Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/rtgNwpKWEQ9VzPEoGc9ICsTEDGY.roa
File: rtgNwpKWEQ9VzPEoGc9ICsTEDGY.roa (raw, json)
Hash identifier: kSyIl9GbSnFUvQKXxkb/qMKrsJ6GBbvNU0EjtITFE2w=
Subject key identifier: AE:D8:0D:C2:92:96:11:0F:55:CC:F1:28:19:CF:48:0A:C4:C4:0C:66
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 019FFD206A9D1B7547427D21A84DFFDADD3B
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/rtgNwpKWEQ9VzPEoGc9ICsTEDGY.roa
Signing time: Thu 13 Aug 2026 21:56:27 +0000
ROA not before: Thu 13 Aug 2026 21:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3302
IP address blocks: 91.213.197.0/24 maxlen: 24
92.60.67.0/24 maxlen: 24
92.60.68.0/24 maxlen: 24
92.60.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:20:6a:9d:1b:75:47:42:7d:21:a8:4d:ff:da:dd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Aug 13 21:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aed80dc29296110f55ccf12819cf480ac4c40c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:64:56:3f:5d:ff:a1:9a:49:c9:84:9e:d0:
23:14:eb:82:bd:67:75:a2:71:fb:e1:ea:2e:d7:5d:
6e:08:dc:e8:f3:2b:53:1f:ab:25:2a:d6:73:49:0f:
c5:9f:69:e1:46:1b:db:d5:64:e0:08:51:0c:d7:a2:
6f:1c:4e:dc:5b:57:21:ff:66:22:1e:49:c0:86:4d:
37:a0:8c:4a:34:30:93:f8:14:07:ee:8b:16:11:d2:
2e:14:49:62:5a:98:1c:06:80:ab:0c:dd:cb:18:29:
37:f5:ef:b6:d0:37:fa:98:73:35:3d:6e:98:54:f5:
cf:77:9d:4a:23:f5:7c:20:28:12:f7:a1:d7:0a:76:
3e:0b:96:32:37:ba:ee:fb:98:28:21:b6:18:65:05:
16:6c:ed:56:26:de:ee:48:4f:e5:e0:6f:df:4c:21:
74:e4:35:a6:96:2c:b5:a4:b2:61:2c:10:77:f2:ca:
06:f1:e4:ed:07:82:dc:1a:e3:b4:00:28:4b:56:8a:
67:ee:13:36:b0:3d:54:3d:1a:db:c9:84:69:f5:d8:
ee:11:c3:4f:92:08:1c:3a:46:ff:cf:b1:12:37:5e:
8e:55:53:bd:30:07:4c:47:70:13:8e:0f:c4:c0:17:
8f:66:54:63:26:30:59:90:b9:d6:3a:0d:dc:f6:90:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D8:0D:C2:92:96:11:0F:55:CC:F1:28:19:CF:48:0A:C4:C4:0C:66
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/rtgNwpKWEQ9VzPEoGc9ICsTEDGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.197.0/24
92.60.67.0-92.60.68.255
92.60.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:61:ee:2d:29:0e:28:13:b0:ac:fa:03:6d:fa:51:d3:8b:13:
01:4e:88:34:88:95:08:8a:a8:80:b0:d4:b4:03:5f:b2:69:6b:
82:94:90:86:a2:4f:b1:3f:ed:97:08:95:47:45:b9:3a:ea:47:
25:38:de:3a:c0:56:0e:3e:f6:de:cc:0c:0a:c9:0a:d6:5d:64:
0c:f2:df:49:43:6b:df:40:d2:d6:4a:fc:f1:fa:7c:a7:ca:39:
04:c2:6b:64:a6:58:5d:82:1f:71:8c:2e:38:df:a4:ec:65:91:
e6:bf:8d:80:df:87:50:23:90:99:9e:db:cb:00:57:68:5a:a2:
27:96:52:5c:95:48:a0:a2:ba:fb:48:68:e8:a7:9d:ff:5b:94:
ae:a6:55:24:ce:53:33:b9:79:8f:ef:da:5e:08:60:11:82:7d:
55:d5:18:6f:2a:80:0c:82:57:5d:1f:9e:8b:8c:b0:c7:10:ed:
62:79:6d:ce:26:a2:15:15:ca:22:9c:c2:ac:b3:c5:c7:26:e4:
a2:37:5d:5f:42:7c:c7:6f:4e:44:4f:5a:cb:71:d2:c0:2d:83:
89:33:65:dc:d0:34:45:f1:90:28:f6:c2:f7:dc:37:0c:db:cd:
13:f8:b0:20:10:48:f0:df:bb:13:18:c7:b5:fb:26:81:5b:c0:
c2:c3:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 23:09:36 2026 by rpki-client