Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Iv5LpgM3xGWZpGb_6m4C6ZxLEXc.roa
File: Iv5LpgM3xGWZpGb_6m4C6ZxLEXc.roa (raw, json)
Hash identifier: TRq6z5cw8KU98yZHRuqmbDL34wTIpDgzbHRRNdPhrFk=
Subject key identifier: 22:FE:4B:A6:03:37:C4:65:99:A4:66:FF:EA:6E:02:E9:9C:4B:11:77
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D431FFD658B0BE3446192B5E1D8AD46DB
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Iv5LpgM3xGWZpGb_6m4C6ZxLEXc.roa
Signing time: Tue 31 Mar 2026 09:01:03 +0000
ROA not before: Tue 31 Mar 2026 09:01:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402203
IP address blocks: 212.134.129.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:1f:fd:65:8b:0b:e3:44:61:92:b5:e1:d8:ad:46:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 31 09:01:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22fe4ba60337c46599a466ffea6e02e99c4b1177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:5b:59:69:7f:9f:47:27:f8:55:2f:d1:62:
da:a4:7d:6f:16:c5:df:16:fe:02:2e:d2:c0:22:d3:
f5:e8:4b:5d:44:ba:e9:b2:85:35:1f:14:b4:64:f4:
7c:ce:7f:ab:e3:c2:05:c8:4b:85:97:b6:d1:10:c4:
dd:ab:71:d3:14:bc:0c:10:e0:85:2b:d2:32:27:13:
0d:4e:58:ec:54:c1:79:d6:2b:87:01:4e:17:13:8f:
6d:e7:4a:4a:98:5b:67:6f:34:b6:f8:e7:77:ff:c1:
61:dd:dc:a7:b4:24:d9:be:f3:19:dd:f2:95:90:de:
f5:52:fb:6c:60:c7:bf:74:93:69:c7:3b:ee:2a:83:
c4:1b:73:04:27:02:e4:03:52:09:64:03:db:c8:d0:
47:21:c5:b0:67:a6:33:c3:9f:d6:b3:0d:f8:59:8f:
ab:17:bc:72:03:f9:02:07:9e:3b:0f:61:a5:96:8a:
30:78:aa:d8:fa:90:b7:6a:28:1e:8c:bd:33:90:00:
bd:a4:6a:53:7d:f3:94:46:c8:02:ae:b8:b4:fc:d5:
f0:7b:4c:93:4b:6f:9c:4d:01:af:ee:e7:12:24:e0:
d2:a9:2d:69:8c:1f:ab:d7:9d:5a:0e:90:bf:af:4c:
ba:aa:aa:23:37:06:04:b7:12:14:b1:40:9b:e4:55:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FE:4B:A6:03:37:C4:65:99:A4:66:FF:EA:6E:02:E9:9C:4B:11:77
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Iv5LpgM3xGWZpGb_6m4C6ZxLEXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.129.0/24
212.135.165.0-212.135.166.255
Signature Algorithm: sha256WithRSAEncryption
98:ab:30:1b:ed:ee:23:23:b0:e9:ea:9b:b4:ec:61:c5:c2:0d:
75:7b:e3:b2:3a:f3:d0:c4:8c:34:56:ee:a1:d0:e6:a6:fd:35:
0b:9f:db:aa:03:9d:31:5f:e0:84:41:c1:8f:02:42:60:68:0b:
99:04:01:82:24:ec:eb:52:ff:9a:a1:5a:70:10:2a:20:23:8d:
7b:1b:eb:73:4b:21:f4:43:e3:8b:e8:28:65:27:4e:7d:c9:bd:
10:5a:a7:7c:51:f1:37:1a:cf:e9:1f:9c:d9:ad:87:a8:00:39:
b0:21:1d:52:73:42:a5:88:7b:1d:55:00:50:5e:88:f7:6c:02:
9d:8f:11:30:7e:4a:b9:03:77:be:bd:31:9c:21:19:6c:8f:8c:
7c:d9:b8:dc:8e:19:78:86:5d:fa:2e:13:3b:8a:e8:b7:13:26:
69:dd:38:99:1a:13:e4:76:a3:cb:f2:30:bc:3d:a0:18:c5:c4:
31:ad:97:6b:51:11:3f:3e:4e:2d:68:e5:44:2c:65:0a:5d:3a:
fe:ab:f2:81:39:e0:7b:f2:5f:db:12:94:3d:6c:ad:aa:84:d8:
95:d3:bb:ec:79:33:20:9a:71:92:2b:d1:62:23:82:b7:39:77:
96:bf:89:b1:44:99:8e:9c:eb:37:2d:2a:a9:17:25:7c:03:f9:
11:3d:21:3b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ1DH/1liwvjRGGSteHYrUbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMzMxMDkwMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmZlNGJhNjAzMzdjNDY1OTlhNDY2ZmZlYTZlMDJlOTljNGIxMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP1bWWl/n0cn+FUv0WLapH1vFsXf
Fv4CLtLAItP16EtdRLrpsoU1HxS0ZPR8zn+r48IFyEuFl7bREMTdq3HTFLwMEOCF
K9IyJxMNTljsVMF51iuHAU4XE49t50pKmFtnbzS2+Od3/8Fh3dyntCTZvvMZ3fKV
kN71UvtsYMe/dJNpxzvuKoPEG3MEJwLkA1IJZAPbyNBHIcWwZ6Yzw5/Wsw34WY+r
F7xyA/kCB547D2GllooweKrY+pC3aigejL0zkAC9pGpTffOURsgCrri0/NXwe0yT
S2+cTQGv7ucSJODSqS1pjB+r151aDpC/r0y6qqojNwYEtxIUsUCb5FUOBQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCL+S6YDN8RlmaRm/+puAumcSxF3MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvSXY1THBnTTN4R1dacEdiXzZtNEM2WnhMRVhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA1IaBMAwD
BADUh6UDBADUh6YwDQYJKoZIhvcNAQELBQADggEBAJirMBvt7iMjsOnqm7TsYcXC
DXV747I689DEjDRW7qHQ5qb9NQuf26oDnTFf4IRBwY8CQmBoC5kEAYIk7OtS/5qh
WnAQKiAjjXsb63NLIfRD44voKGUnTn3JvRBap3xR8Tcaz+kfnNmth6gAObAhHVJz
QqWIex1VAFBeiPdsAp2PETB+SrkDd769MZwhGWyPjHzZuNyOGXiGXfouEzuK6LcT
JmndOJkaE+R2o8vyMLw9oBjFxDGtl2tRET8+Ti1o5UQsZQpdOv6r8oE54HvyX9sS
lD1sraqE2JXTu+x5MyCacZIr0WIjgrc5d5a/ibFEmY6c6zctKqkXJXwD+RE9ITs=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:22 2026 by rpki-client