPLMO8CPMkY_oow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ENW-zt_XOq72TUtcJz3AOjtHm38.roa
Signing time: Mon 05 Oct 2026 13:33:16 +0000
ROA not before: Mon 05 Oct 2026 13:33:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 193.202.112.0/24 maxlen: 24
193.202.114.0/24 maxlen: 24
193.203.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ycxfyOcBVDdjrPLMO8CPMkY_oow.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ycxfyOcBVDdjrPLMO8CPMkY_oow.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycxfyOcBVDdjrPLMO8CPMkY_oow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:44:c7:09:98:b6:1a:05:02:68:d9:4b:3b:62:b8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cc5fc8e701543763acf2cc3bc08f32463fa28c
Validity
Not Before: Oct 5 13:33:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10d5becedfd73aaef64d4b5c273dc03a3b479b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:73:52:d5:3f:3f:9b:d4:23:b6:05:43:16:f4:
87:6a:fa:0f:80:10:1f:0d:e2:ab:ee:12:bd:f9:b6:
4e:34:e2:88:2c:f5:ac:8a:dc:a0:b7:44:2a:68:89:
68:d8:f0:30:b7:02:3c:a8:11:37:bc:a9:56:1d:d6:
24:cb:56:01:fd:3a:4e:22:6d:b1:9d:db:69:60:9a:
ab:bc:d4:b1:cd:26:c4:35:5c:01:46:19:95:aa:42:
3c:b9:72:43:41:85:f4:72:9c:d6:2a:a3:90:3c:2e:
42:8a:89:ef:5a:0e:66:3b:f9:87:ac:7c:e1:00:80:
f9:0c:b4:9c:3f:ad:b6:b3:9d:cc:dd:f5:34:38:dc:
f0:ea:2d:f8:89:cf:35:39:18:34:38:9c:52:88:8b:
e0:c9:46:f8:ba:23:f6:11:9d:ad:d7:46:ef:95:e4:
f0:86:49:49:66:3b:e2:64:98:21:3e:b1:d0:b1:ca:
31:1d:ce:cc:e1:bd:0d:a7:db:91:ac:2a:64:8e:e7:
4a:90:ee:55:f0:55:61:e0:f0:a5:c4:68:ad:1b:66:
bb:7e:2c:dc:52:4f:b0:cf:be:26:b5:42:14:81:6e:
c3:ab:71:3f:e5:e0:d4:3f:97:90:f4:df:9e:6b:29:
d0:78:30:b3:dd:b9:44:be:ce:e1:7f:57:53:10:9e:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D5:BE:CE:DF:D7:3A:AE:F6:4D:4B:5C:27:3D:C0:3A:3B:47:9B:7F
X509v3 Authority Key Identifier:
keyid:C9:CC:5F:C8:E7:01:54:37:63:AC:F2:CC:3B:C0:8F:32:46:3F:A2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycxfyOcBVDdjrPLMO8CPMkY_oow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ENW-zt_XOq72TUtcJz3AOjtHm38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ycxfyOcBVDdjrPLMO8CPMkY_oow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.112.0/24
193.202.114.0/24
193.203.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d3:80:cf:dd:d2:eb:21:ef:24:50:e0:f9:26:7e:96:66:2d:
9e:11:b8:3d:29:5d:37:90:99:e2:e5:34:50:5b:a2:b0:c2:cc:
03:fe:02:e0:5c:65:12:1f:0b:67:46:11:c4:48:82:be:6a:a7:
f5:a9:08:40:51:ad:11:3b:af:dd:b9:fe:01:d1:70:10:d6:5c:
56:7f:20:cc:4f:d6:d8:20:50:3e:9c:2e:50:a6:d6:15:7f:2a:
e5:28:f5:7c:79:b0:6d:d2:fc:fd:17:d0:d5:c9:83:76:f3:c8:
ad:02:2c:1d:b6:5b:46:74:c4:6d:80:1e:ba:e8:1a:32:5c:aa:
31:54:8f:0d:c4:43:a8:1b:07:6b:48:1d:3d:e9:8f:f5:47:04:
75:16:ff:dc:3c:1a:29:2a:a5:92:6d:c4:c9:82:b1:7c:cb:71:
7e:50:61:86:de:da:08:f1:85:46:14:b4:1c:d8:5d:f1:69:4b:
0f:90:ac:03:05:73:35:5e:1c:22:5d:77:a4:36:6b:53:d4:2f:
4d:04:04:4b:ca:5f:5d:c0:8e:72:a0:8a:26:19:3e:3c:30:18:
83:42:d3:dd:b4:ab:c4:d1:38:1f:42:fa:e1:a7:19:47:60:1f:
23:15:95:c7:24:e7:34:7c:a5:e6:62:ff:c9:06:93:08:b9:49:
1d:02:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:57:35 2026 by rpki-client