Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kuEgitChSKhk69zg6ZEB6_E_n_8.roa
File: kuEgitChSKhk69zg6ZEB6_E_n_8.roa (raw, json)
Hash identifier: srJg7sBmmRFnMLZwC7A6kSic/qDcIkMeSbiqHvhEP5A=
Subject key identifier: 92:E1:20:8A:D0:A1:48:A8:64:EB:DC:E0:E9:91:01:EB:F1:3F:9F:FF
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A1B133DF322AD1240334620FD7E3C243E3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kuEgitChSKhk69zg6ZEB6_E_n_8.roa
Signing time: Fri 06 Nov 2026 14:12:09 +0000
ROA not before: Fri 06 Nov 2026 14:12:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198377
IP address blocks: 87.229.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:33:df:32:2a:d1:24:03:34:62:0f:d7:e3:c2:43:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Nov 6 14:12:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92e1208ad0a148a864ebdce0e99101ebf13f9fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:74:38:d1:47:4c:6e:7b:9d:be:8d:8d:d0:
a0:7b:78:b0:a1:73:0c:91:bc:a4:5f:c2:65:f3:c8:
dd:a9:39:ad:75:bd:12:d9:76:4c:8f:e5:9a:c8:35:
07:95:c2:31:d3:05:3b:07:d0:33:c5:a9:6e:c2:04:
7a:a1:b0:43:c8:85:9c:ad:e6:b3:ca:ca:76:75:e3:
c7:0d:d4:e5:f5:3a:d7:e1:27:d5:72:55:35:1a:5c:
bc:de:4c:85:c4:9b:6c:52:83:7e:ac:89:85:71:17:
58:29:16:95:13:38:61:30:b4:d7:40:42:49:c6:5a:
66:12:63:bc:68:fb:d7:d9:bf:a6:8b:41:c7:a7:d8:
a1:7e:31:1c:ff:3c:5c:02:90:93:05:e0:28:80:d4:
f2:05:4b:c7:0d:c1:91:39:8c:9c:72:42:8d:1f:8e:
dd:ec:75:59:5c:19:5d:49:a5:08:6b:29:62:11:4c:
39:44:42:1e:fa:f8:99:5a:a4:82:68:1c:0d:e3:f6:
81:7b:61:d7:91:0a:0a:49:1b:bb:84:2d:f4:80:04:
71:4e:d7:d1:43:7f:bf:54:c7:7c:06:61:4b:4f:ea:
9f:1a:17:11:c9:3c:3a:39:00:96:8f:ce:93:22:19:
22:fb:bc:d9:67:2e:49:c0:00:93:ea:a5:94:2c:8c:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E1:20:8A:D0:A1:48:A8:64:EB:DC:E0:E9:91:01:EB:F1:3F:9F:FF
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kuEgitChSKhk69zg6ZEB6_E_n_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.97.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f2:fc:56:a9:35:0c:48:16:78:c3:5a:0f:ef:91:69:7f:3c:
2f:64:23:71:dc:48:38:2c:00:62:4e:e2:78:8e:c7:0c:66:bb:
67:70:29:17:4c:06:a8:28:97:89:8e:4c:01:a4:24:64:50:7c:
54:f0:d9:ed:02:92:27:96:8f:3d:db:47:45:16:df:83:67:fe:
b6:f0:52:9f:1c:e1:ef:9b:f4:bf:c9:76:8b:38:a8:85:ff:24:
3d:1d:13:18:86:22:4c:b4:11:3a:66:e8:48:86:7e:7a:4d:3a:
d6:93:0b:c4:f9:d3:1a:11:cd:8f:09:eb:70:b1:cd:97:7e:da:
cc:78:27:32:0a:dd:70:89:ef:69:be:d7:ca:8b:e6:32:2a:5f:
a6:b1:17:1b:69:43:c9:2b:7e:68:e5:09:9d:8e:35:12:70:46:
c4:47:11:f7:61:17:a2:49:36:2f:6a:eb:d8:5d:5e:63:bc:9e:
59:cd:b1:e9:f4:28:90:08:7f:96:68:ea:1d:e7:e4:2c:93:be:
c2:60:9f:a7:c6:0a:10:76:9c:2f:98:ef:6c:38:0c:65:4f:ee:
a4:67:f3:1d:21:74:4f:fe:87:98:e2:d5:10:f5:a2:b3:25:5f:
db:ea:bc:be:56:51:c3:9f:65:0f:53:a0:97:73:a1:90:46:74:
50:25:ad:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGxM98yKtEkAzRiD9fjwkPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYxMTA2MTQxMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmUxMjA4YWQwYTE0OGE4NjRlYmRjZTBlOTkxMDFlYmYxM2Y5ZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8J0ONFHTG57nb6NjdCge3iwoXMM
kbykX8Jl88jdqTmtdb0S2XZMj+WayDUHlcIx0wU7B9AzxaluwgR6obBDyIWcreaz
ysp2dePHDdTl9TrX4SfVclU1Gly83kyFxJtsUoN+rImFcRdYKRaVEzhhMLTXQEJJ
xlpmEmO8aPvX2b+mi0HHp9ihfjEc/zxcApCTBeAogNTyBUvHDcGROYycckKNH47d
7HVZXBldSaUIayliEUw5REIe+viZWqSCaBwN4/aBe2HXkQoKSRu7hC30gARxTtfR
Q3+/VMd8BmFLT+qfGhcRyTw6OQCWj86TIhki+7zZZy5JwACT6qWULIwR8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLhIIrQoUioZOvc4OmRAevxP5//MB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEva3VFZ2l0Q2hTS2hrNjl6ZzZaRUI2X0Vfbl84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VhMA0G
CSqGSIb3DQEBCwUAA4IBAQCB8vxWqTUMSBZ4w1oP75FpfzwvZCNx3Eg4LABiTuJ4
jscMZrtncCkXTAaoKJeJjkwBpCRkUHxU8NntApInlo8920dFFt+DZ/628FKfHOHv
m/S/yXaLOKiF/yQ9HRMYhiJMtBE6ZuhIhn56TTrWkwvE+dMaEc2PCetwsc2XftrM
eCcyCt1wie9pvtfKi+YyKl+msRcbaUPJK35o5QmdjjUScEbERxH3YReiSTYvauvY
XV5jvJ5ZzbHp9CiQCH+WaOod5+Qsk77CYJ+nxgoQdpwvmO9sOAxlT+6kZ/MdIXRP
/oeY4tUQ9aKzJV/b6ry+VlHDn2UPU6CXc6GQRnRQJa0t
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:58 2026 by rpki-client