Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PUC6ATQqtusGb0DSqq7CoyAlNHs.roa
File: PUC6ATQqtusGb0DSqq7CoyAlNHs.roa (raw, json)
Hash identifier: bBRLEATjsJOXIwpMUi5JYAdYexLIoC0eid7noKN/uq8=
Subject key identifier: 3D:40:BA:01:34:2A:B6:EB:06:6F:40:D2:AA:AE:C2:A3:20:25:34:7B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019CA737F22DE4C1677515DB7A5A39C45A31
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PUC6ATQqtusGb0DSqq7CoyAlNHs.roa
Signing time: Sun 01 Mar 2026 02:26:27 +0000
ROA not before: Sun 01 Mar 2026 02:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.134.18.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.23.0/24 maxlen: 24
212.134.24.0/24 maxlen: 24
212.134.25.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.39.0/24 maxlen: 24
212.134.40.0/22 maxlen: 24
212.134.47.0/24 maxlen: 24
212.134.48.0/22 maxlen: 24
212.134.56.0/23 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.81.0/24 maxlen: 24
212.134.82.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.89.0/24 maxlen: 24
212.134.95.0/24 maxlen: 24
212.134.96.0/24 maxlen: 24
212.134.98.0/23 maxlen: 24
212.134.104.0/23 maxlen: 24
212.134.106.0/23 maxlen: 24
212.134.109.0/24 maxlen: 24
212.134.110.0/23 maxlen: 24
212.134.112.0/22 maxlen: 24
212.134.128.0/24 maxlen: 24
212.134.131.0/24 maxlen: 24
212.134.132.0/22 maxlen: 24
212.134.140.0/22 maxlen: 24
212.134.148.0/24 maxlen: 24
212.134.152.0/22 maxlen: 24
212.134.156.0/24 maxlen: 24
212.134.157.0/24 maxlen: 24
212.134.160.0/22 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.175.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.188.0/22 maxlen: 24
212.134.196.0/22 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.212.0/22 maxlen: 24
212.134.216.0/22 maxlen: 24
212.134.228.0/22 maxlen: 24
212.134.228.0/24 maxlen: 24
212.134.232.0/22 maxlen: 24
212.134.232.0/24 maxlen: 24
212.134.236.0/22 maxlen: 24
212.134.244.0/22 maxlen: 24
212.134.248.0/24 maxlen: 24
212.134.252.0/22 maxlen: 24
212.135.20.0/24 maxlen: 24
212.135.21.0/24 maxlen: 24
212.135.22.0/23 maxlen: 24
212.135.24.0/23 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.28.0/23 maxlen: 24
212.135.80.0/20 maxlen: 24
212.135.128.0/23 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.155.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.162.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.167.0/24 maxlen: 24
212.135.168.0/24 maxlen: 24
212.135.169.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
212.135.204.0/22 maxlen: 24
212.135.240.0/23 maxlen: 24
212.135.241.0/24 maxlen: 24
212.135.242.0/24 maxlen: 24
212.135.243.0/24 maxlen: 24
212.135.246.0/24 maxlen: 24
212.135.247.0/24 maxlen: 24
212.135.248.0/23 maxlen: 24
212.135.250.0/24 maxlen: 24
212.135.251.0/24 maxlen: 24
212.135.252.0/23 maxlen: 24
212.135.252.0/24 maxlen: 24
212.135.254.0/24 maxlen: 24
212.135.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Mar 2026 00:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:37:f2:2d:e4:c1:67:75:15:db:7a:5a:39:c4:5a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 1 02:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d40ba01342ab6eb066f40d2aaaec2a32025347b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:67:f3:07:fc:01:3c:0a:3b:b1:db:d5:d5:
da:a6:b4:c4:53:6d:ee:d7:65:cd:b5:24:4f:72:16:
55:64:b2:0d:9f:7c:d9:47:77:fd:73:b5:6f:cb:d4:
7d:55:f0:a6:e4:87:96:80:75:7a:dd:f2:f1:5f:4e:
bd:aa:99:97:1a:64:ee:8c:a1:30:40:2a:b6:ab:25:
e7:2c:75:0d:81:c6:e9:ec:ec:a6:39:70:cc:4f:6b:
c2:02:9f:0c:f5:78:60:ec:b0:f3:b7:4c:76:03:93:
e2:79:c7:c6:c1:b0:4a:5c:67:74:a0:42:12:c6:82:
02:fc:12:b1:e6:70:d3:f3:20:eb:49:39:08:62:23:
26:13:1c:57:89:88:a1:1e:28:22:7e:25:ac:1d:c9:
86:3f:da:3c:3f:ba:08:45:6c:07:e9:fc:8b:2d:dd:
e9:f9:31:07:9a:eb:85:05:a5:63:9b:06:f6:d4:53:
06:e5:95:ed:57:91:65:eb:07:06:9a:4d:60:b9:db:
d1:c0:23:2c:74:18:9c:90:7b:38:45:89:74:74:85:
fb:6e:d1:43:7e:99:9f:34:ff:3f:cd:25:8f:b7:35:
54:dd:d7:ba:50:f2:72:b2:8d:90:a3:cd:ee:0a:84:
26:0c:cd:66:7e:98:b1:54:5a:fb:dd:11:16:1e:17:
74:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:40:BA:01:34:2A:B6:EB:06:6F:40:D2:AA:AE:C2:A3:20:25:34:7B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PUC6ATQqtusGb0DSqq7CoyAlNHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.18.0/23
212.134.22.0-212.134.25.255
212.134.36.0/24
212.134.39.0-212.134.43.255
212.134.47.0-212.134.51.255
212.134.56.0-212.134.58.255
212.134.80.0/22
212.134.89.0/24
212.134.95.0-212.134.96.255
212.134.98.0/23
212.134.104.0/22
212.134.109.0-212.134.115.255
212.134.128.0/24
212.134.131.0-212.134.135.255
212.134.140.0/22
212.134.148.0/24
212.134.152.0-212.134.157.255
212.134.160.0/22
212.134.171.0/24
212.134.175.0/24
212.134.179.0/24
212.134.188.0/22
212.134.196.0/22
212.134.212.0-212.134.219.255
212.134.228.0-212.134.239.255
212.134.244.0-212.134.248.255
212.134.252.0/22
212.135.20.0-212.135.26.255
212.135.28.0/23
212.135.80.0/20
212.135.128.0/23
212.135.135.0/24
212.135.155.0/24
212.135.158.0/24
212.135.161.0-212.135.162.255
212.135.164.0-212.135.173.255
212.135.204.0/22
212.135.240.0/22
212.135.246.0-212.135.255.255
Signature Algorithm: sha256WithRSAEncryption
63:92:f9:4d:b9:a8:69:7e:5c:9c:c1:30:4a:e7:f2:31:9e:20:
8d:7a:c9:64:76:ca:0d:3c:26:e5:74:30:42:95:88:1d:13:cb:
4a:10:62:b5:81:21:08:64:3b:22:22:2e:32:93:5e:c3:64:cc:
41:cf:16:7e:20:65:85:1e:df:91:7f:67:d7:30:b5:51:e7:44:
07:f9:f3:2e:a2:7e:9f:d7:04:fd:fc:74:99:9e:6c:04:0d:01:
80:cb:42:53:13:b8:34:f5:0c:b4:d9:69:51:70:73:fd:03:6e:
78:60:99:61:a0:a3:99:6e:fd:db:bf:62:c0:43:8f:38:01:99:
b5:9b:fd:24:d4:31:7a:88:29:f2:ba:b4:2d:86:04:75:94:f1:
29:d1:6f:4b:7b:39:e8:e5:a5:a5:9b:02:a7:4c:f1:1c:e6:7c:
07:0a:ba:c8:44:f7:88:6d:0d:88:c6:df:08:ca:52:79:1b:64:
fa:b4:46:ca:9f:fd:42:95:64:48:0d:13:e9:55:64:65:26:8e:
51:dc:56:a9:23:dc:d9:d5:3c:c5:fa:ac:3e:9e:5d:03:65:73:
c1:ba:1b:9f:d6:90:3e:5c:d7:9c:67:1a:09:46:90:59:39:a0:
0f:77:1a:7d:2f:b5:e8:f8:5b:c2:d0:10:e1:f1:3f:5d:37:83:
6b:77:a3:e9
-----BEGIN CERTIFICATE-----
MIIGYjCCBUqgAwIBAgISAZynN/It5MFndRXbelo5xFoxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMzAxMDIyNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDQwYmEwMTM0MmFiNmViMDY2ZjQwZDJhYWFlYzJhMzIwMjUzNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL1n8wf8ATwKO7Hb1dXaprTEU23u
12XNtSRPchZVZLINn3zZR3f9c7Vvy9R9VfCm5IeWgHV63fLxX069qpmXGmTujKEw
QCq2qyXnLHUNgcbp7OymOXDMT2vCAp8M9Xhg7LDzt0x2A5PiecfGwbBKXGd0oEIS
xoIC/BKx5nDT8yDrSTkIYiMmExxXiYihHigifiWsHcmGP9o8P7oIRWwH6fyLLd3p
+TEHmuuFBaVjmwb21FMG5ZXtV5Fl6wcGmk1gudvRwCMsdBickHs4RYl0dIX7btFD
fpmfNP8/zSWPtzVU3de6UPJyso2Qo83uCoQmDM1mfpixVFr73REWHhd0JwIDAQAB
o4IDbjCCA2owHQYDVR0OBBYEFD1AugE0KrbrBm9A0qquwqMgJTR7MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvUFVDNkFUUXF0dXNHYjBEU3FxN0NveUFsTkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBggYIKwYBBQUHAQcBAf8EggFxMIIBbTCCAWkEAgABMIIB
YQMEAdSGEjAMAwQB1IYWAwQB1IYYAwQA1IYkMAwDBADUhicDBALUhigwDAMEANSG
LwMEAtSGMDAMAwQD1IY4AwQA1IY6AwQC1IZQAwQA1IZZMAwDBADUhl8DBADUhmAD
BAHUhmIDBALUhmgwDAMEANSGbQMEAtSGcAMEANSGgDAMAwQA1IaDAwQD1IaAAwQC
1IaMAwQA1IaUMAwDBAPUhpgDBAHUhpwDBALUhqADBADUhqsDBADUhq8DBADUhrMD
BALUhrwDBALUhsQwDAMEAtSG1AMEAtSG2DAMAwQC1IbkAwQE1IbgMAwDBALUhvQD
BADUhvgDBALUhvwwDAMEAtSHFAMEANSHGgMEAdSHHAMEBNSHUAMEAdSHgAMEANSH
hwMEANSHmwMEANSHnjAMAwQA1IehAwQA1IeiMAwDBALUh6QDBAHUh6wDBALUh8wD
BALUh/AwCwMEAdSH9gMDA9SAMA0GCSqGSIb3DQEBCwUAA4IBAQBjkvlNuahpflyc
wTBK5/IxniCNeslkdsoNPCbldDBClYgdE8tKEGK1gSEIZDsiIi4yk17DZMxBzxZ+
IGWFHt+Rf2fXMLVR50QH+fMuon6f1wT9/HSZnmwEDQGAy0JTE7g09Qy02WlRcHP9
A254YJlhoKOZbv3bv2LAQ484AZm1m/0k1DF6iCnyurQthgR1lPEp0W9Lezno5aWl
mwKnTPEc5nwHCrrIRPeIbQ2Ixt8IylJ5G2T6tEbKn/1ClWRIDRPpVWRlJo5R3Fap
I9zZ1TzF+qw+nl0DZXPBuhuf1pA+XNecZxoJRpBZOaAPdxp9L7Xo+FvC0BDh8T9d
N4Nrd6Pp
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:50:31 2026 by rpki-client