Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MpxNoKlHov7Ssp131Jt6uPMIcAs.roa
File: MpxNoKlHov7Ssp131Jt6uPMIcAs.roa (raw, json)
Hash identifier: CYIBRRPgUEC9YFSgsBM3/Nhye/egW/2KcnFH6BRryy8=
Subject key identifier: 32:9C:4D:A0:A9:47:A2:FE:D2:B2:9D:77:D4:9B:7A:B8:F3:08:70:0B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A13F18E9A87347B18C76032CFDD6467431
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MpxNoKlHov7Ssp131Jt6uPMIcAs.roa
Signing time: Thu 15 Oct 2026 10:25:59 +0000
ROA not before: Thu 15 Oct 2026 10:25:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.230.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.42.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.58.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:18:e9:a8:73:47:b1:8c:76:03:2c:fd:d6:46:74:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 15 10:25:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=329c4da0a947a2fed2b29d77d49b7ab8f308700b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:0e:16:28:6e:66:5c:2c:f8:51:49:66:e7:
69:5d:cf:8d:4b:8c:16:4b:f3:3c:3c:88:79:90:d7:
29:41:ee:6e:02:f5:0b:36:cc:c5:03:82:0a:fd:00:
fe:62:87:60:2a:82:c1:97:a7:02:04:4c:26:9d:69:
e2:51:44:00:80:f7:ed:43:98:76:e6:93:40:20:d1:
0b:de:39:76:2b:75:01:ed:63:a3:bf:22:a3:1f:30:
3f:3a:47:e7:b8:e7:28:91:63:34:71:00:3c:90:d5:
0b:df:d5:01:b5:7d:a0:23:f2:bf:18:62:95:48:76:
6a:a5:b9:73:b7:8b:11:70:2a:1f:ce:57:be:a1:fd:
71:1e:f0:cb:fc:52:86:bb:73:23:c6:ad:cd:a9:df:
05:08:b9:b9:05:8e:fd:68:29:0b:ce:6d:f1:dd:aa:
d5:bb:e0:fa:ba:11:67:22:20:78:1f:8f:b0:57:a4:
c2:68:b6:22:ea:85:13:5e:a6:07:31:19:f7:8f:04:
a9:ab:9e:53:76:2f:94:0d:c6:70:1d:21:9e:16:41:
a0:56:2d:f1:1e:42:b3:69:9f:37:93:28:c2:fa:07:
2a:ce:c6:11:84:40:a9:8a:99:b5:0b:30:9c:7a:af:
62:9f:9c:da:15:7c:76:57:a9:3a:3e:74:84:de:e8:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9C:4D:A0:A9:47:A2:FE:D2:B2:9D:77:D4:9B:7A:B8:F3:08:70:0B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MpxNoKlHov7Ssp131Jt6uPMIcAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
185.72.10.0/24
192.124.190.0/24
193.124.206.0/24
194.58.155.0/24
194.87.7.0/24
194.87.59.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.133.24.0/23
195.133.40.0-195.133.42.255
195.133.50.0/23
195.133.58.0/24
195.133.92.0/23
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
23:30:eb:bd:8d:c2:d3:38:24:37:d2:de:c2:99:10:2c:0f:15:
2b:d5:59:4e:f9:8a:2f:9b:6d:8e:47:10:bb:b6:25:34:11:1e:
c6:25:c1:60:97:a0:0e:ca:5d:84:92:6b:77:fb:19:98:00:55:
60:52:d4:63:fd:87:bb:73:80:b6:05:a7:b8:dd:25:42:cc:7b:
bf:22:7a:22:a7:1e:c7:83:e4:68:9f:7d:a3:5c:be:a7:c5:d2:
ea:c4:de:60:de:13:91:56:3c:87:64:7d:82:88:89:a8:d5:3a:
b4:13:0f:6b:fd:5e:b9:f9:ce:bf:9d:1d:1f:16:83:d9:7d:14:
c6:a7:2a:7b:c6:c1:36:82:a4:7b:7c:97:1c:61:97:eb:45:06:
99:52:a7:d2:02:7c:cb:70:63:91:eb:66:1f:d6:1e:7b:f4:06:
e4:f9:c3:ce:2c:4c:7a:f0:00:c1:8e:bb:78:4d:bf:ef:2c:e7:
a1:a0:2a:95:dc:d7:ed:98:75:ad:7e:bb:07:15:3a:d5:16:e7:
91:a8:26:90:84:e0:b4:d9:f9:ea:24:ad:21:57:0a:a2:ee:75:
5e:60:2d:b2:c4:ae:ce:d8:aa:cc:81:85:14:f2:49:ce:60:37:
aa:c6:e1:69:0f:b2:6a:85:b8:d3:ec:03:3b:6f:0d:be:d1:25:
fb:67:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:57:33 2026 by rpki-client