Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/MSQK_3EJ6OcsnkdpBQECwqcQ4PE.roa
File: MSQK_3EJ6OcsnkdpBQECwqcQ4PE.roa (raw, json)
Hash identifier: 93zxvvesPXmuUl3S2JN74fhHXFYe8d3QolX6NgG0H4k=
Subject key identifier: 31:24:0A:FF:71:09:E8:E7:2C:9E:47:69:05:01:02:C2:A7:10:E0:F1
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019CE21C9DE2CC38DDFBAB3C4B0AEDE2B3F5
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/MSQK_3EJ6OcsnkdpBQECwqcQ4PE.roa
Signing time: Thu 12 Mar 2026 12:54:12 +0000
ROA not before: Thu 12 Mar 2026 12:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200729
IP address blocks: 85.132.83.0/24 maxlen: 24
94.20.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:1c:9d:e2:cc:38:dd:fb:ab:3c:4b:0a:ed:e2:b3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Mar 12 12:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31240aff7109e8e72c9e4769050102c2a710e0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:78:47:97:d4:a6:3d:5f:4b:4f:f7:f4:2f:
7a:48:d3:91:e2:cf:a8:56:69:f4:62:62:30:e2:80:
e0:88:8a:71:b0:f9:a2:30:b3:9f:58:8e:74:de:8a:
1c:42:af:c0:60:6d:d0:db:7c:3e:e4:96:e9:a1:93:
35:ce:c6:b2:80:3d:4b:6b:6d:c0:c1:9d:aa:16:6f:
1b:f8:93:13:bc:64:59:ba:2e:8f:bd:e4:0d:af:92:
57:7b:68:e0:d8:15:51:11:51:4a:d4:58:a0:5e:b8:
ec:45:da:9a:72:60:6d:48:5a:a7:c5:32:66:c4:4a:
01:40:a5:b5:82:1e:3f:fa:94:5a:ba:19:a0:67:ef:
39:fd:f4:8e:3e:f0:09:5d:71:10:f5:34:3d:bd:aa:
eb:73:11:a1:72:e4:b5:5c:80:c1:83:52:a3:78:87:
d4:6c:1a:86:c7:29:2a:e8:3d:ea:cf:f6:2b:46:02:
a0:00:ae:ea:2f:0f:14:b0:74:e1:36:46:6b:4f:82:
12:2e:11:b0:ef:85:77:2c:3f:85:a3:83:c6:e4:c1:
3a:4b:ed:5c:05:56:fb:20:31:c3:96:77:ff:76:fa:
9f:78:da:f3:22:eb:5b:21:39:24:75:f2:7a:d0:ad:
a3:b6:77:8f:bc:f0:c4:09:7a:c4:7a:88:45:72:12:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:0A:FF:71:09:E8:E7:2C:9E:47:69:05:01:02:C2:A7:10:E0:F1
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/MSQK_3EJ6OcsnkdpBQECwqcQ4PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.132.83.0/24
94.20.86.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e2:da:8b:a9:10:62:f9:e3:9d:7a:8a:ac:c5:38:96:d6:74:
f6:3c:18:eb:d8:72:03:a6:8a:c8:46:dd:8c:a0:34:de:f4:02:
02:5a:33:db:60:e8:c4:2d:60:c1:e9:15:6d:0e:d2:7b:fc:80:
e5:3b:67:4e:a0:da:b3:f1:d2:4c:30:67:b3:69:b4:e7:f7:5b:
e1:00:5b:7f:2d:ca:89:1b:55:a6:f4:af:cf:8b:e4:07:69:6e:
c3:95:f5:18:22:eb:de:7b:7a:8f:a4:0c:ef:a3:2a:87:a3:1b:
39:df:bc:83:18:a7:fc:30:08:b0:44:0f:91:63:e4:28:8c:df:
84:9c:b7:02:dc:d5:89:04:8e:14:3e:3d:b0:4e:68:67:5b:c3:
58:c2:81:ca:67:87:ed:3c:80:01:64:7e:27:29:68:8d:2d:de:
29:20:88:b1:88:ac:47:d3:e0:c5:d1:56:72:1c:5c:70:fb:99:
df:e5:f7:a3:08:4f:e7:68:56:c2:31:7b:c6:62:c7:b3:ff:7d:
b2:18:fe:9b:b5:50:65:c1:73:9f:17:ec:a1:b1:db:cf:3d:b9:
fc:81:f9:08:c2:43:01:a9:55:e3:f9:96:34:dc:70:ce:b8:f8:
b2:7d:8b:7d:f9:7a:31:88:8b:de:74:88:3b:a7:a8:b0:0c:24:
f4:bb:8c:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZziHJ3izDjd+6s8Swrt4rP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjUyYTQ3NzI0MmZiNDVmMjBiYjA4MDIwYTQwM2EyYmI0
NjZhOWIwHhcNMjYwMzEyMTI1NDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTI0MGFmZjcxMDllOGU3MmM5ZTQ3NjkwNTAxMDJjMmE3MTBlMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Z4R5fUpj1fS0/39C96SNOR4s+o
Vmn0YmIw4oDgiIpxsPmiMLOfWI503oocQq/AYG3Q23w+5JbpoZM1zsaygD1La23A
wZ2qFm8b+JMTvGRZui6PveQNr5JXe2jg2BVREVFK1FigXrjsRdqacmBtSFqnxTJm
xEoBQKW1gh4/+pRauhmgZ+85/fSOPvAJXXEQ9TQ9varrcxGhcuS1XIDBg1KjeIfU
bBqGxykq6D3qz/YrRgKgAK7qLw8UsHThNkZrT4ISLhGw74V3LD+Fo4PG5ME6S+1c
BVb7IDHDlnf/dvqfeNrzIutbITkkdfJ60K2jtnePvPDECXrEeohFchJfbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDEkCv9xCejnLJ5HaQUBAsKnEODxMB8GA1UdIwQY
MBaAFC4lKkdyQvtF8guwgCCkA6K7RmqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmIt
MTZmMTQ2YmVmOTk1LzEvTVNRS18zRUo2T2NzbmtkcEJRRUN3cWNRNFBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmItMTZmMTQ2YmVmOTk1
LzEvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVYRTAwQA
XhRWMA0GCSqGSIb3DQEBCwUAA4IBAQCG4tqLqRBi+eOdeoqsxTiW1nT2PBjr2HID
porIRt2MoDTe9AICWjPbYOjELWDB6RVtDtJ7/IDlO2dOoNqz8dJMMGezabTn91vh
AFt/LcqJG1Wm9K/Pi+QHaW7DlfUYIuvee3qPpAzvoyqHoxs537yDGKf8MAiwRA+R
Y+QojN+EnLcC3NWJBI4UPj2wTmhnW8NYwoHKZ4ftPIABZH4nKWiNLd4pIIixiKxH
0+DF0VZyHFxw+5nf5fejCE/naFbCMXvGYsez/32yGP6btVBlwXOfF+yhsdvPPbn8
gfkIwkMBqVXj+ZY03HDOuPiyfYt9+XoxiIvedIg7p6iwDCT0u4xc
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:52:58 2026 by rpki-client