Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/MuZpcQxCYFbpdhNMaWIawC93IAg.roa
File: MuZpcQxCYFbpdhNMaWIawC93IAg.roa (raw, json)
Hash identifier: 8Wm4i/ZiIJIdZW0uUwFRqoO5VUKK2cDtONlLt0vjurU=
Subject key identifier: 32:E6:69:71:0C:42:60:56:E9:76:13:4C:69:62:1A:C0:2F:77:20:08
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 01A12F272CD2628EE2A6AE62BBDAFCE2A4BC
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/MuZpcQxCYFbpdhNMaWIawC93IAg.roa
Signing time: Mon 12 Oct 2026 08:07:38 +0000
ROA not before: Mon 12 Oct 2026 08:07:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.62.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:27:2c:d2:62:8e:e2:a6:ae:62:bb:da:fc:e2:a4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Oct 12 08:07:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32e669710c426056e976134c69621ac02f772008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:26:48:0b:e8:7a:2b:58:de:99:5a:9f:1f:
6c:80:47:81:28:c9:35:ad:95:bd:9e:03:c3:9d:74:
9e:0b:57:6b:7b:28:f1:dd:17:35:f9:1a:8d:65:b7:
10:98:fe:77:a5:a4:72:4f:9f:b9:0b:dc:7f:5e:eb:
9c:ac:c3:c5:8b:f8:f1:b7:97:f9:ca:37:31:fe:fb:
36:67:55:8d:e4:71:65:be:15:05:00:b4:b8:51:f2:
07:b2:4f:18:96:36:18:82:36:ed:1f:99:08:31:25:
cb:57:d4:38:35:dc:01:e1:f2:fc:4a:54:9c:72:21:
de:0e:82:1d:13:f3:a1:5d:29:9e:2f:df:71:19:67:
cc:ea:b1:cc:82:0a:f4:ba:de:0b:80:df:45:9d:b0:
47:3c:64:0e:be:4b:fa:40:bd:b5:37:a4:da:e6:81:
e5:53:e4:85:37:07:6c:96:3d:3c:ef:7c:ed:d6:7d:
4b:28:f8:96:e4:e9:9b:d9:e6:dd:b6:8b:0b:d3:e7:
9b:f0:92:ef:6b:65:24:8b:da:cd:c6:75:52:d4:49:
15:81:bd:47:ed:c1:fd:d5:3e:e8:e7:9c:ed:ee:25:
85:d4:e8:5d:01:1c:21:f5:0d:c1:d1:60:4e:97:82:
46:f6:1f:c9:e1:28:23:85:d2:c8:72:c4:8c:cc:54:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E6:69:71:0C:42:60:56:E9:76:13:4C:69:62:1A:C0:2F:77:20:08
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/MuZpcQxCYFbpdhNMaWIawC93IAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.10.0/24
Signature Algorithm: sha256WithRSAEncryption
62:5f:16:3f:96:5b:4e:a8:92:d1:fa:6e:fc:a4:0b:0d:8c:36:
d1:16:6c:f7:32:3c:02:ac:64:fe:36:8a:90:40:df:53:e1:42:
69:91:2e:9f:a5:0a:bc:f8:bb:4b:db:43:26:d1:d2:74:c4:c7:
71:b1:48:0e:a6:3b:80:cd:64:94:23:10:1f:5b:03:f5:31:0c:
35:0d:85:fe:f5:bd:bc:0b:b5:21:98:12:9d:1f:22:ca:8a:9a:
bb:8c:53:85:e9:72:3c:b3:fe:43:de:39:81:e3:ec:4f:e4:24:
08:fa:9a:ed:cb:0a:ca:45:1e:e5:30:dd:01:55:05:95:77:1b:
37:2f:42:8c:c0:e6:29:ce:f1:6a:a2:e3:c9:47:7c:04:a6:05:
f3:09:6d:ef:b2:eb:ca:db:0d:03:ca:a2:76:ec:13:f5:eb:c8:
97:90:87:94:fb:4a:ed:2c:eb:bf:b7:73:41:2f:e0:65:aa:48:
85:f0:f6:b3:41:14:72:0e:53:99:d7:6b:7c:3f:a1:d4:5a:47:
29:a1:97:88:0e:2c:08:e4:79:ac:0f:99:7e:9e:87:ab:b0:cf:
91:ba:c6:fe:60:89:9c:41:4d:2a:28:4d:fd:c8:04:21:3a:96:
bc:24:80:7f:1b:1b:3d:9a:7a:13:a4:48:fc:cf:45:77:03:76:
99:49:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:46:16 2026 by rpki-client