Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nENdDu6H1LF5KALWcqHE2bIFCLU.roa
File: nENdDu6H1LF5KALWcqHE2bIFCLU.roa (raw, json)
Hash identifier: rsVqrR4nP/nNYD/1cfhr8gYT+Lvx50XF2VJ5QV/BQEo=
Subject key identifier: 9C:43:5D:0E:EE:87:D4:B1:79:28:02:D6:72:A1:C4:D9:B2:05:08:B5
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019E3068D50C48C09CCB3A8FA675B9638202
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nENdDu6H1LF5KALWcqHE2bIFCLU.roa
Signing time: Sat 16 May 2026 10:50:37 +0000
ROA not before: Sat 16 May 2026 10:50:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213732
IP address blocks: 46.38.146.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
212.80.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:68:d5:0c:48:c0:9c:cb:3a:8f:a6:75:b9:63:82:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 16 10:50:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c435d0eee87d4b1792802d672a1c4d9b20508b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:04:a3:77:30:6c:f4:eb:7b:e3:40:9a:77:
03:b2:84:1b:e6:6f:3d:c8:3b:41:6c:4b:8c:84:3a:
9e:46:78:69:d0:d2:55:8c:f1:f0:b0:27:ee:ba:5f:
fc:73:3b:a2:41:31:e1:10:94:e2:47:b3:d8:89:bb:
aa:85:b5:ab:be:a2:99:77:c6:70:b7:30:27:93:3b:
53:a7:e6:c7:ed:74:aa:c6:5f:6e:93:2b:21:5b:12:
79:7e:71:4a:24:6e:e8:41:f5:8e:0c:a7:3b:c0:42:
e1:a1:69:08:e0:3f:80:b8:dc:e9:f9:7c:27:96:bd:
2b:9c:d7:9e:b7:a2:78:57:3e:9d:76:d3:d9:c7:13:
de:2e:60:7c:47:2f:f4:96:99:9c:46:e8:ce:ce:be:
25:46:e3:96:cd:27:93:6b:d8:7c:96:f7:42:30:11:
36:78:bd:e9:e2:cc:e6:29:29:55:c7:0d:43:ee:ba:
2b:ce:57:12:fe:4a:dd:23:54:a9:58:d5:60:15:11:
8a:93:f5:67:5b:cf:76:fd:30:9d:46:16:d5:42:7d:
83:0c:66:13:9d:43:fc:50:70:17:0d:f2:7b:e9:69:
fe:19:20:00:03:49:35:35:ee:b0:0b:d0:50:9e:7f:
75:7e:b9:e4:b6:f2:f0:84:7a:0d:40:5d:af:c2:30:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:43:5D:0E:EE:87:D4:B1:79:28:02:D6:72:A1:C4:D9:B2:05:08:B5
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/nENdDu6H1LF5KALWcqHE2bIFCLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.146.0/24
185.29.223.0/24
212.80.29.0/24
Signature Algorithm: sha256WithRSAEncryption
57:25:19:73:f6:8d:f6:11:d4:fd:88:11:7f:73:74:57:16:47:
c0:12:3c:e0:a5:ac:63:aa:9d:50:46:26:e5:cb:dd:6b:8d:3b:
d7:11:53:ed:e6:a5:43:de:b1:bd:41:ed:7a:7c:d7:97:54:44:
64:0d:e6:af:d9:dd:35:b6:4c:2f:0e:25:b6:d9:21:31:a9:28:
b1:14:9e:cc:a3:cf:b8:39:93:03:c4:e7:e7:13:e6:39:dd:d6:
96:84:22:fc:3b:70:35:15:71:90:95:0f:56:09:e1:ee:4a:2b:
9f:4b:69:83:db:38:e2:6d:b9:60:5c:dd:26:ea:65:46:d6:b6:
78:c0:67:e6:3c:98:fe:ea:5c:4f:6d:97:07:59:4e:71:31:70:
be:62:37:99:c5:21:9c:32:3c:56:34:8e:37:12:51:19:e1:2c:
0d:a3:d9:59:f1:da:b7:e7:90:ab:9c:25:ae:35:d4:f7:83:ed:
01:81:4e:70:52:14:31:75:ab:27:b8:c5:83:fc:50:e2:c8:e5:
4b:6c:6b:3a:09:9f:e1:60:e9:0e:d8:ca:45:70:c7:96:ea:b8:
75:81:21:b3:b8:82:af:b0:b0:86:21:55:9c:49:e6:79:80:19:
0c:cf:99:16:95:a4:01:3c:b6:5c:b2:e7:3a:f8:d6:80:a0:60:
e2:7a:16:4f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ4waNUMSMCcyzqPpnW5Y4ICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwNTE2MTA1MDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzQzNWQwZWVlODdkNGIxNzkyODAyZDY3MmExYzRkOWIyMDUwOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBMEo3cwbPTre+NAmncDsoQb5m89
yDtBbEuMhDqeRnhp0NJVjPHwsCfuul/8czuiQTHhEJTiR7PYibuqhbWrvqKZd8Zw
tzAnkztTp+bH7XSqxl9ukyshWxJ5fnFKJG7oQfWODKc7wELhoWkI4D+AuNzp+Xwn
lr0rnNeet6J4Vz6ddtPZxxPeLmB8Ry/0lpmcRujOzr4lRuOWzSeTa9h8lvdCMBE2
eL3p4szmKSlVxw1D7rorzlcS/krdI1SpWNVgFRGKk/VnW892/TCdRhbVQn2DDGYT
nUP8UHAXDfJ76Wn+GSAAA0k1Ne6wC9BQnn91frnktvLwhHoNQF2vwjAH8wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJxDXQ7uh9SxeSgC1nKhxNmyBQi1MB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvbkVOZER1NkgxTEY1S0FMV2NxSEUyYklGQ0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiaSAwQA
uR3fAwQA1FAdMA0GCSqGSIb3DQEBCwUAA4IBAQBXJRlz9o32EdT9iBF/c3RXFkfA
Ejzgpaxjqp1QRibly91rjTvXEVPt5qVD3rG9Qe16fNeXVERkDeav2d01tkwvDiW2
2SExqSixFJ7Mo8+4OZMDxOfnE+Y53daWhCL8O3A1FXGQlQ9WCeHuSiufS2mD2zji
bblgXN0m6mVG1rZ4wGfmPJj+6lxPbZcHWU5xMXC+YjeZxSGcMjxWNI43ElEZ4SwN
o9lZ8dq355CrnCWuNdT3g+0BgU5wUhQxdasnuMWD/FDiyOVLbGs6CZ/hYOkO2MpF
cMeW6rh1gSGzuIKvsLCGIVWcSeZ5gBkMz5kWlaQBPLZcsuc6+NaAoGDiehZP
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:07 2026 by rpki-client