Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/HrgtmuW0yN0hsWEMTA8IRe5Ow-I.roa
File: HrgtmuW0yN0hsWEMTA8IRe5Ow-I.roa (raw, json)
Hash identifier: nkWf0uUkwJsAxVtSv5Gas9B1Em/eu7evo6LbD0YqyuM=
Subject key identifier: 1E:B8:2D:9A:E5:B4:C8:DD:21:B1:61:0C:4C:0F:08:45:EE:4E:C3:E2
Certificate issuer: /CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Certificate serial: 019F23689258EDAA466DF0532E055B831DEB
Authority key identifier: 05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/HrgtmuW0yN0hsWEMTA8IRe5Ow-I.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25264
IP address blocks: 185.105.184.0/22 maxlen: 22
185.105.184.0/24 maxlen: 24
185.105.185.0/24 maxlen: 24
185.105.186.0/24 maxlen: 24
185.105.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:92:58:ed:aa:46:6d:f0:53:2e:05:5b:83:1d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eb82d9ae5b4c8dd21b1610c4c0f0845ee4ec3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:18:2d:3a:da:e6:f9:7b:23:cc:29:91:be:
5f:ea:d7:5b:0e:8b:51:94:b3:7e:c5:8e:77:5d:f8:
04:38:a6:ce:28:f5:07:de:de:95:46:a9:25:d3:d8:
c5:7d:6a:93:5c:5a:fd:f1:5e:b4:24:22:9d:f5:c8:
c4:8c:e7:f7:be:82:95:dc:7f:a3:c6:c8:3c:9f:56:
51:91:3b:ed:6c:6d:4d:c0:9b:eb:9f:8a:dc:b8:6e:
cb:9c:55:a3:b2:6a:12:c6:bb:9d:04:e4:42:99:7f:
67:29:ec:4a:59:e2:ed:af:65:e8:53:58:06:5a:fe:
b7:5b:1c:e9:47:4d:ba:18:cf:1a:ff:9b:6e:ac:c6:
2f:0d:84:15:7e:a4:f8:81:0d:9f:a2:f9:69:d9:63:
1b:43:10:84:9f:96:47:7c:2a:80:de:ce:ec:c2:38:
50:0f:7d:b5:7a:c4:4c:45:d7:9b:35:c5:44:e6:06:
9e:26:41:7e:ed:e7:a5:db:33:ad:61:37:54:cd:20:
60:fa:46:7e:54:6a:92:54:24:81:84:26:5a:a9:ce:
0a:7f:0f:d5:2a:73:bf:c0:8e:f3:34:d4:bd:cc:29:
b5:62:5e:f3:58:32:2f:3e:da:d5:a1:f9:03:6e:06:
17:05:c9:f1:60:a8:01:ee:f0:43:fa:07:85:a5:15:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B8:2D:9A:E5:B4:C8:DD:21:B1:61:0C:4C:0F:08:45:EE:4E:C3:E2
X509v3 Authority Key Identifier:
keyid:05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/HrgtmuW0yN0hsWEMTA8IRe5Ow-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.184.0/22
Signature Algorithm: sha256WithRSAEncryption
33:43:28:a7:c9:1c:f8:16:67:3c:b4:54:3f:a8:96:98:26:3c:
6a:25:4d:06:36:de:94:ae:16:d9:81:8f:02:25:ce:8b:ad:bb:
22:bc:ef:93:ca:fa:51:cf:5f:7f:c9:d0:ad:e7:ee:8f:c2:26:
ea:5e:a7:24:45:38:43:dc:9e:03:f4:ae:fa:a0:cc:c2:76:1b:
3e:af:ac:24:bb:ef:bb:38:1e:33:cb:07:b2:d0:ea:23:3f:29:
a2:cf:4b:85:c0:f9:8e:f6:b3:bd:4f:43:ee:89:47:f2:da:a2:
56:91:df:66:82:21:38:e1:88:df:a5:ca:f1:6e:30:ef:39:79:
e1:00:41:b1:27:db:e6:97:d6:5a:19:8f:bd:48:1c:7a:e7:ba:
67:11:09:dc:a2:0d:9b:e1:44:24:5a:64:54:4c:2f:ef:7c:a3:
0d:86:e9:08:96:2e:2f:3c:2e:db:53:36:15:d8:01:ac:57:f4:
af:ef:7e:8c:29:d3:d4:03:db:93:e6:3d:75:f3:f8:1a:c6:ce:
58:ad:55:7e:d9:db:6c:c4:9b:32:96:8a:6b:ef:73:0a:60:10:
d8:ac:8d:ee:46:a6:dc:07:e2:94:06:16:94:fc:44:e5:dd:e6:
ce:8a:45:21:2f:be:4f:6a:ef:32:12:96:9f:6b:bf:d7:8e:9f:
c7:5e:e3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:35 2026 by rpki-client