Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/Muza-_3oCs1mXE2iijhmsa2ZMDc.roa
File: Muza-_3oCs1mXE2iijhmsa2ZMDc.roa (raw, json)
Hash identifier: F484vIaldigvaIIoMgyBe60CXF3BMbWAibiKKlPjgRg=
Subject key identifier: 32:EC:DA:FB:FD:E8:0A:CD:66:5C:4D:A2:8A:38:66:B1:AD:99:30:37
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019F3766111A9F0D15EF25D7D7BA5007B2A6
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/Muza-_3oCs1mXE2iijhmsa2ZMDc.roa
Signing time: Mon 06 Jul 2026 12:27:43 +0000
ROA not before: Mon 06 Jul 2026 12:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13150
IP address blocks: 85.255.16.0/24 maxlen: 24
85.255.17.0/24 maxlen: 24
85.255.18.0/24 maxlen: 24
85.255.19.0/24 maxlen: 24
85.255.20.0/24 maxlen: 24
85.255.21.0/24 maxlen: 24
85.255.22.0/24 maxlen: 24
85.255.23.0/24 maxlen: 24
85.255.24.0/24 maxlen: 24
85.255.25.0/24 maxlen: 24
85.255.26.0/24 maxlen: 24
85.255.27.0/24 maxlen: 24
85.255.28.0/24 maxlen: 24
85.255.29.0/24 maxlen: 24
85.255.30.0/24 maxlen: 24
85.255.31.0/24 maxlen: 24
159.117.224.0/24 maxlen: 24
159.117.225.0/24 maxlen: 24
159.117.226.0/24 maxlen: 24
159.117.227.0/24 maxlen: 24
159.117.228.0/24 maxlen: 24
159.117.229.0/24 maxlen: 24
159.117.230.0/24 maxlen: 24
159.117.231.0/24 maxlen: 24
159.117.232.0/24 maxlen: 24
159.117.233.0/24 maxlen: 24
159.117.234.0/24 maxlen: 24
159.117.235.0/24 maxlen: 24
159.117.236.0/24 maxlen: 24
159.117.237.0/24 maxlen: 24
159.117.238.0/24 maxlen: 24
159.117.239.0/24 maxlen: 24
159.117.240.0/24 maxlen: 24
159.117.241.0/24 maxlen: 24
159.117.242.0/24 maxlen: 24
159.117.243.0/24 maxlen: 24
159.117.244.0/24 maxlen: 24
159.117.245.0/24 maxlen: 24
159.117.246.0/24 maxlen: 24
159.117.247.0/24 maxlen: 24
185.114.120.0/24 maxlen: 24
185.114.121.0/24 maxlen: 24
185.114.122.0/24 maxlen: 24
185.114.123.0/24 maxlen: 24
209.206.0.0/24 maxlen: 24
209.206.1.0/24 maxlen: 24
209.206.2.0/24 maxlen: 24
209.206.3.0/24 maxlen: 24
209.206.4.0/24 maxlen: 24
209.206.5.0/24 maxlen: 24
209.206.6.0/24 maxlen: 24
209.206.7.0/24 maxlen: 24
209.206.8.0/24 maxlen: 24
209.206.9.0/24 maxlen: 24
209.206.10.0/24 maxlen: 24
209.206.11.0/24 maxlen: 24
209.206.12.0/24 maxlen: 24
209.206.13.0/24 maxlen: 24
209.206.14.0/24 maxlen: 24
209.206.15.0/24 maxlen: 24
209.206.16.0/24 maxlen: 24
209.206.17.0/24 maxlen: 24
209.206.18.0/24 maxlen: 24
209.206.19.0/24 maxlen: 24
209.206.20.0/24 maxlen: 24
209.206.21.0/24 maxlen: 24
209.206.22.0/24 maxlen: 24
209.206.23.0/24 maxlen: 24
209.206.24.0/24 maxlen: 24
209.206.25.0/24 maxlen: 24
209.206.26.0/24 maxlen: 24
209.206.27.0/24 maxlen: 24
209.206.28.0/24 maxlen: 24
209.206.29.0/24 maxlen: 24
209.206.30.0/24 maxlen: 24
209.206.31.0/24 maxlen: 24
216.252.176.0/24 maxlen: 24
216.252.177.0/24 maxlen: 24
216.252.178.0/24 maxlen: 24
216.252.179.0/24 maxlen: 24
216.252.180.0/24 maxlen: 24
216.252.181.0/24 maxlen: 24
216.252.182.0/24 maxlen: 24
216.252.183.0/24 maxlen: 24
216.252.184.0/24 maxlen: 24
216.252.185.0/24 maxlen: 24
216.252.186.0/24 maxlen: 24
216.252.187.0/24 maxlen: 24
216.252.188.0/24 maxlen: 24
216.252.189.0/24 maxlen: 24
216.252.190.0/24 maxlen: 24
216.252.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:66:11:1a:9f:0d:15:ef:25:d7:d7:ba:50:07:b2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Jul 6 12:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32ecdafbfde80acd665c4da28a3866b1ad993037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:67:a9:f1:1d:22:47:6d:f6:5a:c0:f4:a3:
fd:4f:e9:5e:d6:a8:61:aa:6e:75:a5:d4:06:3a:e2:
93:eb:e9:83:d2:a2:58:83:47:84:29:fe:2d:60:78:
0e:2b:6d:f1:6f:e5:4a:00:4a:4e:2a:d7:9b:40:ef:
26:84:ea:63:31:d2:9e:f4:23:2e:c7:f5:f3:72:7c:
ed:21:5c:37:71:bc:81:de:e6:3b:a9:af:35:9f:9b:
87:20:44:0f:04:8b:fc:e9:d0:2d:20:d9:a3:83:4c:
66:39:09:1d:d3:82:4e:40:4a:22:5b:8b:5a:a0:67:
ce:15:5d:f2:a3:1a:e6:f2:9c:fa:37:22:5b:a5:18:
19:44:9b:07:d9:17:17:de:9b:8a:ea:cb:b4:44:73:
e4:ab:1c:d0:0d:eb:ec:09:99:63:bc:e6:ea:5d:f2:
89:b2:d4:39:1b:2c:5e:ce:03:3e:6f:9f:6c:ff:56:
2d:da:db:54:17:40:27:95:6e:89:80:07:17:cd:3a:
33:8d:4d:d9:7d:fe:9f:02:da:d5:fc:7f:64:0b:1d:
40:5b:6d:96:d7:64:23:d3:1a:4b:20:73:78:fd:6d:
46:04:e9:89:18:f9:28:69:9a:c6:ec:fc:dd:fe:8f:
42:39:38:ba:7b:26:08:0c:9a:6c:74:ee:88:73:56:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:DA:FB:FD:E8:0A:CD:66:5C:4D:A2:8A:38:66:B1:AD:99:30:37
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/Muza-_3oCs1mXE2iijhmsa2ZMDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.16.0/20
159.117.224.0-159.117.247.255
185.114.120.0/22
209.206.0.0/19
216.252.176.0/20
Signature Algorithm: sha256WithRSAEncryption
40:e5:bc:6e:6a:da:51:03:d0:e7:4f:8f:2c:e9:95:ca:50:0e:
c7:2e:3f:8f:52:dd:66:e0:b5:01:3e:e2:13:8c:cb:4d:8a:9f:
94:e5:bb:d1:25:ac:94:74:ea:75:72:2b:a0:85:7d:71:96:47:
dc:db:e6:56:2a:d6:58:d9:ea:48:87:e0:0d:c4:d6:05:7b:d0:
b6:fc:83:c7:e8:f6:47:0d:e2:c5:29:e0:6b:7c:69:ed:39:c8:
8d:eb:d9:97:96:f8:5a:66:3b:07:f8:4c:c2:03:44:f6:8a:b1:
e1:21:4d:b1:ce:d1:ba:96:7b:01:37:37:ac:95:90:22:56:47:
f0:a1:c9:06:75:1f:ef:ee:6f:be:c0:89:f2:ed:28:50:2e:c9:
84:4b:7d:d6:e9:82:9f:18:9c:f5:f7:9c:2b:ab:10:3f:3a:75:
c0:84:c4:af:a8:78:4d:3d:6b:f9:ba:a1:ca:5c:c0:94:35:c6:
0e:f6:2b:44:1d:40:d3:db:87:1e:b1:d9:6e:ca:c2:66:05:5e:
ee:c1:31:8f:ba:12:7b:9e:07:e4:0b:fe:28:9a:c7:9c:91:23:
ef:b8:c1:a7:a0:cf:03:01:9c:c6:9b:15:9b:c9:25:ce:8a:5a:
24:88:a1:e8:1f:13:b0:1e:5c:9c:2c:c6:1a:2a:ee:31:42:42:
e6:4c:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:21:19 2026 by rpki-client