Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/MUooZ1Ov9expLMpavng4DbjsbpE.roa
File: MUooZ1Ov9expLMpavng4DbjsbpE.roa (raw, json)
Hash identifier: eswDXNZ/AXtbqsm+yzDr7T0oqWysTnskZK6VmBCDemc=
Subject key identifier: 31:4A:28:67:53:AF:F5:EC:69:2C:CA:5A:BE:78:38:0D:B8:EC:6E:91
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019F4C13A5021C673130C5F7090D59AAF62D
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/MUooZ1Ov9expLMpavng4DbjsbpE.roa
Signing time: Fri 10 Jul 2026 12:49:43 +0000
ROA not before: Fri 10 Jul 2026 12:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13285
IP address blocks: 2.96.0.0/13 maxlen: 24
62.24.128.0/17 maxlen: 24
62.241.160.0/19 maxlen: 24
78.144.0.0/13 maxlen: 24
79.77.0.0/16 maxlen: 24
79.78.0.0/15 maxlen: 24
80.40.0.0/15 maxlen: 24
80.42.0.0/16 maxlen: 24
81.1.64.0/18 maxlen: 24
81.86.0.0/16 maxlen: 24
81.178.0.0/15 maxlen: 24
83.67.0.0/16 maxlen: 24
84.43.0.0/17 maxlen: 24
87.242.128.0/17 maxlen: 24
89.168.128.0/17 maxlen: 24
89.240.0.0/14 maxlen: 24
92.16.0.0/12 maxlen: 24
145.255.240.0/21 maxlen: 24
185.24.12.0/22 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.48.0/22 maxlen: 24
185.175.144.0/22 maxlen: 24
193.218.99.0/24 maxlen: 24
194.106.32.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
195.112.0.0/18 maxlen: 24
195.137.0.0/17 maxlen: 24
195.149.0.0/18 maxlen: 24
212.1.128.0/19 maxlen: 24
212.67.96.0/19 maxlen: 24
212.74.96.0/19 maxlen: 24
212.139.0.0/16 maxlen: 24
212.159.128.0/18 maxlen: 24
213.78.0.0/16 maxlen: 24
2001:7e0::/32 maxlen: 32
2001:4a00::/27 maxlen: 27
2a00:4340::/32 maxlen: 32
2a0b:db00::/29 maxlen: 29
2a0b:e900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:13:a5:02:1c:67:31:30:c5:f7:09:0d:59:aa:f6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jul 10 12:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=314a286753aff5ec692cca5abe78380db8ec6e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:1c:71:15:ee:b0:9a:6a:ac:b2:fe:4d:a8:
b1:d8:6e:dc:bd:9e:09:0d:27:25:ad:68:bb:40:1c:
c5:d7:15:33:db:41:6b:c2:63:c7:67:be:73:7c:f8:
86:b2:3b:51:49:97:41:bd:0b:5f:81:88:ac:b4:29:
54:49:fb:64:76:2f:d7:a2:02:d5:7d:32:f7:0f:2e:
60:53:48:9c:3e:99:c3:6e:7e:9e:b1:ac:2c:6e:ed:
e0:9a:5a:53:3d:fb:22:68:ca:8e:98:74:26:b9:aa:
17:bc:ef:35:c1:ee:f2:21:57:db:49:09:e0:be:d9:
16:4f:32:bd:ee:b0:ad:b9:72:54:9c:93:df:30:9e:
9d:3d:1d:18:41:4d:9e:b4:27:6a:54:a7:24:93:5c:
2b:31:7d:02:26:22:34:3d:2f:e1:18:ae:d6:59:b7:
54:0a:c4:bc:cc:cb:87:35:03:c5:c5:d9:4d:1d:36:
f6:53:77:6f:73:34:c9:52:7f:6e:86:4d:00:15:3a:
0e:fa:23:15:3d:43:b2:4d:26:1a:61:84:a1:7c:b5:
59:0b:e8:7f:e5:68:f4:cd:fa:24:48:58:87:09:3d:
c1:85:94:6f:69:50:4a:2f:66:90:99:e3:26:d9:0e:
38:31:10:fc:0d:31:6e:54:f6:c2:04:d7:76:de:26:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4A:28:67:53:AF:F5:EC:69:2C:CA:5A:BE:78:38:0D:B8:EC:6E:91
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/MUooZ1Ov9expLMpavng4DbjsbpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
79.77.0.0-79.79.255.255
80.40.0.0-80.42.255.255
81.1.64.0/18
81.86.0.0/16
81.178.0.0/15
83.67.0.0/16
84.43.0.0/17
87.242.128.0/17
89.168.128.0/17
89.240.0.0/14
92.16.0.0/12
145.255.240.0/21
185.24.12.0/22
185.173.120.0/22
185.175.48.0/22
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.67.96.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.78.0.0/16
IPv6:
2001:7e0::/32
2001:4a00::/27
2a00:4340::/32
2a0b:db00::/29
2a0b:e900::/29
Signature Algorithm: sha256WithRSAEncryption
cc:0a:8f:6b:58:4e:fb:e4:22:7a:c9:3f:52:34:ee:f2:14:3f:
f6:61:aa:39:a8:e2:a2:f9:29:3e:00:08:15:e3:ae:36:ca:43:
59:23:73:ca:cb:e8:2d:89:25:58:44:64:bf:0b:2c:ae:57:31:
39:2f:38:db:55:40:1c:86:58:cb:08:db:6e:07:4d:89:3d:27:
ea:0f:f7:4b:7a:68:c1:c4:51:23:5f:6a:e7:82:0d:15:ba:78:
88:ab:6a:44:8f:ca:70:19:3e:82:9f:94:eb:f4:79:c1:a1:c0:
26:91:cb:9d:d8:20:1a:64:fb:ba:95:44:66:38:6a:83:41:d2:
ca:aa:34:5a:7c:b5:a1:73:bc:a7:71:40:78:a9:16:6a:1e:01:
cc:f6:52:8e:8d:18:60:88:20:41:e6:01:42:fa:64:2c:0f:09:
3b:aa:5b:ba:15:c2:5f:c9:45:f5:14:10:bd:7f:ee:b5:e8:4b:
05:9e:00:5b:f8:35:4a:5f:12:c3:26:af:ea:8d:6b:10:0a:dc:
1b:0c:36:b9:51:4e:35:fc:17:c9:8f:ee:b9:3f:ec:13:cc:27:
5a:00:09:fd:75:de:8b:30:76:d0:f0:5b:e4:b8:c2:6e:67:34:
c2:eb:b4:47:2c:f6:6b:f1:65:e3:5a:06:07:5e:71:82:39:80:
29:61:73:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:21 2026 by rpki-client