Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/HNkiKtIomNoYZ41hjRiwhD40-iE.roa
File: HNkiKtIomNoYZ41hjRiwhD40-iE.roa (raw, json)
Hash identifier: 7gzZ4thPtC/HiasIMZqtWoVWvXNMp0vHFfmmHuAr/UY=
Subject key identifier: 1C:D9:22:2A:D2:28:98:DA:18:67:8D:61:8D:18:B0:84:3E:34:FA:21
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 019FCE7C874F4EB0A06944D18E824C757FF4
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/HNkiKtIomNoYZ41hjRiwhD40-iE.roa
Signing time: Tue 04 Aug 2026 20:34:55 +0000
ROA not before: Tue 04 Aug 2026 20:34:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199795
IP address blocks: 185.45.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:7c:87:4f:4e:b0:a0:69:44:d1:8e:82:4c:75:7f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Aug 4 20:34:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cd9222ad22898da18678d618d18b0843e34fa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:79:00:38:09:4e:a9:f5:5b:4c:4b:f6:14:dd:
fc:4a:59:b0:74:15:f0:71:23:0c:d1:78:47:d6:a2:
d2:34:02:21:9e:29:25:6f:8b:09:72:bc:07:43:b3:
cc:68:29:fd:ba:37:04:5d:9c:6d:20:1c:a8:98:44:
b6:b3:79:8b:bf:63:85:e4:fa:4b:c1:d6:2e:61:10:
ea:b4:b2:90:05:20:26:3b:6e:72:06:0f:83:b9:60:
2f:96:70:e8:3e:ae:0a:59:06:3a:5f:26:68:d6:90:
21:45:22:42:37:05:fb:c7:ac:aa:f1:a0:4a:f8:56:
1b:9a:65:ca:a3:00:6e:a1:32:ac:18:6e:f8:88:0b:
09:84:b0:77:18:ca:2e:67:5b:11:f2:aa:6b:ec:e7:
95:d9:85:36:d1:25:10:28:ae:a3:fa:b6:de:f5:c5:
9b:d1:0d:90:03:5f:84:7b:40:99:54:fa:da:66:45:
cb:c2:04:f4:bc:68:b6:75:83:d2:a3:b1:45:51:80:
25:bf:44:57:1c:73:5d:fd:a9:79:00:3f:ec:91:c5:
48:4b:7f:54:9d:58:46:ab:00:fa:4b:fb:47:dc:69:
ae:6b:ad:24:a1:f8:34:10:92:1c:dd:95:10:85:6c:
31:0a:97:60:40:cf:71:c5:7b:5d:13:13:b2:01:d6:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D9:22:2A:D2:28:98:DA:18:67:8D:61:8D:18:B0:84:3E:34:FA:21
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/HNkiKtIomNoYZ41hjRiwhD40-iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.184.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:b6:2a:82:0b:e1:14:27:ce:6a:73:a2:21:33:f6:63:93:39:
13:c6:62:43:3d:85:26:dd:ed:cf:2d:ed:79:b0:e9:7e:0f:0f:
5d:dc:21:15:b9:f6:0d:d6:15:ad:2d:27:03:f5:89:3d:91:af:
c1:ff:88:51:b6:f1:55:0c:cb:41:ff:12:70:2b:83:0a:22:e5:
b3:16:3c:7c:cc:90:6e:05:bd:db:b2:80:c0:31:4b:c0:07:dc:
1f:a1:f2:3d:6b:6e:9e:22:76:86:5e:c5:05:d3:4d:0b:63:a5:
7d:d2:13:a1:e7:dd:42:a1:59:2c:30:d6:6c:b2:2d:a7:bc:95:
a2:85:2c:52:99:16:84:69:2e:47:d5:61:f5:82:3f:dc:5d:7f:
99:f6:97:41:f0:6f:28:53:45:c8:9c:45:0f:7d:2c:6a:f3:2d:
ef:8c:a2:6b:db:f4:94:6c:8e:ff:72:0f:78:a1:0d:b5:14:65:
69:c3:a8:98:00:b6:ec:d4:cb:19:14:49:d5:1d:5b:ad:d8:2f:
ff:18:f1:52:b4:eb:87:83:78:bf:2b:52:35:bd:f0:86:47:15:
34:af:df:b8:c5:b1:59:30:9e:4b:4f:76:d7:60:5c:01:90:08:
6c:92:b8:ac:19:9f:57:dd:52:74:dc:b4:80:f4:62:6b:b4:e1:
9f:fe:67:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/OfIdPTrCgaUTRjoJMdX/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDE5ZmRhZTljNTNkOGQyOGIxZTQxY2E5MTM5YzMzNTU2
YmE2MjUwHhcNMjYwODA0MjAzNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2Q5MjIyYWQyMjg5OGRhMTg2NzhkNjE4ZDE4YjA4NDNlMzRmYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/nkAOAlOqfVbTEv2FN38SlmwdBXw
cSMM0XhH1qLSNAIhniklb4sJcrwHQ7PMaCn9ujcEXZxtIByomES2s3mLv2OF5PpL
wdYuYRDqtLKQBSAmO25yBg+DuWAvlnDoPq4KWQY6XyZo1pAhRSJCNwX7x6yq8aBK
+FYbmmXKowBuoTKsGG74iAsJhLB3GMouZ1sR8qpr7OeV2YU20SUQKK6j+rbe9cWb
0Q2QA1+Ee0CZVPraZkXLwgT0vGi2dYPSo7FFUYAlv0RXHHNd/al5AD/skcVIS39U
nVhGqwD6S/tH3Gmua60kofg0EJIc3ZUQhWwxCpdgQM9xxXtdExOyAdZtXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBzZIirSKJjaGGeNYY0YsIQ+NPohMB8GA1UdIwQY
MBaAFBHRn9rpxT2NKLHkHKkTnDNVa6YlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUt
MWNjNWZkMjU0NGU5LzEvSE5raUt0SW9tTm9ZWjQxaGpSaXdoRDQwLWlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUtMWNjNWZkMjU0NGU5
LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuS24MA0G
CSqGSIb3DQEBCwUAA4IBAQBOtiqCC+EUJ85qc6IhM/ZjkzkTxmJDPYUm3e3PLe15
sOl+Dw9d3CEVufYN1hWtLScD9Yk9ka/B/4hRtvFVDMtB/xJwK4MKIuWzFjx8zJBu
Bb3bsoDAMUvAB9wfofI9a26eInaGXsUF000LY6V90hOh591CoVksMNZssi2nvJWi
hSxSmRaEaS5H1WH1gj/cXX+Z9pdB8G8oU0XInEUPfSxq8y3vjKJr2/SUbI7/cg94
oQ21FGVpw6iYALbs1MsZFEnVHVut2C//GPFStOuHg3i/K1I1vfCGRxU0r9+4xbFZ
MJ5LT3bXYFwBkAhskrisGZ9X3VJ03LSA9GJrtOGf/mdn
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:06 2026 by rpki-client