Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/COHOQ0pTO6y5ZuHuUcu-g0ljx0A.roa
File: COHOQ0pTO6y5ZuHuUcu-g0ljx0A.roa (raw, json)
Hash identifier: 3iSoeAAfCfOb+NUSBX9eLBTd4Tg1kwBpORrV/xahpQk=
Subject key identifier: 08:E1:CE:43:4A:53:3B:AC:B9:66:E1:EE:51:CB:BE:83:49:63:C7:40
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01A0483B2BCF876EC25A3D0C6138B82F0EB7
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/COHOQ0pTO6y5ZuHuUcu-g0ljx0A.roa
Signing time: Fri 28 Aug 2026 11:57:12 +0000
ROA not before: Fri 28 Aug 2026 11:57:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205874
IP address blocks: 82.119.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:3b:2b:cf:87:6e:c2:5a:3d:0c:61:38:b8:2f:0e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Aug 28 11:57:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08e1ce434a533bacb966e1ee51cbbe834963c740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f1:14:9f:54:91:36:c5:5a:9c:b0:f3:3d:2a:
6b:7e:e2:5c:b0:d0:eb:03:c6:68:93:f1:54:47:b1:
95:1b:7a:18:cc:bd:07:46:08:cf:65:35:73:7b:2f:
a9:e2:dc:36:e4:88:85:80:ef:03:03:ef:42:db:ae:
c6:89:15:5c:0e:0f:49:9a:6a:77:f0:fe:2a:39:ce:
88:d2:94:6f:e8:6c:83:fe:81:9b:e5:ac:2a:39:48:
3d:27:7b:44:78:df:ca:24:fe:7f:ad:5f:d8:23:45:
70:0e:6e:bd:c9:68:06:f5:1d:89:6c:92:37:39:14:
82:11:bb:25:c5:a0:bd:de:92:ed:4e:1f:5c:07:cc:
4a:52:00:cb:32:66:5b:a3:6f:e5:61:2f:30:7a:4c:
0a:91:14:8d:e6:b9:5c:66:76:82:d4:c0:d7:6a:b8:
42:69:83:85:4d:13:1a:18:5e:6c:8a:28:e6:a5:14:
f3:2d:ff:23:9c:d8:21:f7:67:e7:bb:75:de:37:53:
2e:90:c0:93:15:55:f8:4e:b2:ca:de:bd:84:6d:fd:
c7:60:cf:8e:2a:50:46:e6:73:58:ab:9f:53:dc:db:
ac:42:5a:8c:46:76:35:a5:78:08:19:c3:2f:d2:6d:
df:e0:6c:52:32:37:36:c7:57:8b:9c:78:c0:a2:a8:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E1:CE:43:4A:53:3B:AC:B9:66:E1:EE:51:CB:BE:83:49:63:C7:40
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/COHOQ0pTO6y5ZuHuUcu-g0ljx0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.95.0/24
Signature Algorithm: sha256WithRSAEncryption
91:4f:c2:2e:15:da:00:02:65:86:c9:19:3f:53:f2:41:d9:77:
82:ad:13:17:4e:dc:40:3b:1c:44:6e:19:98:0c:ff:de:30:db:
a8:f3:c9:20:13:e4:55:7b:36:c7:cc:41:91:51:22:a2:56:b0:
fe:22:98:be:e5:29:5b:d0:11:0e:bb:b1:b4:bf:6b:6d:dd:59:
86:31:c6:a5:cc:2d:85:a6:7c:f7:4c:0f:4c:28:e8:57:e1:0d:
57:c0:37:9d:3e:c8:0f:87:cb:ee:cb:31:3b:f8:b1:d4:3d:cf:
91:94:8a:15:e5:5a:04:01:41:19:00:1b:5a:b6:f9:cb:08:5e:
fd:b5:a5:50:d2:18:a5:b6:25:35:35:62:8d:21:57:0c:3b:f2:
3d:3d:e9:e2:13:59:51:99:17:2f:a7:47:30:e5:9e:0a:1a:4a:
11:e8:7b:75:8d:aa:f6:c1:fa:37:9d:d3:5d:ef:9d:87:1a:ee:
f5:e5:30:ea:a6:fc:62:22:d0:e2:dd:09:46:29:64:8e:b8:62:
34:50:d3:47:ca:d0:57:ec:9a:20:43:52:85:ee:c1:fe:98:09:
bb:11:a3:e6:c2:cd:51:20:50:6b:f3:6f:df:b5:32:0f:af:42:
fd:f8:80:f4:ca:3f:80:7b:f3:c1:ab:5e:39:ca:39:49:2d:a0:
e0:50:5b:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBIOyvPh27CWj0MYTi4Lw63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjYwODI4MTE1NzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGUxY2U0MzRhNTMzYmFjYjk2NmUxZWU1MWNiYmU4MzQ5NjNjNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPEUn1SRNsVanLDzPSprfuJcsNDr
A8Zok/FUR7GVG3oYzL0HRgjPZTVzey+p4tw25IiFgO8DA+9C267GiRVcDg9Jmmp3
8P4qOc6I0pRv6GyD/oGb5awqOUg9J3tEeN/KJP5/rV/YI0VwDm69yWgG9R2JbJI3
ORSCEbslxaC93pLtTh9cB8xKUgDLMmZbo2/lYS8wekwKkRSN5rlcZnaC1MDXarhC
aYOFTRMaGF5siijmpRTzLf8jnNgh92fnu3XeN1MukMCTFVX4TrLK3r2Ebf3HYM+O
KlBG5nNYq59T3NusQlqMRnY1pXgIGcMv0m3f4GxSMjc2x1eLnHjAoqic0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAjhzkNKUzusuWbh7lHLvoNJY8dAMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvQ09IT1EwcFRPNnk1WnVIdVVjdS1nMGxqeDBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUndfMA0G
CSqGSIb3DQEBCwUAA4IBAQCRT8IuFdoAAmWGyRk/U/JB2XeCrRMXTtxAOxxEbhmY
DP/eMNuo88kgE+RVezbHzEGRUSKiVrD+Ipi+5Slb0BEOu7G0v2tt3VmGMcalzC2F
pnz3TA9MKOhX4Q1XwDedPsgPh8vuyzE7+LHUPc+RlIoV5VoEAUEZABtatvnLCF79
taVQ0hiltiU1NWKNIVcMO/I9PeniE1lRmRcvp0cw5Z4KGkoR6Ht1jar2wfo3ndNd
752HGu715TDqpvxiItDi3QlGKWSOuGI0UNNHytBX7JogQ1KF7sH+mAm7EaPmws1R
IFBr82/ftTIPr0L9+ID0yj+Ae/PBq145yjlJLaDgUFtY
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:40:45 2026 by rpki-client