Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/mQzPBCn1hTNY_P5P3NAP55RL3q0.roa
File: mQzPBCn1hTNY_P5P3NAP55RL3q0.roa (raw, json)
Hash identifier: fdbEqDu36Rjky4ca8NsPiqNhPV42pvLHrVrMOmAlRy4=
Subject key identifier: 99:0C:CF:04:29:F5:85:33:58:FC:FE:4F:DC:D0:0F:E7:94:4B:DE:AD
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019FB1FFBA2BFB48D243BA3B29642FD58600
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/mQzPBCn1hTNY_P5P3NAP55RL3q0.roa
Signing time: Thu 30 Jul 2026 07:49:14 +0000
ROA not before: Thu 30 Jul 2026 07:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204582
IP address blocks: 62.76.248.0/24 maxlen: 24
62.76.249.0/24 maxlen: 24
62.76.250.0/24 maxlen: 24
62.76.251.0/24 maxlen: 24
62.76.252.0/24 maxlen: 24
62.76.255.0/24 maxlen: 24
194.85.31.0/24 maxlen: 24
194.85.77.0/24 maxlen: 24
194.85.78.0/24 maxlen: 24
194.85.79.0/24 maxlen: 24
212.193.116.0/24 maxlen: 24
212.193.117.0/24 maxlen: 24
212.193.118.0/24 maxlen: 24
212.193.119.0/24 maxlen: 24
212.193.120.0/24 maxlen: 24
212.193.121.0/24 maxlen: 24
212.193.122.0/24 maxlen: 24
212.193.123.0/24 maxlen: 24
212.193.124.0/24 maxlen: 24
212.193.125.0/24 maxlen: 24
212.193.126.0/24 maxlen: 24
212.193.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:ff:ba:2b:fb:48:d2:43:ba:3b:29:64:2f:d5:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jul 30 07:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=990ccf0429f5853358fcfe4fdcd00fe7944bdead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:70:4b:5a:e4:b7:e1:d6:e3:f8:b4:2a:93:
03:93:5f:f1:0e:65:25:93:2d:f5:33:e9:20:87:34:
bd:a7:f9:06:4d:79:dc:f0:e5:9a:39:d1:1d:c2:5c:
4e:4a:eb:71:cd:ad:84:ee:0c:30:91:be:ab:cd:76:
20:3c:d4:8a:59:4d:21:40:ab:32:fa:52:bb:c2:7d:
6a:fb:9c:c5:8a:6e:8f:f9:39:58:0d:7d:5c:59:0e:
51:2e:3a:7d:a4:f6:e3:fa:b7:3e:bd:05:fd:9a:dd:
cf:e5:d4:b0:5e:81:f5:9a:f2:45:d7:82:81:a2:c8:
a5:d1:96:83:ed:3d:a4:73:61:0b:02:28:5c:51:bf:
2c:77:83:e1:a4:49:f4:08:60:81:07:c8:7b:53:e0:
47:37:39:18:35:85:d3:99:08:e4:ce:cf:6c:76:ed:
c4:00:bd:19:bb:fc:2b:b0:e7:cc:27:fa:16:5f:5d:
d2:9e:c8:c6:13:e4:20:04:3d:06:14:b1:af:69:74:
66:17:a1:0f:a9:d2:e3:ba:15:6d:74:c2:0a:eb:74:
03:cb:e8:5b:f0:8c:6e:b6:22:5e:da:8c:31:83:15:
30:be:29:ee:94:50:f3:ff:16:11:dc:3b:a4:27:76:
fc:2e:c7:5b:d0:8a:bf:c9:b2:8c:d3:83:ec:9e:36:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:CF:04:29:F5:85:33:58:FC:FE:4F:DC:D0:0F:E7:94:4B:DE:AD
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/mQzPBCn1hTNY_P5P3NAP55RL3q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.248.0-62.76.252.255
62.76.255.0/24
194.85.31.0/24
194.85.77.0-194.85.79.255
212.193.116.0-212.193.127.255
Signature Algorithm: sha256WithRSAEncryption
80:ea:f5:b5:0f:8d:5b:a4:3a:b4:ab:50:ae:c3:6f:e8:b9:2e:
63:ce:95:cd:44:8f:69:1c:6f:93:d2:9f:cb:06:ad:3a:47:a8:
40:80:5c:3c:40:bf:c2:56:92:e1:a6:f3:72:72:85:d8:5e:33:
a6:db:39:01:4b:f1:60:96:5c:6f:03:4d:4a:a2:5c:86:1c:4a:
30:1e:b8:4c:77:fe:7d:18:78:94:91:10:84:3f:49:92:ab:73:
cf:36:78:f9:e6:93:28:0f:b5:a6:b0:4a:c0:26:7a:98:58:dd:
a0:b1:3f:7e:f2:a9:b5:5b:59:94:09:56:4e:63:46:b8:21:1b:
e9:7f:3c:fe:16:3b:8e:6b:51:d2:31:70:2e:f2:a5:dc:71:8b:
3e:ad:19:be:c4:b0:28:9b:eb:17:6b:47:ca:ab:7c:f7:0a:ce:
6a:da:72:65:8f:44:bb:64:39:e6:01:72:d3:6e:cc:61:8a:ee:
e3:cf:27:11:ba:d1:5f:9b:18:2c:41:ce:10:b9:88:b3:0f:5f:
50:09:dd:3a:68:25:d5:2f:7d:cb:cb:6c:dc:d1:39:83:d7:80:
c7:e5:1f:c9:a1:23:7b:e4:ba:c6:fd:d0:40:62:a8:27:ee:d6:
dd:60:b4:9a:79:fa:d2:93:0b:82:45:75:31:88:34:54:38:c5:
4c:b3:e2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:06 2026 by rpki-client