Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e3q-ZfoNt7826xjRPM0ie5Wr_Jk.roa
File: e3q-ZfoNt7826xjRPM0ie5Wr_Jk.roa (raw, json)
Hash identifier: nv2Bo7FuQ3eE6N28Dc5W9RgWfRTkobfFHvIqLm8cuuo=
Subject key identifier: 7B:7A:BE:65:FA:0D:B7:BF:36:EB:18:D1:3C:CD:22:7B:95:AB:FC:99
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019C73D486C8DF97C49E2BB1EC98978A6B51
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e3q-ZfoNt7826xjRPM0ie5Wr_Jk.roa
Signing time: Thu 19 Feb 2026 02:57:13 +0000
ROA not before: Thu 19 Feb 2026 02:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 212.134.180.0/22 maxlen: 22
212.134.184.0/22 maxlen: 22
212.134.192.0/22 maxlen: 22
212.134.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:73:d4:86:c8:df:97:c4:9e:2b:b1:ec:98:97:8a:6b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Feb 19 02:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b7abe65fa0db7bf36eb18d13ccd227b95abfc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9c:34:94:10:85:ff:6d:5e:7b:9b:92:9d:89:
1b:7b:36:e0:68:f0:b0:ca:cf:5e:12:f7:bf:57:6e:
63:1f:b0:07:e4:0c:d1:f1:fe:57:0d:13:ed:b8:fa:
28:10:0d:e8:07:f6:58:76:e1:f0:9b:a6:d8:85:df:
4e:d4:f2:9e:74:ad:f3:b2:9b:f2:b8:eb:78:d9:8f:
dc:07:68:9b:6d:e2:38:73:da:dc:9e:93:79:38:0e:
6f:94:cc:d1:e3:53:39:81:cf:40:19:02:bf:48:fd:
c9:95:37:7f:30:5f:06:84:94:5b:c7:fc:3b:1a:9e:
78:29:1b:67:c9:3a:df:32:91:a4:5e:ea:70:48:62:
7f:7c:29:30:c6:63:1d:e6:10:4a:b8:70:96:c9:1a:
ee:9c:ab:19:ce:68:50:56:f7:a9:a8:f9:3c:2a:d7:
4a:69:7d:88:3a:3d:88:8c:0a:cf:dc:c9:12:a6:c1:
79:93:79:05:e5:83:dd:5e:d1:6f:df:d6:53:c9:29:
4c:1e:e4:34:e9:b9:41:26:c6:fe:70:4f:7f:56:13:
ce:50:1e:0c:e2:da:d7:91:56:65:7a:ed:1c:ed:67:
9f:59:79:29:d4:11:f7:a4:22:70:6a:49:12:03:84:
30:93:a5:0b:ab:3d:75:ba:7c:40:cb:9c:b2:19:5e:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:BE:65:FA:0D:B7:BF:36:EB:18:D1:3C:CD:22:7B:95:AB:FC:99
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e3q-ZfoNt7826xjRPM0ie5Wr_Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.180.0-212.134.187.255
212.134.192.0/22
212.134.200.0/22
Signature Algorithm: sha256WithRSAEncryption
35:21:ad:76:37:20:08:f5:f4:9e:51:37:e7:98:cc:00:81:2a:
f7:d7:43:8f:43:2c:06:c7:29:07:dd:c6:19:d7:84:7b:24:40:
75:38:f0:50:dd:62:14:40:6d:8d:ca:c0:65:1a:f7:44:cd:95:
8d:42:b7:cd:24:78:f7:f6:0a:74:50:30:ce:a9:67:1b:55:00:
7e:74:54:c2:cf:b0:4c:61:95:a5:d7:b4:63:d8:c4:11:a1:eb:
aa:56:8b:4a:fb:1b:88:ae:07:56:ea:46:b0:94:09:a1:d1:87:
7e:15:28:65:d2:88:5f:d5:38:8f:b9:b0:3d:be:72:bc:2e:37:
93:d3:e7:4b:25:74:72:af:e6:9b:56:72:16:23:09:4c:ef:e0:
f3:f9:48:df:a5:80:76:78:44:8c:6b:55:a1:12:55:19:c3:98:
8c:6d:b4:97:6b:c4:68:e7:a2:fa:29:47:9f:a8:3d:81:8c:06:
20:cd:24:9b:fa:26:c4:37:a5:5d:02:08:dc:08:82:9b:46:71:
12:bb:bb:32:70:09:3d:1d:e9:6c:04:2f:14:75:76:6d:44:21:
2e:fe:5a:61:ae:3e:f5:a6:75:d2:bc:c7:28:aa:c1:68:c6:6a:
d1:cc:b5:84:c2:e9:7c:c5:c5:71:20:94:a0:3f:e2:7f:5d:7d:
d9:fe:17:a3
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZxz1IbI35fEniux7JiXimtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMjE5MDI1NzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjdhYmU2NWZhMGRiN2JmMzZlYjE4ZDEzY2NkMjI3Yjk1YWJmYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJw0lBCF/21ee5uSnYkbezbgaPCw
ys9eEve/V25jH7AH5AzR8f5XDRPtuPooEA3oB/ZYduHwm6bYhd9O1PKedK3zspvy
uOt42Y/cB2ibbeI4c9rcnpN5OA5vlMzR41M5gc9AGQK/SP3JlTd/MF8GhJRbx/w7
Gp54KRtnyTrfMpGkXupwSGJ/fCkwxmMd5hBKuHCWyRrunKsZzmhQVvepqPk8KtdK
aX2IOj2IjArP3MkSpsF5k3kF5YPdXtFv39ZTySlMHuQ06blBJsb+cE9/VhPOUB4M
4trXkVZleu0c7WefWXkp1BH3pCJwakkSA4Qwk6ULqz11unxAy5yyGV6e6QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHt6vmX6Dbe/NusY0TzNInuVq/yZMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZTNxLVpmb050NzgyNnhqUlBNMGllNVdyX0prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBALUhrQD
BALUhrgDBALUhsADBALUhsgwDQYJKoZIhvcNAQELBQADggEBADUhrXY3IAj19J5R
N+eYzACBKvfXQ49DLAbHKQfdxhnXhHskQHU48FDdYhRAbY3KwGUa90TNlY1Ct80k
ePf2CnRQMM6pZxtVAH50VMLPsExhlaXXtGPYxBGh66pWi0r7G4iuB1bqRrCUCaHR
h34VKGXSiF/VOI+5sD2+crwuN5PT50sldHKv5ptWchYjCUzv4PP5SN+lgHZ4RIxr
VaESVRnDmIxttJdrxGjnovopR5+oPYGMBiDNJJv6JsQ3pV0CCNwIgptGcRK7uzJw
CT0d6WwELxR1dm1EIS7+WmGuPvWmddK8xyiqwWjGatHMtYTC6XzFxXEglKA/4n9d
fdn+F6M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:18 2026 by rpki-client