Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6Pj-RxVD-I0fgr-1S3BzYYpOXIg.roa
File: 6Pj-RxVD-I0fgr-1S3BzYYpOXIg.roa (raw, json)
Hash identifier: T1YR3MsC8xaL6D998VjjB72YQo49m1qLdvkUMflGHDI=
Subject key identifier: E8:F8:FE:47:15:43:F8:8D:1F:82:BF:B5:4B:70:73:61:8A:4E:5C:88
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D31C26ABB810442FB6987FE4DDF0929B4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6Pj-RxVD-I0fgr-1S3BzYYpOXIg.roa
Signing time: Sat 28 Mar 2026 00:05:18 +0000
ROA not before: Sat 28 Mar 2026 00:05:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.134.18.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.23.0/24 maxlen: 24
212.134.24.0/24 maxlen: 24
212.134.25.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.39.0/24 maxlen: 24
212.134.40.0/22 maxlen: 24
212.134.47.0/24 maxlen: 24
212.134.48.0/22 maxlen: 24
212.134.55.0/24 maxlen: 24
212.134.56.0/23 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.88.0/24 maxlen: 24
212.134.89.0/24 maxlen: 24
212.134.95.0/24 maxlen: 24
212.134.98.0/23 maxlen: 24
212.134.100.0/22 maxlen: 24
212.134.104.0/23 maxlen: 24
212.134.106.0/23 maxlen: 24
212.134.109.0/24 maxlen: 24
212.134.110.0/23 maxlen: 24
212.134.112.0/22 maxlen: 24
212.134.120.0/22 maxlen: 24
212.134.128.0/22 maxlen: 24
212.134.132.0/22 maxlen: 24
212.134.136.0/22 maxlen: 24
212.134.140.0/22 maxlen: 24
212.134.148.0/24 maxlen: 24
212.134.152.0/22 maxlen: 24
212.134.156.0/24 maxlen: 24
212.134.157.0/24 maxlen: 24
212.134.160.0/22 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.175.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.188.0/22 maxlen: 24
212.134.196.0/22 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.204.0/22 maxlen: 24
212.134.212.0/22 maxlen: 24
212.134.216.0/22 maxlen: 24
212.134.228.0/22 maxlen: 24
212.134.232.0/22 maxlen: 24
212.134.232.0/24 maxlen: 24
212.134.236.0/22 maxlen: 24
212.134.244.0/22 maxlen: 24
212.134.248.0/22 maxlen: 24
212.134.248.0/24 maxlen: 24
212.134.252.0/22 maxlen: 24
212.135.16.0/22 maxlen: 24
212.135.20.0/24 maxlen: 24
212.135.21.0/24 maxlen: 24
212.135.22.0/23 maxlen: 24
212.135.24.0/23 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.28.0/23 maxlen: 24
212.135.80.0/20 maxlen: 24
212.135.100.0/22 maxlen: 24
212.135.128.0/23 maxlen: 24
212.135.128.0/24 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.144.0/23 maxlen: 24
212.135.155.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.162.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.167.0/24 maxlen: 24
212.135.169.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
212.135.204.0/22 maxlen: 24
212.135.240.0/23 maxlen: 24
212.135.241.0/24 maxlen: 24
212.135.243.0/24 maxlen: 24
212.135.246.0/24 maxlen: 24
212.135.247.0/24 maxlen: 24
212.135.248.0/23 maxlen: 24
212.135.250.0/24 maxlen: 24
212.135.251.0/24 maxlen: 24
212.135.252.0/23 maxlen: 24
212.135.252.0/24 maxlen: 24
212.135.254.0/24 maxlen: 24
212.135.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:c2:6a:bb:81:04:42:fb:69:87:fe:4d:df:09:29:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 28 00:05:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8f8fe471543f88d1f82bfb54b7073618a4e5c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:a0:49:f9:7e:75:a3:38:7f:d1:f6:28:2d:
d8:ec:5e:2e:3b:e5:72:8e:4a:49:87:6c:9f:b5:5e:
80:b0:0a:0b:2e:f0:2c:af:ca:0e:af:69:4a:bb:ec:
d2:52:6d:ce:bb:2d:08:c6:32:3d:5a:73:f4:5b:45:
c9:77:de:8e:2e:04:04:49:04:16:92:0b:33:89:f3:
d4:89:36:bc:35:9e:7a:dd:e2:95:e7:f6:fb:96:32:
37:75:54:d1:6d:40:a2:a7:7b:a4:4b:c9:97:44:de:
df:13:59:24:af:f6:fb:24:b0:e8:a6:6a:fd:37:43:
57:8f:a0:5c:6f:fb:9c:e9:b2:53:52:d0:33:39:7b:
53:1a:60:84:e9:3b:1b:3e:12:4d:b7:29:0a:72:6d:
23:6b:2c:91:3d:52:b7:2f:8a:08:f9:42:8a:c0:e1:
6a:1e:24:70:49:6e:86:36:46:c2:7f:f6:f4:d6:18:
de:39:fc:53:72:23:55:14:f4:8a:ec:87:0d:49:7a:
1a:63:6f:3c:99:d1:18:e7:2c:71:0c:d4:9c:3d:bb:
ae:df:65:bc:e4:83:8e:83:7d:1c:a2:00:03:f6:b3:
53:cf:a4:ab:aa:5f:5e:2c:a5:db:1c:0a:3e:f0:f3:
1f:3f:9f:a7:63:ca:3f:fa:4f:c5:c1:f7:66:aa:b2:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F8:FE:47:15:43:F8:8D:1F:82:BF:B5:4B:70:73:61:8A:4E:5C:88
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6Pj-RxVD-I0fgr-1S3BzYYpOXIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.18.0/23
212.134.22.0-212.134.25.255
212.134.36.0/24
212.134.39.0-212.134.43.255
212.134.47.0-212.134.51.255
212.134.55.0-212.134.58.255
212.134.80.0/24
212.134.83.0/24
212.134.88.0/23
212.134.95.0/24
212.134.98.0-212.134.107.255
212.134.109.0-212.134.115.255
212.134.120.0/22
212.134.128.0/20
212.134.148.0/24
212.134.152.0-212.134.157.255
212.134.160.0/22
212.134.171.0/24
212.134.175.0/24
212.134.179.0/24
212.134.188.0/22
212.134.196.0/22
212.134.204.0/22
212.134.212.0-212.134.219.255
212.134.228.0-212.134.239.255
212.134.244.0-212.134.255.255
212.135.16.0-212.135.26.255
212.135.28.0/23
212.135.80.0/20
212.135.100.0/22
212.135.128.0/23
212.135.135.0/24
212.135.144.0/23
212.135.155.0/24
212.135.158.0/24
212.135.161.0-212.135.162.255
212.135.164.0/24
212.135.166.0/23
212.135.169.0-212.135.173.255
212.135.204.0/22
212.135.240.0/23
212.135.243.0/24
212.135.246.0-212.135.255.255
Signature Algorithm: sha256WithRSAEncryption
d4:86:88:e0:f1:15:74:40:18:13:a8:80:86:9c:92:00:94:af:
99:f4:8e:55:24:46:f2:59:d9:c1:7a:18:93:6b:0a:0e:99:16:
25:f6:77:bc:d7:24:ff:b7:4b:0e:69:1f:fc:1d:51:c2:7d:06:
e3:e4:81:6e:f0:51:dd:67:3f:91:5b:08:2d:be:15:aa:09:0b:
58:3b:82:f5:b0:74:3a:b8:74:f2:ee:4d:c6:0a:d0:f4:29:e7:
66:e9:c8:4e:0b:9c:55:0d:37:01:12:28:e5:40:52:12:e2:8e:
20:7e:e0:52:14:5a:f4:81:74:e2:e5:ef:27:6a:a1:35:5a:b2:
c0:66:e7:fe:d2:e3:eb:23:72:78:74:ac:95:0b:26:db:39:98:
6a:27:02:3d:4d:67:81:fb:a1:68:ec:be:ce:25:78:bc:5b:50:
be:1b:15:17:54:da:10:d5:f7:38:39:cc:b6:27:4c:79:ca:b2:
f2:24:5e:88:77:79:0a:7f:14:2e:74:b1:d9:40:67:c8:ae:c9:
9e:86:b7:b6:a6:80:1e:76:26:b2:4b:ef:e9:50:2c:ca:2d:f8:
0f:1c:8f:fb:27:36:56:c5:ac:e1:8c:05:23:37:2a:9d:cc:41:
0f:93:1e:e2:aa:c8:ce:c1:43:a1:5c:5a:df:39:2b:7c:93:91:
d1:70:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:18:10 2026 by rpki-client