Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uq6JeLW_aTaK35Ilp_5Jjj-7JAg.roa
File: uq6JeLW_aTaK35Ilp_5Jjj-7JAg.roa (raw, json)
Hash identifier: /chfbTEg0xoKs8mT8wDksNeQHy5IJBY1oRGifU/25z0=
Subject key identifier: BA:AE:89:78:B5:BF:69:36:8A:DF:92:25:A7:FE:49:8E:3F:BB:24:08
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019C7A4E8AA4DC034AC6B1096B5578FCF76D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uq6JeLW_aTaK35Ilp_5Jjj-7JAg.roa
Signing time: Fri 20 Feb 2026 09:08:13 +0000
ROA not before: Fri 20 Feb 2026 09:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.204.104.0/21 maxlen: 24
212.134.38.0/24 maxlen: 24
212.134.45.0/24 maxlen: 24
212.134.59.0/24 maxlen: 24
212.134.116.0/22 maxlen: 24
212.134.128.0/22 maxlen: 24
212.134.136.0/22 maxlen: 24
212.134.158.0/24 maxlen: 24
212.134.204.0/22 maxlen: 24
212.134.248.0/22 maxlen: 24
212.135.16.0/22 maxlen: 24
212.135.134.0/24 maxlen: 24
212.135.149.0/24 maxlen: 24
212.135.152.0/24 maxlen: 24
212.135.159.0/24 maxlen: 24
212.135.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:4e:8a:a4:dc:03:4a:c6:b1:09:6b:55:78:fc:f7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Feb 20 09:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baae8978b5bf69368adf9225a7fe498e3fbb2408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:51:fa:82:e3:23:df:5e:b8:37:f3:b8:53:
86:a2:1a:46:57:ae:2f:e9:77:fd:45:29:f5:96:3b:
39:77:e4:5d:8c:83:e1:f2:5a:07:12:88:01:7c:e1:
0f:b7:fb:3f:0d:d7:ba:e7:5b:6d:14:bb:12:56:56:
5e:41:cd:80:7c:1a:c6:21:c3:2e:60:0b:1b:3e:84:
0c:fd:dc:7d:ff:0b:33:0c:1a:6a:15:84:94:a5:e2:
27:59:a7:53:b7:ac:67:24:2c:09:53:72:ae:79:d6:
56:1c:a7:6e:26:e2:81:9a:61:ce:c4:43:cd:28:91:
05:a0:c9:b4:24:5e:4a:b3:a2:2c:3c:a6:4a:ad:f9:
40:e5:6c:f5:2b:3f:51:0d:0b:62:2b:08:83:f0:ff:
e0:b3:b3:2f:20:1f:de:a3:46:37:a2:c7:a2:bc:eb:
b7:d2:4a:24:5f:34:24:81:47:5a:e3:5e:b2:f0:b2:
69:72:b8:d1:0d:ca:b2:60:7d:38:ba:82:49:fb:98:
6f:93:e2:b1:6c:af:38:71:eb:47:16:68:25:9a:2b:
9c:88:dd:12:8f:09:4e:cc:c2:17:b5:6c:8b:08:18:
22:04:7d:1c:bc:63:c9:5c:cd:07:b1:58:0c:9a:20:
8a:91:ec:8d:8a:27:cf:68:77:dc:fa:69:80:0d:46:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AE:89:78:B5:BF:69:36:8A:DF:92:25:A7:FE:49:8E:3F:BB:24:08
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uq6JeLW_aTaK35Ilp_5Jjj-7JAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.104.0/21
212.134.38.0/24
212.134.45.0/24
212.134.59.0/24
212.134.116.0/22
212.134.128.0/22
212.134.136.0/22
212.134.158.0/24
212.134.204.0/22
212.134.248.0/22
212.135.16.0/22
212.135.134.0/24
212.135.149.0/24
212.135.152.0/24
212.135.159.0/24
212.135.253.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b6:35:f0:e4:08:b4:ca:71:47:ba:aa:8d:34:01:a9:99:e1:
c4:7d:e8:d7:7f:7b:66:36:ff:6a:00:29:29:47:80:1a:30:2a:
74:43:db:91:7c:0f:0a:a5:81:a8:18:b8:4a:79:0b:c9:29:4e:
50:8b:31:31:0e:a7:4b:45:01:45:b0:ae:52:38:83:fc:c2:7b:
30:59:3f:54:95:c2:3c:b0:90:60:8f:09:09:d9:67:f9:e3:b0:
93:67:6f:dd:c9:04:49:7a:09:21:8a:74:5f:4b:9f:00:da:ac:
c6:23:1a:7e:d7:ef:8b:8b:13:bb:9c:31:d9:28:bb:51:5d:61:
db:5a:de:86:c2:81:d9:5e:3a:c7:75:36:b1:a1:37:47:48:93:
16:01:d4:ce:93:a6:3a:0a:dd:12:ef:b3:26:60:c1:32:a3:4e:
b4:3c:fb:dc:67:d0:5c:38:10:56:24:fd:36:6c:f1:ca:7c:d7:
22:2c:ab:e1:6a:b6:75:07:1f:24:12:92:52:26:b3:f5:ae:6f:
90:04:47:4c:c6:41:42:28:31:82:99:11:82:10:f8:e8:b5:9d:
73:e4:bf:aa:cf:02:73:27:4f:91:bd:27:11:9e:aa:ef:87:07:
ba:77:2d:de:18:d1:b0:36:9e:9e:a8:c9:83:aa:34:8c:19:21:
51:1a:ac:51
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZx6Toqk3ANKxrEJa1V4/PdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMjIwMDkwODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWFlODk3OGI1YmY2OTM2OGFkZjkyMjVhN2ZlNDk4ZTNmYmIyNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygtR+oLjI99euDfzuFOGohpGV64v
6Xf9RSn1ljs5d+RdjIPh8loHEogBfOEPt/s/Dde651ttFLsSVlZeQc2AfBrGIcMu
YAsbPoQM/dx9/wszDBpqFYSUpeInWadTt6xnJCwJU3KuedZWHKduJuKBmmHOxEPN
KJEFoMm0JF5Ks6IsPKZKrflA5Wz1Kz9RDQtiKwiD8P/gs7MvIB/eo0Y3oseivOu3
0kokXzQkgUda416y8LJpcrjRDcqyYH04uoJJ+5hvk+KxbK84cetHFmglmiuciN0S
jwlOzMIXtWyLCBgiBH0cvGPJXM0HsVgMmiCKkeyNiifPaHfc+mmADUbptQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFLquiXi1v2k2it+SJaf+SY4/uyQIMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvdXE2SmVMV19hVGFLMzVJbHBfNUpqai03SkFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQDbcxoAwQA
1IYmAwQA1IYtAwQA1IY7AwQC1IZ0AwQC1IaAAwQC1IaIAwQA1IaeAwQC1IbMAwQC
1Ib4AwQC1IcQAwQA1IeGAwQA1IeVAwQA1IeYAwQA1IefAwQA1If9MA0GCSqGSIb3
DQEBCwUAA4IBAQB4tjXw5Ai0ynFHuqqNNAGpmeHEfejXf3tmNv9qACkpR4AaMCp0
Q9uRfA8KpYGoGLhKeQvJKU5QizExDqdLRQFFsK5SOIP8wnswWT9UlcI8sJBgjwkJ
2Wf547CTZ2/dyQRJegkhinRfS58A2qzGIxp+1++LixO7nDHZKLtRXWHbWt6GwoHZ
XjrHdTaxoTdHSJMWAdTOk6Y6Ct0S77MmYMEyo060PPvcZ9BcOBBWJP02bPHKfNci
LKvharZ1Bx8kEpJSJrP1rm+QBEdMxkFCKDGCmRGCEPjotZ1z5L+qzwJzJ0+RvScR
nqrvhwe6dy3eGNGwNp6eqMmDqjSMGSFRGqxR
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:17 2026 by rpki-client