Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/mqwgub1uibS9x_F9WiQDrkerEqE.roa
File: mqwgub1uibS9x_F9WiQDrkerEqE.roa (raw, json)
Hash identifier: b33ZxY73dmejWTF0+JpuLdsl1eGBScAuV9NIFHXrnIo=
Subject key identifier: 9A:AC:20:B9:BD:6E:89:B4:BD:C7:F1:7D:5A:24:03:AE:47:AB:12:A1
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019F8FEC37CAF6E7170F402D886376451C6C
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/mqwgub1uibS9x_F9WiQDrkerEqE.roa
Signing time: Thu 23 Jul 2026 17:00:50 +0000
ROA not before: Thu 23 Jul 2026 17:00:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202538
IP address blocks: 212.87.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:37:ca:f6:e7:17:0f:40:2d:88:63:76:45:1c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 23 17:00:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9aac20b9bd6e89b4bdc7f17d5a2403ae47ab12a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:ae:3a:30:5f:c6:03:ef:24:b4:51:8f:6d:
9b:2e:29:b6:26:3f:1d:64:05:0d:e2:27:f3:7f:e9:
2d:d6:03:6e:2d:78:5a:4b:1e:ad:62:61:34:7e:a2:
59:61:1b:b6:88:42:bf:9a:19:0b:ca:40:32:4a:50:
60:23:63:a4:61:14:58:92:0a:6e:8f:b6:fc:af:c1:
d1:1b:9f:00:4c:a9:f7:75:47:9e:ef:99:9e:99:7d:
03:e8:4c:d6:19:da:79:a0:0f:24:3c:2e:43:d4:70:
cc:1a:21:c3:19:d2:2e:f5:7e:89:1b:65:8b:c2:c2:
68:52:56:b0:ba:76:c0:a7:6c:1f:a7:51:01:33:a5:
f8:9e:19:a8:d5:55:7d:47:c2:1b:49:e2:bd:67:03:
c7:49:98:d9:3c:35:bc:6a:50:25:47:9a:19:53:44:
c3:28:93:ad:2e:1f:5a:63:57:37:b9:2c:a2:cc:ca:
64:27:ea:8d:14:82:97:61:86:4f:b1:d7:5f:10:9d:
47:1f:ce:1c:4a:64:c6:1a:5c:ce:39:dc:9c:8e:0a:
e6:62:bb:c3:f8:3f:af:0f:32:ef:e5:f8:86:8b:89:
f4:df:43:8f:38:95:6c:3b:0b:75:e8:79:ae:d2:98:
24:ab:89:39:1c:98:bf:b7:54:f1:09:ec:4e:66:1c:
40:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:20:B9:BD:6E:89:B4:BD:C7:F1:7D:5A:24:03:AE:47:AB:12:A1
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/mqwgub1uibS9x_F9WiQDrkerEqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.169.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8f:81:a9:59:67:60:b2:e9:5d:9c:9a:35:70:1a:a6:3d:c0:
7e:71:e1:d4:2e:9d:00:6e:a7:ca:39:07:6c:56:8d:28:cc:07:
e5:4c:6c:e6:95:fc:c6:b5:af:7b:88:90:55:4a:1e:5d:be:a6:
19:4c:04:c4:35:15:b3:05:39:1f:73:2a:25:94:f6:c8:9c:43:
9e:cc:41:a8:9b:fb:aa:fa:54:b0:ca:7b:00:9b:ff:6f:84:ce:
d6:41:fa:aa:6d:65:4b:a3:f0:e3:52:ea:05:6e:2c:14:75:85:
3a:49:18:a3:73:ae:41:ef:7f:25:14:b5:3c:b9:4f:8b:fd:64:
6f:8b:07:28:5d:f1:79:77:b8:e6:95:f4:94:4a:44:44:80:21:
39:2f:91:6a:3f:91:5d:68:d3:82:91:66:28:d6:de:a1:2f:3b:
83:cb:50:44:8e:2f:57:db:d9:f0:57:ee:80:e0:1a:54:9c:91:
8c:33:c6:78:35:46:4b:0c:71:5a:52:37:42:db:39:d6:ac:bf:
d2:ce:e4:e9:78:90:97:59:f0:ab:49:50:27:51:3f:ef:2c:43:
73:28:24:51:23:99:75:f5:7d:37:3d:11:93:17:02:df:8a:af:
d4:d5:db:f7:58:a6:49:8b:82:02:0c:88:61:15:4c:fb:db:f0:
bd:bc:19:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+P7DfK9ucXD0AtiGN2RRxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjYwNzIzMTcwMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWFjMjBiOWJkNmU4OWI0YmRjN2YxN2Q1YTI0MDNhZTQ3YWIxMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ6uOjBfxgPvJLRRj22bLim2Jj8d
ZAUN4ifzf+kt1gNuLXhaSx6tYmE0fqJZYRu2iEK/mhkLykAySlBgI2OkYRRYkgpu
j7b8r8HRG58ATKn3dUee75memX0D6EzWGdp5oA8kPC5D1HDMGiHDGdIu9X6JG2WL
wsJoUlawunbAp2wfp1EBM6X4nhmo1VV9R8IbSeK9ZwPHSZjZPDW8alAlR5oZU0TD
KJOtLh9aY1c3uSyizMpkJ+qNFIKXYYZPsddfEJ1HH84cSmTGGlzOOdycjgrmYrvD
+D+vDzLv5fiGi4n030OPOJVsOwt16Hmu0pgkq4k5HJi/t1TxCexOZhxA/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJqsILm9bom0vcfxfVokA65HqxKhMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvbXF3Z3ViMXVpYlM5eF9GOVdpUURya2VyRXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FepMA0G
CSqGSIb3DQEBCwUAA4IBAQBkj4GpWWdgsuldnJo1cBqmPcB+ceHULp0AbqfKOQds
Vo0ozAflTGzmlfzGta97iJBVSh5dvqYZTATENRWzBTkfcyollPbInEOezEGom/uq
+lSwynsAm/9vhM7WQfqqbWVLo/DjUuoFbiwUdYU6SRijc65B738lFLU8uU+L/WRv
iwcoXfF5d7jmlfSUSkREgCE5L5FqP5FdaNOCkWYo1t6hLzuDy1BEji9X29nwV+6A
4BpUnJGMM8Z4NUZLDHFaUjdC2znWrL/SzuTpeJCXWfCrSVAnUT/vLENzKCRRI5l1
9X03PRGTFwLfiq/U1dv3WKZJi4ICDIhhFUz72/C9vBme
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:55 2026 by rpki-client