Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/KhkEdsTfl27EeiSV96CQToR3TGA.roa
File: KhkEdsTfl27EeiSV96CQToR3TGA.roa (raw, json)
Hash identifier: NbrTm2GZFFNCJh3sohGD4G2ya937iMOXScyaOh6B2vQ=
Subject key identifier: 2A:19:04:76:C4:DF:97:6E:C4:7A:24:95:F7:A0:90:4E:84:77:4C:60
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A1CED44DB22AF07415F39BD6153F916264
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/KhkEdsTfl27EeiSV96CQToR3TGA.roa
Signing time: Thu 12 Nov 2026 08:16:22 +0000
ROA not before: Thu 12 Nov 2026 08:16:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60117
IP address blocks: 83.98.187.0/24 maxlen: 24
85.92.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:d4:4d:b2:2a:f0:74:15:f3:9b:d6:15:3f:91:62:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Nov 12 08:16:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a190476c4df976ec47a2495f7a0904e84774c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:3c:ec:ce:91:2c:94:4a:ad:9c:b7:a8:59:
24:7e:a7:fa:94:23:64:57:26:5b:80:16:ad:14:34:
db:59:ef:af:d6:35:85:46:9c:7d:59:ba:bd:ee:2a:
db:30:e4:90:5d:c6:3b:a5:40:73:e9:84:a4:29:22:
06:8b:9f:60:0a:58:1d:70:af:03:06:5c:92:0a:d8:
87:ea:66:09:5b:2f:db:d9:c6:ba:d3:28:e3:ad:80:
b4:2b:75:ff:f5:9c:ee:d5:ed:83:09:66:23:ff:21:
13:c5:7b:48:f0:2f:ff:95:84:a3:fe:85:51:4e:14:
60:37:47:4a:de:0d:fd:b6:37:d6:15:60:fe:90:16:
38:1a:ef:41:0c:e9:b6:47:04:b4:79:f1:b3:b8:b9:
3e:98:f3:07:57:e8:00:f1:3f:9c:5d:5d:d7:00:29:
44:c6:e4:55:84:3c:b0:d5:17:94:08:cc:d3:c3:53:
09:ee:4e:1b:53:4c:4a:6d:66:03:fa:7b:53:0f:30:
b0:9e:a0:a8:8f:6c:54:fa:4e:60:5a:7c:1e:fe:37:
07:1d:4f:2f:b1:e2:d2:53:a3:33:b0:26:71:c3:b4:
6d:5d:8c:c4:c0:38:18:f7:05:e2:7e:e0:e3:51:5a:
b5:6f:ca:9f:0d:f2:ab:b7:db:cc:15:90:83:8f:86:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:19:04:76:C4:DF:97:6E:C4:7A:24:95:F7:A0:90:4E:84:77:4C:60
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/KhkEdsTfl27EeiSV96CQToR3TGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.187.0/24
85.92.133.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5c:90:bb:9c:c6:b4:32:f8:38:3e:8f:fe:31:e6:6a:21:10:
7b:04:24:5b:53:07:dd:5f:e1:55:6c:aa:42:d9:20:2b:5b:41:
21:00:5e:27:bc:66:a9:12:dc:12:73:fb:c5:5a:d2:56:d0:9d:
0e:37:20:f0:49:08:e0:0f:e2:c5:6e:87:cb:dc:d5:81:57:17:
cb:9d:42:2e:ad:01:27:df:a0:0a:79:d5:05:2a:71:e3:ca:2c:
88:b9:58:27:78:f2:83:17:ff:38:69:8a:e7:9e:0f:6e:f8:7c:
b9:7e:9e:e5:ac:33:43:c9:1f:ae:05:69:00:9a:98:6e:b3:fc:
65:aa:e1:56:47:a3:c6:07:c1:3c:fa:2d:e2:e0:82:55:0d:e2:
d4:a5:c5:94:ed:d4:a1:26:f7:df:49:d8:8a:8a:54:38:0f:4f:
52:52:fb:9a:69:91:8d:9f:32:67:2b:a3:8b:55:9e:7e:c8:07:
7c:d9:e1:4b:c2:fe:70:1e:18:f4:55:53:25:ec:cd:32:e7:c9:
b8:42:74:25:f4:f6:2b:d5:4f:25:15:bc:a8:06:0e:ec:b7:f6:
6c:7a:f7:45:f0:cf:2f:4f:6a:d0:21:24:b9:d4:45:3b:3b:9a:
5f:2f:21:ac:b0:b0:de:ae:e7:74:2e:e2:e2:ec:8f:d9:9e:89:
02:8f:51:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaHO1E2yKvB0FfOb1hU/kWJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYxMTEyMDgxNjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTE5MDQ3NmM0ZGY5NzZlYzQ3YTI0OTVmN2EwOTA0ZTg0Nzc0YzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj887M6RLJRKrZy3qFkkfqf6lCNk
VyZbgBatFDTbWe+v1jWFRpx9Wbq97irbMOSQXcY7pUBz6YSkKSIGi59gClgdcK8D
BlySCtiH6mYJWy/b2ca60yjjrYC0K3X/9Zzu1e2DCWYj/yETxXtI8C//lYSj/oVR
ThRgN0dK3g39tjfWFWD+kBY4Gu9BDOm2RwS0efGzuLk+mPMHV+gA8T+cXV3XAClE
xuRVhDyw1ReUCMzTw1MJ7k4bU0xKbWYD+ntTDzCwnqCoj2xU+k5gWnwe/jcHHU8v
seLSU6MzsCZxw7RtXYzEwDgY9wXifuDjUVq1b8qfDfKrt9vMFZCDj4aJSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCoZBHbE35duxHoklfegkE6Ed0xgMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvS2hrRWRzVGZsMjdFZWlTVjk2Q1FUb1IzVEdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU2K7AwQA
VVyFMA0GCSqGSIb3DQEBCwUAA4IBAQA9XJC7nMa0Mvg4Po/+MeZqIRB7BCRbUwfd
X+FVbKpC2SArW0EhAF4nvGapEtwSc/vFWtJW0J0ONyDwSQjgD+LFbofL3NWBVxfL
nUIurQEn36AKedUFKnHjyiyIuVgnePKDF/84aYrnng9u+Hy5fp7lrDNDyR+uBWkA
mphus/xlquFWR6PGB8E8+i3i4IJVDeLUpcWU7dShJvffSdiKilQ4D09SUvuaaZGN
nzJnK6OLVZ5+yAd82eFLwv5wHhj0VVMl7M0y58m4QnQl9PYr1U8lFbyoBg7st/Zs
evdF8M8vT2rQISS51EU7O5pfLyGssLDerud0LuLi7I/ZnokCj1G6
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:12:38 2026 by rpki-client