Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/MuwC6x_yLgD7FpDJOy4_RplJ5mE.roa
File: MuwC6x_yLgD7FpDJOy4_RplJ5mE.roa (raw, json)
Hash identifier: CQmgt3q4+ZbJ/msa1p0DIKb/lStj5UiMyS0JzyMSKyg=
Subject key identifier: 32:EC:02:EB:1F:F2:2E:00:FB:16:90:C9:3B:2E:3F:46:99:49:E6:61
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 019EF3E81EF9902167402CAC95D8B941CE8F
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/MuwC6x_yLgD7FpDJOy4_RplJ5mE.roa
Signing time: Tue 23 Jun 2026 09:55:36 +0000
ROA not before: Tue 23 Jun 2026 09:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3225
IP address blocks: 45.158.96.0/22 maxlen: 24
91.140.128.0/17 maxlen: 24
91.140.128.0/18 maxlen: 18
91.140.128.0/22 maxlen: 24
91.140.132.0/22 maxlen: 24
91.140.136.0/22 maxlen: 22
91.140.140.0/22 maxlen: 24
91.140.144.0/22 maxlen: 22
91.140.148.0/22 maxlen: 24
91.140.152.0/22 maxlen: 24
91.140.156.0/22 maxlen: 22
91.140.160.0/22 maxlen: 24
91.140.164.0/22 maxlen: 24
91.140.168.0/22 maxlen: 22
91.140.172.0/22 maxlen: 24
91.140.176.0/22 maxlen: 22
91.140.180.0/22 maxlen: 24
91.140.184.0/22 maxlen: 22
91.140.188.0/22 maxlen: 24
91.140.192.0/22 maxlen: 24
91.140.196.0/22 maxlen: 24
91.140.200.0/22 maxlen: 24
91.140.201.0/24 maxlen: 24
91.140.202.0/24 maxlen: 24
91.140.203.0/24 maxlen: 24
91.140.204.0/22 maxlen: 24
91.140.207.0/24 maxlen: 24
91.140.208.0/22 maxlen: 24
91.140.211.0/24 maxlen: 24
91.140.212.0/22 maxlen: 24
91.140.216.0/22 maxlen: 24
91.140.219.0/24 maxlen: 24
91.140.220.0/24 maxlen: 24
91.140.221.0/24 maxlen: 24
91.140.222.0/24 maxlen: 24
91.140.223.0/24 maxlen: 24
91.140.224.0/22 maxlen: 24
91.140.224.0/24 maxlen: 24
91.140.226.0/24 maxlen: 24
91.140.227.0/24 maxlen: 24
91.140.228.0/22 maxlen: 24
91.140.228.0/24 maxlen: 24
91.140.229.0/24 maxlen: 24
91.140.230.0/24 maxlen: 24
91.140.231.0/24 maxlen: 24
91.140.232.0/22 maxlen: 22
91.140.232.0/24 maxlen: 24
91.140.233.0/24 maxlen: 24
91.140.234.0/24 maxlen: 24
91.140.235.0/24 maxlen: 24
91.140.236.0/22 maxlen: 22
91.140.236.0/24 maxlen: 24
91.140.237.0/24 maxlen: 24
91.140.238.0/24 maxlen: 24
91.140.239.0/24 maxlen: 24
91.140.240.0/22 maxlen: 22
91.140.240.0/24 maxlen: 24
91.140.241.0/24 maxlen: 24
91.140.242.0/24 maxlen: 24
91.140.244.0/22 maxlen: 24
91.140.244.0/24 maxlen: 24
91.140.245.0/24 maxlen: 24
91.140.246.0/24 maxlen: 24
91.140.248.0/22 maxlen: 24
91.140.248.0/24 maxlen: 24
91.140.249.0/24 maxlen: 24
91.140.250.0/24 maxlen: 24
91.140.251.0/24 maxlen: 24
91.140.252.0/22 maxlen: 24
91.140.252.0/24 maxlen: 24
91.140.253.0/24 maxlen: 24
91.140.254.0/24 maxlen: 24
91.140.255.0/24 maxlen: 24
94.187.224.0/19 maxlen: 24
94.187.224.0/22 maxlen: 22
94.187.224.0/24 maxlen: 24
94.187.225.0/24 maxlen: 24
94.187.226.0/24 maxlen: 24
94.187.227.0/24 maxlen: 24
94.187.228.0/22 maxlen: 24
94.187.228.0/24 maxlen: 24
94.187.230.0/24 maxlen: 24
94.187.232.0/22 maxlen: 24
94.187.232.0/24 maxlen: 24
94.187.236.0/22 maxlen: 24
94.187.240.0/22 maxlen: 24
94.187.241.0/24 maxlen: 24
94.187.244.0/22 maxlen: 24
94.187.248.0/22 maxlen: 24
94.187.249.0/24 maxlen: 24
94.187.252.0/22 maxlen: 24
94.187.252.0/24 maxlen: 24
94.187.255.0/24 maxlen: 24
185.16.4.0/22 maxlen: 24
194.54.192.0/18 maxlen: 24
194.54.192.0/19 maxlen: 24
194.54.192.0/22 maxlen: 22
194.54.194.0/23 maxlen: 24
194.54.196.0/22 maxlen: 24
194.54.200.0/22 maxlen: 24
194.54.202.0/24 maxlen: 24
194.54.204.0/22 maxlen: 24
194.54.208.0/22 maxlen: 24
194.54.208.0/24 maxlen: 24
194.54.209.0/24 maxlen: 24
194.54.212.0/22 maxlen: 24
194.54.216.0/22 maxlen: 24
194.54.220.0/22 maxlen: 24
194.54.220.0/24 maxlen: 24
194.54.224.0/19 maxlen: 24
194.54.224.0/22 maxlen: 24
194.54.228.0/22 maxlen: 24
194.54.232.0/22 maxlen: 24
194.54.234.0/24 maxlen: 24
194.54.236.0/22 maxlen: 24
194.54.240.0/22 maxlen: 24
194.54.241.0/24 maxlen: 24
194.54.243.0/24 maxlen: 24
194.54.244.0/22 maxlen: 24
194.54.248.0/22 maxlen: 24
194.54.252.0/22 maxlen: 24
213.132.224.0/19 maxlen: 19
213.132.224.0/22 maxlen: 22
213.132.224.0/24 maxlen: 24
213.132.228.0/22 maxlen: 22
213.132.228.0/24 maxlen: 24
213.132.229.0/24 maxlen: 24
213.132.230.0/24 maxlen: 24
213.132.231.0/24 maxlen: 24
213.132.232.0/22 maxlen: 22
213.132.236.0/22 maxlen: 22
213.132.240.0/22 maxlen: 22
213.132.244.0/22 maxlen: 22
213.132.244.0/24 maxlen: 24
213.132.245.0/24 maxlen: 24
213.132.246.0/24 maxlen: 24
213.132.247.0/24 maxlen: 24
213.132.248.0/22 maxlen: 22
213.132.248.0/24 maxlen: 24
213.132.249.0/24 maxlen: 24
213.132.251.0/24 maxlen: 24
213.132.252.0/22 maxlen: 22
213.132.252.0/24 maxlen: 24
213.132.254.0/24 maxlen: 24
213.132.255.0/24 maxlen: 24
2a01:7780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:e8:1e:f9:90:21:67:40:2c:ac:95:d8:b9:41:ce:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Jun 23 09:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32ec02eb1ff22e00fb1690c93b2e3f469949e661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:d9:ef:72:86:12:50:08:fe:1b:32:ac:20:
92:23:d3:66:86:48:14:4e:25:58:66:af:f4:ff:53:
f0:9e:ed:0b:79:4f:95:16:94:b7:77:82:fc:db:b2:
6c:21:01:cf:49:c1:03:62:dc:0e:70:38:01:93:f9:
e8:25:8a:93:62:c8:d0:0a:08:cb:0c:6a:42:1a:94:
78:32:e8:56:04:06:27:51:05:df:d7:43:9a:cb:e4:
b4:8a:09:d9:e6:a6:cc:f0:40:d9:02:70:bb:71:de:
73:2a:c4:b7:4a:54:e6:f4:f5:6d:9d:cb:36:18:5e:
36:d8:63:3a:82:ef:ba:62:43:e1:ce:8c:73:c7:d6:
7f:c9:1f:ca:90:96:66:91:69:0d:22:89:fc:b1:03:
28:83:60:80:6a:ab:07:41:70:ad:41:b0:29:be:e4:
f0:81:8f:f6:65:59:21:62:e1:2e:87:8b:65:a2:ec:
09:ac:52:aa:1f:f4:8b:a4:2c:18:36:ae:1d:85:15:
c6:59:25:c8:cd:ac:e1:b1:e4:a4:58:a7:89:24:96:
99:21:6f:b2:a3:a4:81:09:86:13:64:f9:4b:fd:ea:
f5:a2:b4:82:67:54:02:d0:46:1d:ad:f5:68:16:41:
93:05:c5:8f:8a:54:87:bb:05:8b:6f:f5:45:07:d6:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:02:EB:1F:F2:2E:00:FB:16:90:C9:3B:2E:3F:46:99:49:E6:61
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/MuwC6x_yLgD7FpDJOy4_RplJ5mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.96.0/22
91.140.128.0/17
94.187.224.0/19
185.16.4.0/22
194.54.192.0/18
213.132.224.0/19
IPv6:
2a01:7780::/32
Signature Algorithm: sha256WithRSAEncryption
68:6d:a4:f7:4a:ca:2d:00:40:df:df:f4:b6:8e:bb:20:67:1e:
4a:d2:7a:6b:23:41:21:66:1c:58:2e:76:dd:05:8d:ee:c2:c1:
73:93:a1:32:76:6e:ec:b0:97:27:99:74:0d:a2:65:92:78:b2:
8c:e7:01:41:41:ba:8a:c4:5f:67:59:db:36:09:8c:f5:45:7b:
50:52:c2:f7:93:98:2b:b6:57:c0:70:93:88:7d:7e:d7:33:5b:
3c:c5:0b:20:2b:e9:8e:37:bc:84:08:c0:db:5c:2b:54:5a:e6:
71:a3:b1:78:80:6e:60:21:7c:4f:ce:05:6f:61:c4:91:13:ed:
a9:95:70:72:cd:bd:97:b4:ff:56:b2:ee:79:03:0e:73:c2:ca:
cd:e1:06:57:fa:0b:d5:a2:9e:f9:4b:99:97:2b:6c:20:8d:bb:
fd:77:71:43:bd:e6:cf:85:45:ca:0e:e6:23:2e:88:22:c2:98:
57:6e:f8:ae:98:74:8f:e6:17:8f:bf:25:cc:9b:8c:2c:08:b9:
92:8e:8e:74:a3:a8:83:74:98:46:9b:a7:39:42:df:be:5f:58:
9e:b6:66:51:c8:26:04:f2:27:c2:b6:03:21:7b:b0:5a:1c:dd:
83:35:77:64:ff:b3:36:cb:f8:cd:c0:3d:b5:71:4f:48:a4:21:
76:40:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:59:48 2026 by rpki-client