Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/CKoKV9SSWeY0CC35RGZW3-Sowvk.roa
File: CKoKV9SSWeY0CC35RGZW3-Sowvk.roa (raw, json)
Hash identifier: CNoybL/dDEh4vogvIRKGBoOMFZRqcXzTkYgL2z5M9bM=
Subject key identifier: 08:AA:0A:57:D4:92:59:E6:34:08:2D:F9:44:66:56:DF:E4:A8:C2:F9
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 019FFD1CC0B98815BC8A90A512A3E0F6058A
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/CKoKV9SSWeY0CC35RGZW3-Sowvk.roa
Signing time: Thu 13 Aug 2026 21:52:27 +0000
ROA not before: Thu 13 Aug 2026 21:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5602
IP address blocks: 91.213.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:1c:c0:b9:88:15:bc:8a:90:a5:12:a3:e0:f6:05:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Aug 13 21:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08aa0a57d49259e634082df9446656dfe4a8c2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7b:d6:78:6e:cb:79:d5:3b:b1:e8:40:e6:13:
37:eb:5a:b2:a3:18:86:d5:c9:31:18:f9:26:47:2e:
18:b2:35:2b:51:e9:4f:12:9e:09:e4:a3:4b:d0:95:
7d:ea:d2:a5:00:03:79:f5:d1:f6:df:b1:c3:0f:f7:
c2:67:d4:be:82:e3:32:22:35:06:43:fe:69:26:9f:
8b:39:89:d2:f5:39:64:50:7e:37:68:b5:2b:90:c6:
7d:96:6d:57:27:2e:06:ba:82:e5:2c:fd:e7:a1:cd:
a7:3b:34:36:14:da:7a:6c:73:ad:51:30:0e:3d:ea:
9b:7b:19:df:30:5a:a2:bd:e8:e4:7e:70:3f:e0:1c:
be:7b:96:f9:41:fe:34:61:68:e6:4e:6f:e9:c4:4b:
09:70:13:63:a8:6d:bd:58:6d:8e:14:ca:f4:d3:f5:
58:d0:cc:5d:54:56:e7:4c:ac:ee:e0:94:c7:d4:97:
58:7b:ab:01:c2:f6:b4:d5:63:8f:78:5c:36:f4:d5:
fc:b8:3a:be:7a:4d:90:fd:64:25:73:c2:33:07:5f:
08:65:72:6a:55:28:96:05:34:f7:fe:d3:dd:02:69:
9d:bd:c4:5f:0b:53:9a:6b:55:b9:32:4d:d6:15:1c:
6a:8c:ad:d1:72:27:12:85:34:59:83:8e:09:4f:be:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AA:0A:57:D4:92:59:E6:34:08:2D:F9:44:66:56:DF:E4:A8:C2:F9
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/CKoKV9SSWeY0CC35RGZW3-Sowvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.197.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ab:b3:97:75:d0:9a:f9:9f:fc:78:05:69:f5:3c:5c:70:f2:
19:d7:d4:eb:a6:c1:69:7a:ac:13:53:9a:07:45:87:6e:87:d5:
c0:ee:0e:40:8b:43:f5:d9:d1:56:15:ed:4f:4a:38:5c:86:7a:
f4:73:25:4c:a5:b8:b7:7c:2b:bf:4f:01:73:21:dc:77:8f:c9:
8e:11:f5:73:d6:dc:81:0e:e7:02:69:a9:ca:fe:55:fc:1f:e3:
d3:0e:75:38:78:02:b1:0c:6d:72:6e:3f:29:87:4f:ab:9f:17:
1a:f8:bf:31:26:7c:78:6c:16:fd:b8:10:4b:7c:37:2d:16:98:
84:22:da:cd:0e:7e:46:07:be:74:d7:0f:28:64:3e:1b:ca:0a:
a3:56:c1:9c:8b:1a:75:e8:e4:c5:6e:53:8f:c5:c5:49:a0:69:
88:32:5e:c5:8d:3e:ce:d1:39:06:11:cb:bb:56:78:d6:22:42:
fb:a1:9e:1a:db:ca:74:cf:50:63:1d:48:b6:fd:c9:b9:d7:0a:
46:2a:70:63:b8:78:89:7a:18:89:f2:22:6a:03:b1:cf:ea:77:
d1:ea:27:55:41:58:ab:d7:8e:f5:de:fb:a2:0a:2e:e3:08:67:
5d:78:44:43:89:cb:b6:1e:14:a7:71:c2:33:e5:c6:b2:e0:33:
7a:14:19:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 23:09:34 2026 by rpki-client