Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/hav4SOiZWEQOazclws8GYcRZXS8.roa
File: hav4SOiZWEQOazclws8GYcRZXS8.roa (raw, json)
Hash identifier: f5gwk01sF+nrjQ06Np+FoFcgkwPLzSDEa8pPljiIK2k=
Subject key identifier: 85:AB:F8:48:E8:99:58:44:0E:6B:37:25:C2:CF:06:61:C4:59:5D:2F
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 01A186F1F9EF8DD5E16FE2F14F5F78FD4D6B
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/hav4SOiZWEQOazclws8GYcRZXS8.roa
Signing time: Thu 29 Oct 2026 09:16:07 +0000
ROA not before: Thu 29 Oct 2026 09:16:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197336
IP address blocks: 87.199.144.0/22 maxlen: 22
87.199.145.0/24 maxlen: 24
185.153.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:f1:f9:ef:8d:d5:e1:6f:e2:f1:4f:5f:78:fd:4d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Oct 29 09:16:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85abf848e89958440e6b3725c2cf0661c4595d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:87:c1:a6:dd:ef:1b:6b:bc:25:48:85:36:
18:8f:22:1b:b4:80:32:0a:9a:62:80:84:82:f2:75:
e7:88:d2:1a:68:fc:98:d7:44:1c:5c:04:1c:5e:b8:
94:62:1b:f6:e8:22:45:93:8c:df:9a:04:d4:ba:0a:
8c:11:8b:cb:0d:ae:ee:b8:9b:40:37:3e:bb:e2:92:
82:4f:98:e7:61:c5:af:14:a9:7e:44:03:e4:e1:e5:
9f:79:71:13:ad:ea:bc:7b:39:4b:69:ba:83:0c:fc:
fa:ac:38:e6:2a:1e:e8:24:71:cd:82:f8:3b:24:52:
8c:92:77:43:03:1b:3c:bd:cf:39:e1:38:84:31:0f:
75:1c:b2:cc:22:b4:38:65:d3:64:04:9d:ce:c7:3d:
85:72:1e:56:48:0b:b9:ea:cd:7c:55:46:41:da:ed:
35:73:97:d3:04:f9:3f:cc:5e:d7:63:e0:5b:96:3c:
1d:f1:76:5f:95:9a:56:2b:57:2b:a0:7b:4f:c8:43:
d3:ea:80:20:24:3c:21:ca:f7:87:f6:63:91:e8:8b:
bd:47:1a:cb:fd:a9:1c:47:1f:2d:3e:86:3f:38:87:
05:0b:51:9e:b9:f2:af:cd:8c:05:a3:38:52:fd:ce:
a0:3d:09:04:57:aa:72:66:a2:63:ff:83:27:61:b1:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AB:F8:48:E8:99:58:44:0E:6B:37:25:C2:CF:06:61:C4:59:5D:2F
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/hav4SOiZWEQOazclws8GYcRZXS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.144.0/22
185.153.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:4c:53:d3:e5:c5:7b:2b:fd:db:c0:ce:8c:b5:6a:52:37:d3:
7f:db:57:68:4e:62:d2:d7:4a:77:60:e8:d2:31:56:39:ab:ce:
0c:89:09:9c:c9:3d:62:ce:21:0b:90:ee:a5:e1:36:24:a6:c8:
a8:a5:51:9e:29:17:fd:4a:1b:5f:f8:98:f4:d2:3f:4e:f1:61:
58:4e:f3:b9:6a:e8:79:45:c8:fb:48:de:35:cf:1c:64:33:cb:
e6:7d:72:53:18:d6:ce:16:f7:77:1f:75:43:cf:01:1a:18:9b:
ca:0c:c7:e6:1e:c6:59:d5:7d:d9:2e:62:66:85:48:ba:28:75:
3b:33:61:28:d6:d3:26:df:07:0c:08:01:3d:6d:02:5c:31:0d:
24:ed:61:c3:8b:2b:3c:ca:17:7f:ee:a7:65:21:23:3c:ff:bb:
63:13:46:dc:d8:71:f1:cd:84:4b:cb:34:ee:39:49:45:d7:4e:
a8:e1:3e:e8:bf:f8:e1:87:de:fe:36:96:7c:19:12:0b:dd:2b:
84:c3:b0:59:b1:53:e2:2a:5a:d2:18:4f:33:4f:6f:9b:9d:41:
6a:c5:f9:72:da:b8:55:80:2d:22:cb:aa:8a:25:41:65:4d:e3:
e3:55:50:a9:1e:8c:f2:37:87:23:b3:86:aa:54:3e:f8:52:9d:
36:0e:b5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:16:22 2026 by rpki-client