Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qMZAruuP9Gr2FFvtpEgI6qI05r0.roa
File: qMZAruuP9Gr2FFvtpEgI6qI05r0.roa (raw, json)
Hash identifier: 6zZjV59ARMq9jQ+jwaDkzg9JMhzsPAyhLlLAT5gFk7w=
Subject key identifier: A8:C6:40:AE:EB:8F:F4:6A:F6:14:5B:ED:A4:48:08:EA:A2:34:E6:BD
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019F69A45B78F5F33A96D329647C71620695
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qMZAruuP9Gr2FFvtpEgI6qI05r0.roa
Signing time: Thu 16 Jul 2026 06:36:46 +0000
ROA not before: Thu 16 Jul 2026 06:36:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44947
IP address blocks: 62.60.180.0/22 maxlen: 24
213.176.20.0/22 maxlen: 24
213.176.24.0/22 maxlen: 24
213.176.68.0/22 maxlen: 24
213.176.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:a4:5b:78:f5:f3:3a:96:d3:29:64:7c:71:62:06:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 16 06:36:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8c640aeeb8ff46af6145beda44808eaa234e6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:75:a7:e3:b4:5f:a8:6b:3d:b1:fb:71:d2:
23:3b:de:9a:c0:20:76:c0:28:69:ad:a0:37:81:e4:
da:e5:52:36:1b:a4:3f:0b:f1:48:d2:05:1e:45:ca:
b3:e6:3c:04:42:07:0c:89:e0:49:b9:41:e5:fe:d2:
98:31:f2:a2:c4:27:31:91:d8:0d:4a:5a:63:8a:77:
f8:53:c3:06:56:20:db:e1:bb:fa:3d:96:47:d5:b5:
08:87:6e:10:db:28:7b:ea:8a:7c:95:aa:65:0a:34:
27:7d:41:b7:c8:fd:c5:25:d0:ca:af:23:f1:d8:12:
f1:db:2a:8c:57:5d:0d:9f:e0:fe:c7:53:20:b7:fc:
94:8a:a6:f7:f6:2c:fc:57:25:5e:81:6a:08:6c:32:
0d:b3:ba:df:59:a5:f8:85:d6:49:46:82:88:df:94:
db:5c:1f:71:2b:da:09:02:55:39:b2:fc:80:58:c3:
60:11:02:46:12:60:eb:04:ca:d7:2e:82:21:3c:18:
a6:4e:da:0d:ea:5b:84:78:b5:8d:49:38:7c:4f:d9:
b9:e2:3d:75:88:b8:94:a9:80:be:3e:20:a0:5d:53:
5f:6d:d3:15:49:5a:fa:3d:b9:f5:79:f6:f8:25:3b:
02:63:b7:0b:87:aa:83:1f:db:b3:8e:2c:6f:57:ad:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C6:40:AE:EB:8F:F4:6A:F6:14:5B:ED:A4:48:08:EA:A2:34:E6:BD
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qMZAruuP9Gr2FFvtpEgI6qI05r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.180.0/22
213.176.20.0-213.176.27.255
213.176.68.0/22
213.176.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:27:ae:c4:9e:33:1e:50:db:a1:79:4a:f2:52:99:05:64:2b:
71:84:04:b8:c9:be:c7:09:1a:5e:6d:37:24:37:e5:f2:0f:1e:
fe:ce:92:56:86:4f:9c:88:c1:4d:32:71:60:40:21:2a:19:b1:
b3:de:3f:e8:35:fc:6f:79:1f:7c:e1:aa:cd:56:28:af:41:73:
95:aa:8a:2e:f8:70:c2:d8:ae:6f:d3:34:a2:07:0f:0d:6f:3c:
36:0c:93:81:2c:e7:5d:64:b1:a7:fc:f5:5e:ee:68:1d:ba:f8:
74:0c:67:ea:d6:0a:52:49:b2:24:5c:3b:47:b9:1c:c2:fb:c0:
87:81:46:48:fb:97:8d:35:da:2a:3a:f2:c8:5d:65:f9:7f:54:
ae:04:f1:4f:6f:e9:de:63:4d:6a:ed:57:2c:d2:7e:30:f4:35:
cd:d3:15:5d:58:59:4a:47:8d:32:2c:24:3a:e2:31:fd:bf:84:
2c:9d:97:bb:5c:15:6a:c6:d4:59:30:cd:ab:3f:e6:e8:80:a5:
87:ad:29:00:08:b3:12:79:58:27:3b:ff:89:11:8c:b8:42:8a:
cc:a2:b8:c5:95:24:0e:73:54:c9:bc:98:7d:82:28:58:6c:66:
d5:c4:3f:cc:3b:cb:81:df:34:b1:2e:bb:e2:f4:63:4a:08:2c:
3f:ec:ff:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:40 2026 by rpki-client