Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nddrSrqkmIh5r3mUP_YPTfRYbw0.roa
File: nddrSrqkmIh5r3mUP_YPTfRYbw0.roa (raw, json)
Hash identifier: klQvae5yvx8v/ktwmNkFOD7L8raFwBKZKmWhNitbanc=
Subject key identifier: 9D:D7:6B:4A:BA:A4:98:88:79:AF:79:94:3F:F6:0F:4D:F4:58:6F:0D
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01A1120BCE2AEE0B501AAF38BFDBC8A117E5
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nddrSrqkmIh5r3mUP_YPTfRYbw0.roa
Signing time: Tue 06 Oct 2026 16:28:45 +0000
ROA not before: Tue 06 Oct 2026 16:28:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3561
IP address blocks: 37.49.144.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
109.203.161.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:0b:ce:2a:ee:0b:50:1a:af:38:bf:db:c8:a1:17:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 6 16:28:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dd76b4abaa4988879af79943ff60f4df4586f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:d6:01:83:95:2f:79:bf:49:0a:b0:b2:df:
ae:83:a4:69:76:cd:8c:6a:a9:ae:73:62:be:5e:95:
02:19:d8:fd:ce:ae:2d:e7:48:00:cc:46:57:40:6a:
89:91:0f:5a:33:26:a7:78:5a:4a:cc:cf:f1:ef:cb:
82:c9:0d:69:6d:79:0b:cb:d2:ea:b5:e4:51:d5:ff:
f1:66:14:35:1a:1d:cc:d4:fe:73:0e:c4:62:69:63:
4c:b4:de:fc:e2:96:15:ba:35:6c:d0:f4:d8:75:55:
0d:e5:57:63:d4:a4:44:ed:d7:e4:fc:14:8b:c9:8c:
89:21:b5:a5:bc:93:41:60:2a:f7:3c:fe:77:3a:1e:
53:90:3f:a7:26:b7:82:16:cf:67:0d:ec:30:15:7d:
05:d5:9b:9c:63:bb:01:e8:a0:0f:c2:9a:38:5f:52:
c7:70:73:68:19:15:62:8f:01:81:0f:e4:5b:e4:04:
8c:85:4b:50:0a:6a:ee:7d:b3:38:14:47:23:74:66:
80:62:27:c4:a3:e0:d8:37:29:43:ae:66:83:3f:31:
08:c6:17:e4:9f:19:01:6c:ff:e4:6e:95:a6:aa:af:
25:a7:57:c9:7d:f4:a7:52:3a:ef:ac:c7:67:e3:f6:
f4:ce:0d:84:20:bc:81:74:7a:7c:58:ed:2f:f9:ec:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:6B:4A:BA:A4:98:88:79:AF:79:94:3F:F6:0F:4D:F4:58:6F:0D
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nddrSrqkmIh5r3mUP_YPTfRYbw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/24
37.49.147.0/24
109.203.161.0/24
109.203.163.0/24
109.203.166.0/24
176.46.129.0-176.46.130.255
176.46.133.0/24
176.46.135.0/24
176.46.137.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3a:87:82:fa:78:33:39:df:cd:15:1b:0e:4d:fa:24:98:11:
01:ee:4b:5c:ee:8e:03:83:01:84:da:d7:8f:5b:23:41:69:70:
38:e6:34:0e:4c:3b:41:11:cd:79:a5:e8:01:33:e0:6c:66:eb:
2a:b0:0c:fb:1b:85:96:42:21:08:5f:74:ed:c7:76:4b:85:76:
21:3e:e5:2c:74:8b:90:6d:36:a6:df:96:40:0b:63:50:cc:ba:
e3:a1:b3:f7:48:b6:96:a1:b4:36:83:a9:62:89:b7:53:d2:c2:
71:d3:36:21:da:08:33:80:fc:f4:2a:1a:6b:33:26:63:72:95:
1e:3d:5e:db:52:8e:39:07:05:2c:95:03:6e:a3:7d:cc:c9:c8:
b8:98:c4:da:74:28:5d:00:60:76:0a:ef:08:fc:e9:94:82:c3:
9f:bb:22:b4:31:64:2e:b7:98:93:d7:77:41:07:9f:ac:58:86:
f3:15:7d:70:aa:d2:69:82:0d:9e:03:fd:76:fd:72:71:3e:e4:
c6:7f:ad:37:60:ee:a0:af:8f:14:35:b9:4e:fc:7b:b9:cb:51:
38:32:27:e0:cb:7e:29:fa:ef:f6:c6:ad:6a:25:05:26:f2:24:
3a:77:b9:8f:99:31:5b:bd:f6:ba:d6:66:5f:f6:5f:b8:8f:81:
ba:0e:ce:27
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAaESC84q7gtQGq84v9vIoRflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjYxMDA2MTYyODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGQ3NmI0YWJhYTQ5ODg4NzlhZjc5OTQzZmY2MGY0ZGY0NTg2ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1vWAYOVL3m/SQqwst+ug6Rpds2M
aqmuc2K+XpUCGdj9zq4t50gAzEZXQGqJkQ9aMyaneFpKzM/x78uCyQ1pbXkLy9Lq
teRR1f/xZhQ1Gh3M1P5zDsRiaWNMtN784pYVujVs0PTYdVUN5Vdj1KRE7dfk/BSL
yYyJIbWlvJNBYCr3PP53Oh5TkD+nJreCFs9nDewwFX0F1ZucY7sB6KAPwpo4X1LH
cHNoGRVijwGBD+Rb5ASMhUtQCmrufbM4FEcjdGaAYifEo+DYNylDrmaDPzEIxhfk
nxkBbP/kbpWmqq8lp1fJffSnUjrvrMdn4/b0zg2EILyBdHp8WO0v+exYvwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFJ3Xa0q6pJiIea95lD/2D030WG8NMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvbmRkclNycWttSWg1cjNtVVBfWVBUZlJZYncwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAJTGQAwQA
JTGTAwQAbcuhAwQAbcujAwQAbcumMAwDBACwLoEDBACwLoIDBACwLoUDBACwLocD
BACwLokwDQYJKoZIhvcNAQELBQADggEBAJA6h4L6eDM5380VGw5N+iSYEQHuS1zu
jgODAYTa149bI0FpcDjmNA5MO0ERzXml6AEz4Gxm6yqwDPsbhZZCIQhfdO3HdkuF
diE+5Sx0i5BtNqbflkALY1DMuuOhs/dItpahtDaDqWKJt1PSwnHTNiHaCDOA/PQq
GmszJmNylR49XttSjjkHBSyVA26jfczJyLiYxNp0KF0AYHYK7wj86ZSCw5+7IrQx
ZC63mJPXd0EHn6xYhvMVfXCq0mmCDZ4D/Xb9cnE+5MZ/rTdg7qCvjxQ1uU78e7nL
UTgyJ+DLfin67/bGrWolBSbyJDp3uY+ZMVu99rrWZl/2X7iPgboOzic=
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:57:09 2026 by rpki-client