Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/mKGzILI6GnTf3iBpvnKIrMOa8Ag.roa
File: mKGzILI6GnTf3iBpvnKIrMOa8Ag.roa (raw, json)
Hash identifier: 8X7vesir+0Znr9iSuMybylbfp0ERonqGThPCqi12p+E=
Subject key identifier: 98:A1:B3:20:B2:3A:1A:74:DF:DE:20:69:BE:72:88:AC:C3:9A:F0:08
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019D05047053AB5F5758FA454C949A491B06
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/mKGzILI6GnTf3iBpvnKIrMOa8Ag.roa
Signing time: Thu 19 Mar 2026 07:34:30 +0000
ROA not before: Thu 19 Mar 2026 07:34:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 130.49.4.0/24 maxlen: 24
130.49.7.0/24 maxlen: 24
130.49.13.0/24 maxlen: 24
130.49.18.0/24 maxlen: 24
130.49.19.0/24 maxlen: 24
130.49.23.0/24 maxlen: 24
130.49.26.0/24 maxlen: 24
130.49.28.0/24 maxlen: 24
130.49.33.0/24 maxlen: 24
130.49.34.0/24 maxlen: 24
130.49.38.0/24 maxlen: 24
130.49.41.0/24 maxlen: 24
130.49.43.0/24 maxlen: 24
130.49.48.0/24 maxlen: 24
130.49.49.0/24 maxlen: 24
130.49.54.0/24 maxlen: 24
130.49.56.0/24 maxlen: 24
130.49.59.0/24 maxlen: 24
130.49.63.0/24 maxlen: 24
130.49.64.0/24 maxlen: 24
130.49.69.0/24 maxlen: 24
130.49.71.0/24 maxlen: 24
130.49.74.0/24 maxlen: 24
130.49.82.0/24 maxlen: 24
130.49.83.0/24 maxlen: 24
130.49.88.0/24 maxlen: 24
130.49.90.0/24 maxlen: 24
130.49.93.0/24 maxlen: 24
130.49.97.0/24 maxlen: 24
130.49.98.0/24 maxlen: 24
130.49.103.0/24 maxlen: 24
130.49.105.0/24 maxlen: 24
130.49.109.0/24 maxlen: 24
130.49.116.0/24 maxlen: 24
130.49.118.0/24 maxlen: 24
130.49.123.0/24 maxlen: 24
130.49.124.0/24 maxlen: 24
138.249.29.0/24 maxlen: 24
138.249.30.0/24 maxlen: 24
138.249.31.0/24 maxlen: 24
138.249.36.0/24 maxlen: 24
138.249.38.0/24 maxlen: 24
138.249.39.0/24 maxlen: 24
138.249.44.0/24 maxlen: 24
138.249.45.0/24 maxlen: 24
138.249.47.0/24 maxlen: 24
138.249.48.0/24 maxlen: 24
138.249.49.0/24 maxlen: 24
138.249.50.0/24 maxlen: 24
138.249.51.0/24 maxlen: 24
138.249.53.0/24 maxlen: 24
138.249.55.0/24 maxlen: 24
138.249.57.0/24 maxlen: 24
138.249.60.0/24 maxlen: 24
138.249.61.0/24 maxlen: 24
138.249.62.0/24 maxlen: 24
138.249.64.0/24 maxlen: 24
138.249.65.0/24 maxlen: 24
138.249.66.0/24 maxlen: 24
138.249.67.0/24 maxlen: 24
138.249.68.0/24 maxlen: 24
138.249.69.0/24 maxlen: 24
138.249.70.0/24 maxlen: 24
138.249.71.0/24 maxlen: 24
138.249.72.0/24 maxlen: 24
138.249.73.0/24 maxlen: 24
138.249.74.0/24 maxlen: 24
138.249.76.0/24 maxlen: 24
138.249.78.0/24 maxlen: 24
138.249.79.0/24 maxlen: 24
138.249.80.0/24 maxlen: 24
138.249.81.0/24 maxlen: 24
138.249.82.0/24 maxlen: 24
138.249.83.0/24 maxlen: 24
138.249.85.0/24 maxlen: 24
138.249.87.0/24 maxlen: 24
138.249.89.0/24 maxlen: 24
138.249.92.0/24 maxlen: 24
138.249.93.0/24 maxlen: 24
138.249.94.0/24 maxlen: 24
138.249.95.0/24 maxlen: 24
138.249.96.0/24 maxlen: 24
138.249.97.0/24 maxlen: 24
138.249.99.0/24 maxlen: 24
138.249.100.0/24 maxlen: 24
138.249.101.0/24 maxlen: 24
138.249.111.0/24 maxlen: 24
138.249.113.0/24 maxlen: 24
138.249.114.0/24 maxlen: 24
138.249.152.0/24 maxlen: 24
138.249.159.0/24 maxlen: 24
138.249.164.0/24 maxlen: 24
138.249.183.0/24 maxlen: 24
138.249.192.0/24 maxlen: 24
138.249.216.0/24 maxlen: 24
138.249.225.0/24 maxlen: 24
138.249.230.0/24 maxlen: 24
138.249.247.0/24 maxlen: 24
155.212.33.0/24 maxlen: 24
155.212.40.0/24 maxlen: 24
155.212.42.0/24 maxlen: 24
155.212.47.0/24 maxlen: 24
155.212.48.0/24 maxlen: 24
155.212.52.0/24 maxlen: 24
155.212.54.0/24 maxlen: 24
155.212.57.0/24 maxlen: 24
155.212.61.0/24 maxlen: 24
155.212.62.0/24 maxlen: 24
155.212.68.0/24 maxlen: 24
155.212.69.0/24 maxlen: 24
155.212.73.0/24 maxlen: 24
155.212.76.0/24 maxlen: 24
155.212.78.0/24 maxlen: 24
155.212.83.0/24 maxlen: 24
155.212.84.0/24 maxlen: 24
155.212.88.0/24 maxlen: 24
155.212.90.0/24 maxlen: 24
155.212.93.0/24 maxlen: 24
155.212.97.0/24 maxlen: 24
155.212.98.0/24 maxlen: 24
155.212.103.0/24 maxlen: 24
155.212.105.0/24 maxlen: 24
155.212.112.0/24 maxlen: 24
155.212.116.0/24 maxlen: 24
155.212.118.0/24 maxlen: 24
155.212.123.0/24 maxlen: 24
155.212.124.0/24 maxlen: 24
170.168.205.0/24 maxlen: 24
170.168.213.0/24 maxlen: 24
170.168.214.0/24 maxlen: 24
170.168.222.0/24 maxlen: 24
170.168.229.0/24 maxlen: 24
170.168.231.0/24 maxlen: 24
170.168.239.0/24 maxlen: 24
170.168.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:04:70:53:ab:5f:57:58:fa:45:4c:94:9a:49:1b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Mar 19 07:34:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98a1b320b23a1a74dfde2069be7288acc39af008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:5d:47:04:dd:bf:ba:bd:0f:99:0a:5d:6f:
83:71:2b:b2:ed:c2:ff:6e:34:8d:2d:bf:41:5d:d7:
e3:d6:d4:dc:65:d4:b4:8c:1c:aa:51:9e:ca:55:9b:
9c:3f:66:b4:5f:c0:c7:eb:ac:4f:56:5f:10:12:01:
8b:6d:97:97:fc:ba:9d:ba:ce:96:f2:57:b0:67:e5:
ad:87:72:87:13:37:dd:5f:c3:9b:13:4e:b3:60:f7:
93:a3:9d:48:9f:e7:36:59:24:0c:6a:b8:cc:3c:5c:
5d:1d:45:e1:bd:14:4a:47:ce:32:4d:a3:bb:d0:6a:
32:5e:b0:d6:a0:51:e2:0e:35:8e:f5:3b:49:c8:f3:
28:05:9e:0b:cb:d8:b1:8f:48:03:2e:d9:27:73:65:
d0:66:70:38:d3:05:27:ae:ca:ca:7d:51:49:11:95:
c9:93:5a:10:4c:7b:3a:c0:fc:17:8f:07:16:c6:4e:
44:eb:05:de:42:47:d8:ed:e6:de:00:01:bd:29:24:
04:d3:5c:26:d0:14:43:73:22:fb:bb:23:78:b6:c3:
7a:4b:e8:0a:8d:df:23:4b:31:2f:10:99:3a:76:01:
71:01:76:e2:f6:57:db:98:da:e2:f7:6d:93:3d:73:
46:78:d5:66:37:4b:24:ac:85:a4:d4:5c:66:e6:0f:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A1:B3:20:B2:3A:1A:74:DF:DE:20:69:BE:72:88:AC:C3:9A:F0:08
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/mKGzILI6GnTf3iBpvnKIrMOa8Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.4.0/24
130.49.7.0/24
130.49.13.0/24
130.49.18.0/23
130.49.23.0/24
130.49.26.0/24
130.49.28.0/24
130.49.33.0-130.49.34.255
130.49.38.0/24
130.49.41.0/24
130.49.43.0/24
130.49.48.0/23
130.49.54.0/24
130.49.56.0/24
130.49.59.0/24
130.49.63.0-130.49.64.255
130.49.69.0/24
130.49.71.0/24
130.49.74.0/24
130.49.82.0/23
130.49.88.0/24
130.49.90.0/24
130.49.93.0/24
130.49.97.0-130.49.98.255
130.49.103.0/24
130.49.105.0/24
130.49.109.0/24
130.49.116.0/24
130.49.118.0/24
130.49.123.0-130.49.124.255
138.249.29.0-138.249.31.255
138.249.36.0/24
138.249.38.0/23
138.249.44.0/23
138.249.47.0-138.249.51.255
138.249.53.0/24
138.249.55.0/24
138.249.57.0/24
138.249.60.0-138.249.62.255
138.249.64.0-138.249.74.255
138.249.76.0/24
138.249.78.0-138.249.83.255
138.249.85.0/24
138.249.87.0/24
138.249.89.0/24
138.249.92.0-138.249.97.255
138.249.99.0-138.249.101.255
138.249.111.0/24
138.249.113.0-138.249.114.255
138.249.152.0/24
138.249.159.0/24
138.249.164.0/24
138.249.183.0/24
138.249.192.0/24
138.249.216.0/24
138.249.225.0/24
138.249.230.0/24
138.249.247.0/24
155.212.33.0/24
155.212.40.0/24
155.212.42.0/24
155.212.47.0-155.212.48.255
155.212.52.0/24
155.212.54.0/24
155.212.57.0/24
155.212.61.0-155.212.62.255
155.212.68.0/23
155.212.73.0/24
155.212.76.0/24
155.212.78.0/24
155.212.83.0-155.212.84.255
155.212.88.0/24
155.212.90.0/24
155.212.93.0/24
155.212.97.0-155.212.98.255
155.212.103.0/24
155.212.105.0/24
155.212.112.0/24
155.212.116.0/24
155.212.118.0/24
155.212.123.0-155.212.124.255
170.168.205.0/24
170.168.213.0-170.168.214.255
170.168.222.0/24
170.168.229.0/24
170.168.231.0/24
170.168.239.0/24
170.168.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5c:44:89:63:20:28:71:cb:e8:11:e0:e9:5f:61:9c:e7:a5:
a8:91:39:96:d4:d9:34:ec:67:39:87:43:dc:18:40:04:6b:5f:
81:7e:37:47:a0:7e:6a:9e:f2:41:37:fe:c1:b1:6d:24:04:3e:
8b:a2:4e:71:54:a8:92:e1:a1:10:48:cd:16:4f:1a:02:d6:40:
90:dc:9a:b3:67:70:fd:8f:3e:02:44:63:8c:da:b0:b2:38:87:
13:57:82:c4:90:0e:b5:ea:2d:27:b4:c7:8d:f8:99:55:2d:5a:
ae:9c:ee:28:e7:f2:25:a5:73:b0:f3:00:01:bd:93:3d:d7:f0:
8d:e9:2c:90:58:76:eb:9a:b8:b5:36:83:ad:c7:4e:3d:ff:4e:
6d:cb:f1:01:a6:5c:b6:9e:2f:02:2e:78:d9:67:75:62:f6:ff:
1a:c8:04:dd:e4:96:b8:fb:e4:c1:5f:90:db:da:8c:93:c4:d2:
e3:7b:cb:a9:82:d7:77:1d:39:46:a7:3a:bd:d6:3d:62:6c:59:
80:0f:b2:4e:df:b4:e3:a3:a9:54:c9:e9:d8:e2:b2:95:10:7b:
af:c0:02:27:06:b0:ea:92:a2:d7:53:9c:d2:66:ee:9b:f4:29:
1f:76:ac:0f:90:05:6c:bb:eb:4e:28:0d:7d:a7:8d:43:24:df:
24:c2:62:a8
-----BEGIN CERTIFICATE-----
MIIHoTCCBomgAwIBAgISAZ0FBHBTq19XWPpFTJSaSRsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYwMzE5MDczNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGExYjMyMGIyM2ExYTc0ZGZkZTIwNjliZTcyODhhY2MzOWFmMDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fJdRwTdv7q9D5kKXW+DcSuy7cL/
bjSNLb9BXdfj1tTcZdS0jByqUZ7KVZucP2a0X8DH66xPVl8QEgGLbZeX/Lqdus6W
8lewZ+Wth3KHEzfdX8ObE06zYPeTo51In+c2WSQMarjMPFxdHUXhvRRKR84yTaO7
0GoyXrDWoFHiDjWO9TtJyPMoBZ4Ly9ixj0gDLtknc2XQZnA40wUnrsrKfVFJEZXJ
k1oQTHs6wPwXjwcWxk5E6wXeQkfY7ebeAAG9KSQE01wm0BRDcyL7uyN4tsN6S+gK
jd8jSzEvEJk6dgFxAXbi9lfbmNri922TPXNGeNVmN0skrIWk1Fxm5g85qQIDAQAB
o4IErTCCBKkwHQYDVR0OBBYEFJihsyCyOhp0394gab5yiKzDmvAIMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvbUtHeklMSTZHblRmM2lCcHZuS0lyTU9hOEFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICwQYIKwYBBQUHAQcBAf8EggKwMIICrDCCAqgEAgABMIIC
oAMEAIIxBAMEAIIxBwMEAIIxDQMEAYIxEgMEAIIxFwMEAIIxGgMEAIIxHDAMAwQA
gjEhAwQAgjEiAwQAgjEmAwQAgjEpAwQAgjErAwQBgjEwAwQAgjE2AwQAgjE4AwQA
gjE7MAwDBACCMT8DBACCMUADBACCMUUDBACCMUcDBACCMUoDBAGCMVIDBACCMVgD
BACCMVoDBACCMV0wDAMEAIIxYQMEAIIxYgMEAIIxZwMEAIIxaQMEAIIxbQMEAIIx
dAMEAIIxdjAMAwQAgjF7AwQAgjF8MAwDBACK+R0DBAWK+QADBACK+SQDBAGK+SYD
BAGK+SwwDAMEAIr5LwMEAor5MAMEAIr5NQMEAIr5NwMEAIr5OTAMAwQCivk8AwQA
ivk+MAwDBAaK+UADBACK+UoDBACK+UwwDAMEAYr5TgMEAor5UAMEAIr5VQMEAIr5
VwMEAIr5WTAMAwQCivlcAwQBivlgMAwDBACK+WMDBAGK+WQDBACK+W8wDAMEAIr5
cQMEAIr5cgMEAIr5mAMEAIr5nwMEAIr5pAMEAIr5twMEAIr5wAMEAIr52AMEAIr5
4QMEAIr55gMEAIr59wMEAJvUIQMEAJvUKAMEAJvUKjAMAwQAm9QvAwQAm9QwAwQA
m9Q0AwQAm9Q2AwQAm9Q5MAwDBACb1D0DBACb1D4DBAGb1EQDBACb1EkDBACb1EwD
BACb1E4wDAMEAJvUUwMEAJvUVAMEAJvUWAMEAJvUWgMEAJvUXTAMAwQAm9RhAwQA
m9RiAwQAm9RnAwQAm9RpAwQAm9RwAwQAm9R0AwQAm9R2MAwDBACb1HsDBACb1HwD
BACqqM0wDAMEAKqo1QMEAKqo1gMEAKqo3gMEAKqo5QMEAKqo5wMEAKqo7wMEAKqo
+TANBgkqhkiG9w0BAQsFAAOCAQEAa1xEiWMgKHHL6BHg6V9hnOelqJE5ltTZNOxn
OYdD3BhABGtfgX43R6B+ap7yQTf+wbFtJAQ+i6JOcVSokuGhEEjNFk8aAtZAkNya
s2dw/Y8+AkRjjNqwsjiHE1eCxJAOteotJ7THjfiZVS1arpzuKOfyJaVzsPMAAb2T
PdfwjekskFh265q4tTaDrcdOPf9ObcvxAaZctp4vAi542Wd1Yvb/GsgE3eSWuPvk
wV+Q29qMk8TS43vLqYLXdx05Rqc6vdY9YmxZgA+yTt+046OpVMnp2OKylRB7r8AC
Jwaw6pKi11Oc0mbum/QpH3asD5AFbLvrTigNfaeNQyTfJMJiqA==
-----END CERTIFICATE-----
Generated at Sun Mar 22 01:53:06 2026 by rpki-client