Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mscj-6E7n8b1MYCVyUdVmK0IHaA.roa
File: mscj-6E7n8b1MYCVyUdVmK0IHaA.roa (raw, json)
Hash identifier: aJLe1NZg4U3nvstcwHzOesIQ9qSJmZ23gz7L1YUtqAM=
Subject key identifier: 9A:C7:23:FB:A1:3B:9F:C6:F5:31:80:95:C9:47:55:98:AD:08:1D:A0
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0197ACBF874238B5E002E9D3F92CEA2E0DF8
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mscj-6E7n8b1MYCVyUdVmK0IHaA.roa
Signing time: Thu 26 Jun 2025 14:58:42 +0000
ROA not before: Thu 26 Jun 2025 14:58:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2588
IP address blocks: 46.19.200.0/21 maxlen: 21
80.81.32.0/24 maxlen: 24
80.81.33.0/24 maxlen: 24
80.81.34.0/24 maxlen: 24
80.81.35.0/24 maxlen: 24
80.81.36.0/24 maxlen: 24
80.81.37.0/24 maxlen: 24
80.81.42.0/24 maxlen: 24
80.81.43.0/24 maxlen: 24
80.81.46.0/24 maxlen: 24
80.81.51.0/24 maxlen: 24
80.81.55.0/24 maxlen: 24
80.81.57.0/24 maxlen: 24
80.81.59.0/24 maxlen: 24
80.81.62.0/24 maxlen: 24
83.223.128.0/19 maxlen: 19
83.223.145.0/24 maxlen: 24
83.223.155.0/24 maxlen: 24
85.254.0.0/24 maxlen: 24
85.254.6.0/24 maxlen: 24
85.254.49.0/24 maxlen: 24
85.254.50.0/24 maxlen: 24
85.254.56.0/24 maxlen: 24
85.254.57.0/24 maxlen: 24
85.254.60.0/24 maxlen: 24
85.254.61.0/24 maxlen: 24
85.254.69.0/24 maxlen: 24
85.254.128.0/18 maxlen: 18
85.254.132.0/24 maxlen: 24
85.254.144.0/24 maxlen: 24
85.254.147.0/24 maxlen: 24
85.254.160.0/24 maxlen: 24
85.254.162.0/24 maxlen: 24
85.254.163.0/24 maxlen: 24
85.254.164.0/24 maxlen: 24
85.254.184.0/24 maxlen: 24
85.254.185.0/24 maxlen: 24
85.254.186.0/24 maxlen: 24
85.254.187.0/24 maxlen: 24
91.190.32.0/24 maxlen: 24
91.190.33.0/24 maxlen: 24
91.190.34.0/24 maxlen: 24
91.190.35.0/24 maxlen: 24
91.190.36.0/24 maxlen: 24
91.190.42.0/24 maxlen: 24
91.190.52.0/24 maxlen: 24
91.190.54.0/24 maxlen: 24
91.190.55.0/24 maxlen: 24
91.190.56.0/23 maxlen: 24
91.190.58.0/24 maxlen: 24
91.190.59.0/24 maxlen: 24
91.190.60.0/24 maxlen: 24
94.101.224.0/20 maxlen: 20
109.205.120.0/21 maxlen: 21
109.205.127.0/24 maxlen: 24
159.148.0.0/16 maxlen: 16
159.148.0.0/24 maxlen: 24
159.148.1.0/24 maxlen: 24
159.148.2.0/24 maxlen: 24
159.148.3.0/24 maxlen: 24
159.148.4.0/24 maxlen: 24
159.148.5.0/24 maxlen: 24
159.148.6.0/24 maxlen: 24
159.148.7.0/24 maxlen: 24
159.148.8.0/24 maxlen: 24
159.148.9.0/24 maxlen: 24
159.148.10.0/24 maxlen: 24
159.148.11.0/24 maxlen: 24
159.148.12.0/24 maxlen: 24
159.148.13.0/24 maxlen: 24
159.148.14.0/24 maxlen: 24
159.148.15.0/24 maxlen: 24
159.148.16.0/24 maxlen: 24
159.148.17.0/24 maxlen: 24
159.148.18.0/24 maxlen: 24
159.148.19.0/24 maxlen: 24
159.148.20.0/24 maxlen: 24
159.148.21.0/24 maxlen: 24
159.148.22.0/24 maxlen: 24
159.148.24.0/24 maxlen: 24
159.148.25.0/24 maxlen: 24
159.148.28.0/24 maxlen: 24
159.148.29.0/24 maxlen: 24
159.148.31.0/24 maxlen: 24
159.148.32.0/24 maxlen: 24
159.148.33.0/24 maxlen: 24
159.148.34.0/24 maxlen: 24
159.148.35.0/24 maxlen: 24
159.148.36.0/24 maxlen: 24
159.148.37.0/24 maxlen: 24
159.148.39.0/24 maxlen: 24
159.148.40.0/24 maxlen: 24
159.148.41.0/24 maxlen: 24
159.148.42.0/24 maxlen: 24
159.148.43.0/24 maxlen: 24
159.148.45.0/24 maxlen: 24
159.148.46.0/24 maxlen: 24
159.148.47.0/24 maxlen: 24
159.148.48.0/24 maxlen: 24
159.148.49.0/24 maxlen: 24
159.148.50.0/24 maxlen: 24
159.148.51.0/24 maxlen: 24
159.148.52.0/24 maxlen: 24
159.148.53.0/24 maxlen: 24
159.148.55.0/24 maxlen: 24
159.148.56.0/24 maxlen: 24
159.148.57.0/24 maxlen: 24
159.148.59.0/24 maxlen: 24
159.148.60.0/24 maxlen: 24
159.148.61.0/24 maxlen: 24
159.148.63.0/24 maxlen: 24
159.148.64.0/24 maxlen: 24
159.148.65.0/24 maxlen: 24
159.148.67.0/24 maxlen: 24
159.148.68.0/24 maxlen: 24
159.148.69.0/24 maxlen: 24
159.148.70.0/24 maxlen: 24
159.148.71.0/24 maxlen: 24
159.148.72.0/24 maxlen: 24
159.148.75.0/24 maxlen: 24
159.148.76.0/24 maxlen: 24
159.148.78.0/24 maxlen: 24
159.148.79.0/24 maxlen: 24
159.148.80.0/24 maxlen: 24
159.148.81.0/24 maxlen: 24
159.148.82.0/24 maxlen: 24
159.148.83.0/24 maxlen: 24
159.148.84.0/24 maxlen: 24
159.148.85.0/24 maxlen: 24
159.148.86.0/24 maxlen: 24
159.148.87.0/24 maxlen: 24
159.148.91.0/24 maxlen: 24
159.148.92.0/24 maxlen: 24
159.148.93.0/24 maxlen: 24
159.148.94.0/24 maxlen: 24
159.148.95.0/24 maxlen: 24
159.148.96.0/24 maxlen: 24
159.148.97.0/24 maxlen: 24
159.148.100.0/24 maxlen: 24
159.148.101.0/24 maxlen: 24
159.148.106.0/24 maxlen: 24
159.148.107.0/24 maxlen: 24
159.148.108.0/24 maxlen: 24
159.148.110.0/24 maxlen: 24
159.148.111.0/24 maxlen: 24
159.148.112.0/24 maxlen: 24
159.148.113.0/24 maxlen: 24
159.148.115.0/24 maxlen: 24
159.148.116.0/24 maxlen: 24
159.148.117.0/24 maxlen: 24
159.148.118.0/24 maxlen: 24
159.148.120.0/24 maxlen: 24
159.148.121.0/24 maxlen: 24
159.148.122.0/24 maxlen: 24
159.148.123.0/24 maxlen: 24
159.148.127.0/24 maxlen: 24
159.148.129.0/24 maxlen: 24
159.148.132.0/24 maxlen: 24
159.148.133.0/24 maxlen: 24
159.148.135.0/24 maxlen: 24
159.148.139.0/24 maxlen: 24
159.148.145.0/24 maxlen: 24
159.148.146.0/24 maxlen: 24
159.148.151.0/24 maxlen: 24
159.148.152.0/24 maxlen: 24
159.148.153.0/24 maxlen: 24
159.148.154.0/24 maxlen: 24
159.148.155.0/24 maxlen: 24
159.148.156.0/24 maxlen: 24
159.148.159.0/24 maxlen: 24
159.148.161.0/24 maxlen: 24
159.148.162.0/24 maxlen: 24
159.148.164.0/24 maxlen: 24
159.148.168.0/24 maxlen: 24
159.148.170.0/24 maxlen: 24
159.148.175.0/24 maxlen: 24
159.148.178.0/24 maxlen: 24
159.148.185.0/24 maxlen: 24
159.148.186.0/24 maxlen: 24
159.148.187.0/24 maxlen: 24
159.148.188.0/24 maxlen: 24
159.148.189.0/24 maxlen: 24
159.148.192.0/24 maxlen: 24
159.148.193.0/24 maxlen: 24
159.148.194.0/24 maxlen: 24
159.148.195.0/24 maxlen: 24
159.148.196.0/24 maxlen: 24
159.148.201.0/24 maxlen: 24
159.148.202.0/24 maxlen: 24
159.148.205.0/24 maxlen: 24
159.148.206.0/24 maxlen: 24
159.148.207.0/24 maxlen: 24
159.148.209.0/24 maxlen: 24
159.148.210.0/24 maxlen: 24
159.148.211.0/24 maxlen: 24
159.148.212.0/24 maxlen: 24
159.148.213.0/24 maxlen: 24
159.148.214.0/24 maxlen: 24
159.148.215.0/24 maxlen: 24
159.148.217.0/24 maxlen: 24
159.148.219.0/24 maxlen: 24
159.148.221.0/24 maxlen: 24
159.148.223.0/24 maxlen: 24
159.148.227.0/24 maxlen: 24
159.148.228.0/24 maxlen: 24
159.148.229.0/24 maxlen: 24
159.148.230.0/24 maxlen: 24
159.148.232.0/24 maxlen: 24
159.148.233.0/24 maxlen: 24
159.148.235.0/24 maxlen: 24
159.148.237.0/24 maxlen: 24
159.148.238.0/24 maxlen: 24
159.148.250.0/24 maxlen: 24
159.148.251.0/24 maxlen: 24
159.148.252.0/24 maxlen: 24
159.148.252.2/32 maxlen: 32
159.148.254.0/24 maxlen: 24
185.27.92.0/22 maxlen: 22
217.69.112.0/20 maxlen: 20
217.69.113.0/24 maxlen: 24
2a02:610::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:bf:87:42:38:b5:e0:02:e9:d3:f9:2c:ea:2e:0d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jun 26 14:58:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ac723fba13b9fc6f5318095c9475598ad081da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:40:30:c3:7c:99:e7:49:4d:14:9d:86:58:
9e:90:45:79:2e:72:c7:c4:e4:d9:f7:2a:06:e0:a9:
6a:cb:b5:98:46:f8:53:88:f4:48:aa:17:c9:d3:5b:
4f:c1:82:d9:4d:e7:3b:ed:09:25:2f:56:3e:42:e5:
0d:dc:c4:76:c9:bf:08:a8:ad:5f:0c:f1:d8:68:81:
5e:93:43:bc:27:93:77:5d:4b:56:34:d4:15:6a:d5:
72:d9:c0:d2:5f:b8:8c:73:fb:6e:6b:94:40:da:77:
b5:ad:bb:ad:08:27:18:b6:a4:71:06:75:84:65:b2:
86:48:b7:57:c8:ec:f7:b7:8f:48:7b:8e:fc:10:78:
eb:b4:b7:14:12:80:72:49:56:c4:62:e1:07:03:20:
7f:76:8f:ff:cb:99:ce:b6:24:51:d8:2c:b6:b1:f1:
51:c9:ed:c3:5e:c9:33:58:6e:43:62:01:7e:67:ee:
73:65:ab:70:26:42:ae:30:da:b8:5f:1f:dd:cd:3f:
1e:02:c5:6f:af:d7:ee:e0:62:a1:a2:ad:20:52:9c:
9a:73:f0:31:51:27:9a:df:e8:4d:78:fb:8f:f0:59:
c7:79:78:7e:f5:f2:73:dd:2a:b8:59:d7:01:b5:ba:
67:ae:7f:77:8e:0e:71:dc:98:f1:f8:bb:40:db:b9:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C7:23:FB:A1:3B:9F:C6:F5:31:80:95:C9:47:55:98:AD:08:1D:A0
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/mscj-6E7n8b1MYCVyUdVmK0IHaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.200.0/21
80.81.32.0-80.81.37.255
80.81.42.0/23
80.81.46.0/24
80.81.51.0/24
80.81.55.0/24
80.81.57.0/24
80.81.59.0/24
80.81.62.0/24
83.223.128.0/19
85.254.0.0/24
85.254.6.0/24
85.254.49.0-85.254.50.255
85.254.56.0/23
85.254.60.0/23
85.254.69.0/24
85.254.128.0/18
91.190.32.0-91.190.36.255
91.190.42.0/24
91.190.52.0/24
91.190.54.0-91.190.60.255
94.101.224.0/20
109.205.120.0/21
159.148.0.0/16
185.27.92.0/22
217.69.112.0/20
IPv6:
2a02:610::/32
Signature Algorithm: sha256WithRSAEncryption
8b:ad:c9:86:c6:d2:19:76:92:ce:0c:9b:58:58:42:74:0b:6c:
d6:5c:bf:7f:c8:41:e2:86:51:b6:81:ec:f0:46:49:50:83:9b:
9b:7a:10:c8:3f:b5:fc:f9:6e:65:eb:43:59:18:f4:0b:ca:29:
a0:91:2d:15:8d:2a:1f:dc:8d:74:cc:01:cd:47:72:e3:6c:15:
00:1d:35:f1:60:32:c3:86:7a:50:8e:33:75:85:7c:4c:78:37:
c1:85:56:84:b4:e8:d4:ef:8e:99:69:b1:50:bc:38:f6:12:25:
6c:9e:d3:e1:c4:a0:c4:eb:dc:dc:21:bd:bd:c5:72:bb:85:60:
51:f9:e3:b1:48:61:fa:42:c0:57:46:20:d8:a8:2e:0d:3c:90:
43:4e:a2:d5:27:69:41:57:28:66:62:95:f6:84:cd:c6:9c:ee:
63:b9:0e:94:84:be:72:4c:53:14:2e:5d:55:58:6c:53:b0:a7:
2e:ac:80:2e:04:0e:85:84:3f:12:d9:9f:4f:c3:07:31:cc:48:
55:24:ff:e7:0c:07:79:3e:b2:84:8d:50:49:36:ce:9a:98:3b:
13:fb:31:bb:9b:c9:8c:db:8b:41:29:6e:df:87:61:67:46:9b:
de:d9:fd:c3:35:cd:9e:e4:d7:0a:33:52:df:9c:81:02:42:f6:
9f:5e:62:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:47:21 2025 by rpki-client