Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/hai4X4w5Xpn45AhheGUf7veANBY.roa
File: hai4X4w5Xpn45AhheGUf7veANBY.roa (raw, json)
Hash identifier: DLehSvGujokpN0oWhsjrBVnYPRYUWJQUJXLEVCY7+1c=
Subject key identifier: 85:A8:B8:5F:8C:39:5E:99:F8:E4:08:61:78:65:1F:EE:F7:80:34:16
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 019FCD1EA8B4EB6E635004EE4D3C1C076A01
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/hai4X4w5Xpn45AhheGUf7veANBY.roa
Signing time: Tue 04 Aug 2026 14:12:46 +0000
ROA not before: Tue 04 Aug 2026 14:12:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202991
IP address blocks: 185.148.84.0/22 maxlen: 24
185.178.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:1e:a8:b4:eb:6e:63:50:04:ee:4d:3c:1c:07:6a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Aug 4 14:12:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85a8b85f8c395e99f8e4086178651feef7803416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:93:b0:af:1a:3a:8b:8d:1a:e0:39:82:e6:
d1:e1:34:6e:37:f6:b6:f7:58:a9:2a:19:83:9f:ef:
4f:dd:39:9a:f4:f4:bb:10:dd:0f:3d:09:0c:b4:1e:
c9:c7:f1:a3:08:79:af:bc:6a:18:d3:7c:9e:80:8d:
6f:0d:82:11:29:0b:8e:b7:04:6a:a0:a0:68:62:b9:
39:44:ff:29:e0:05:ca:16:4d:2a:3c:75:d3:2a:a6:
66:9e:eb:ed:0b:36:8f:71:83:74:1d:6d:99:25:56:
1f:da:a1:60:3a:d8:b9:bd:eb:63:d5:2a:23:52:21:
d6:a6:8e:46:6b:3c:b8:29:69:cb:80:1f:15:ed:45:
13:87:15:13:ea:96:e6:94:b5:70:46:fb:01:1a:d0:
75:81:a5:25:8f:d4:4f:63:06:12:01:20:a0:23:98:
9d:48:cd:4a:10:c3:65:28:a4:df:b1:e8:de:93:f2:
9b:a9:30:38:06:a3:bc:0b:b7:7a:1c:31:6e:6c:ec:
f4:92:41:ab:c9:0a:5b:4e:fd:ad:1f:60:fa:af:2d:
62:21:a8:cc:8e:68:d9:11:ae:7b:a6:c0:f7:45:47:
59:b1:ad:ee:8d:4d:8a:ac:3e:7a:0d:6d:7b:3a:65:
19:a6:61:3e:95:4b:f4:7b:b0:57:3f:3b:15:cd:e1:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A8:B8:5F:8C:39:5E:99:F8:E4:08:61:78:65:1F:EE:F7:80:34:16
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/hai4X4w5Xpn45AhheGUf7veANBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.84.0/22
185.178.240.0/22
Signature Algorithm: sha256WithRSAEncryption
10:85:8d:d3:b6:b0:f6:2c:c7:58:8e:2f:eb:9c:2e:56:36:b8:
7f:8a:ff:ab:97:5e:fe:e5:69:c0:3b:ed:b6:d6:98:dd:e8:d7:
80:e2:37:ae:65:71:43:28:89:61:5d:a5:fd:bf:3a:67:81:a2:
a2:ce:8e:73:3a:44:ce:46:d6:63:08:36:28:24:3c:27:47:ad:
5e:94:86:41:06:e3:c4:44:e2:28:bb:e4:60:c5:96:d7:ad:66:
74:fd:e7:16:52:71:03:3c:f4:f1:e6:a6:e9:bd:19:41:fe:b2:
89:4a:d1:23:dc:91:ec:a1:05:65:32:32:00:fb:ff:12:a8:1a:
cb:4e:9b:03:e4:57:4a:10:5a:a3:89:04:ec:b0:76:a3:5a:6a:
d5:d5:c7:38:5b:cd:23:93:55:27:86:d6:f3:f9:8e:86:59:3a:
9d:b2:bb:85:b0:e0:78:64:44:b1:c0:e4:f1:ed:74:34:64:6f:
46:c2:3e:9d:a8:14:ed:86:1b:8a:4a:19:3e:97:4f:e3:ae:a1:
67:a7:77:13:1c:be:4a:db:d6:aa:bc:41:82:9a:13:58:57:10:
b5:a2:99:cf:65:d7:e3:89:2c:2c:cb:90:d2:62:5f:b9:36:b1:
3c:30:e5:82:84:59:d0:3c:07:21:43:20:64:d8:5d:fc:ae:72:
1a:24:8c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:08:12 2026 by rpki-client