Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/havRenuAc3sWaFEp_ebH2dbYCIM.roa
File: havRenuAc3sWaFEp_ebH2dbYCIM.roa (raw, json)
Hash identifier: 3BZzhi4aYFSabiKQhAbLpfZdvk/co2C3Nc0BqHQrAGU=
Subject key identifier: 85:AB:D1:7A:7B:80:73:7B:16:68:51:29:FD:E6:C7:D9:D6:D8:08:83
Certificate issuer: /CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Certificate serial: 019F23692EF9F7757F6E299F4A53DDE1D906
Authority key identifier: B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/havRenuAc3sWaFEp_ebH2dbYCIM.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204639
IP address blocks: 185.44.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2e:f9:f7:75:7f:6e:29:9f:4a:53:dd:e1:d9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85abd17a7b80737b16685129fde6c7d9d6d80883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:c1:57:4e:06:ac:65:fc:83:09:7a:c1:99:
e7:e9:90:96:62:d5:b7:00:03:1b:06:c3:09:1c:ab:
44:e7:c8:4e:e9:3c:b9:57:f3:6f:fe:be:0a:a0:b4:
73:ef:e9:38:85:73:32:16:d9:e4:2d:f1:1b:87:39:
0a:e9:8f:f7:e2:81:4b:e1:8a:98:4a:71:2d:de:24:
a7:48:21:10:46:28:d5:c0:05:05:bd:4d:cf:fd:5d:
87:92:26:d9:7d:c2:3a:bb:30:32:25:d1:5f:26:a3:
2c:c8:85:ab:b8:bd:7e:25:dd:34:f8:ee:c3:2e:2c:
92:fa:e7:0d:5a:be:4b:da:0d:07:ec:87:5f:57:c7:
72:6d:c1:54:11:9c:14:91:b5:bb:71:35:c4:16:a5:
59:e5:15:f6:30:8a:11:61:a5:01:80:51:34:f2:f0:
63:42:28:85:b7:5b:7e:e6:ab:2f:a3:ed:a3:31:32:
97:dd:bb:6b:21:f5:5d:05:e5:29:aa:94:c4:52:69:
39:4e:28:da:c8:e3:9f:63:00:76:5b:86:28:83:0a:
0f:77:68:a4:81:74:07:64:96:9a:b6:49:8b:d7:55:
44:4b:b4:d8:90:79:af:a8:98:3c:c6:82:4b:41:04:
00:41:f5:f4:2e:e1:4a:85:43:de:46:b7:d7:3e:bc:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AB:D1:7A:7B:80:73:7B:16:68:51:29:FD:E6:C7:D9:D6:D8:08:83
X509v3 Authority Key Identifier:
keyid:B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/havRenuAc3sWaFEp_ebH2dbYCIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:8e:4f:15:41:1a:cd:9c:2b:fb:db:db:4e:92:12:b2:3b:3b:
8b:72:16:30:06:f2:39:3d:66:d5:ff:34:a5:e1:b9:47:4a:70:
e3:a8:c9:bf:4c:ce:5b:f5:4d:d8:1f:4a:53:fd:16:4f:b5:d2:
88:75:48:22:6d:e9:b2:25:8a:13:ee:13:32:04:56:6b:70:a0:
02:02:0d:2e:ee:f8:36:7e:db:55:dc:05:65:ef:0c:b2:4f:58:
a6:2c:bb:cf:35:36:8f:f1:35:56:ac:38:19:80:57:1c:47:54:
28:52:fb:0e:fe:d5:39:28:f2:9b:44:53:f6:34:1b:20:25:a9:
24:a6:e7:d8:11:4f:b6:1b:50:a8:af:c0:38:38:c9:8a:7a:55:
48:7b:c4:47:44:9d:73:c7:af:e0:8b:39:0c:4c:9f:1c:81:15:
87:57:b9:3c:05:49:73:01:ca:4d:9d:3c:d6:71:35:bf:f5:20:
6c:14:0a:45:d5:d5:cd:c0:59:8a:b7:0f:62:a4:85:b1:4b:88:
16:e0:b0:06:bf:1d:23:86:ad:b5:c5:ae:95:17:52:63:8c:d5:
60:0d:ad:15:47:34:ed:68:b7:d4:05:ec:cd:08:7c:7f:c5:d5:
e6:ea:cb:1f:1f:4f:34:df:09:34:58:91:0e:0d:2d:3d:42:e2:
66:ac:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:58 2026 by rpki-client