Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BJAN4IgfoEKUXIhvea2EtVDBl2I.roa
File: BJAN4IgfoEKUXIhvea2EtVDBl2I.roa (raw, json)
Hash identifier: OPE2Q1EZVB2XLhmq1xL05j9WpLa1OeXJuzZmSCrGGMA=
Subject key identifier: 04:90:0D:E0:88:1F:A0:42:94:5C:88:6F:79:AD:84:B5:50:C1:97:62
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019CBA164453BD2E3780A772F333A5D96C39
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BJAN4IgfoEKUXIhvea2EtVDBl2I.roa
Signing time: Wed 04 Mar 2026 18:22:27 +0000
ROA not before: Wed 04 Mar 2026 18:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.134.18.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.23.0/24 maxlen: 24
212.134.24.0/24 maxlen: 24
212.134.25.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.39.0/24 maxlen: 24
212.134.40.0/22 maxlen: 24
212.134.47.0/24 maxlen: 24
212.134.48.0/22 maxlen: 24
212.134.56.0/23 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.81.0/24 maxlen: 24
212.134.82.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.89.0/24 maxlen: 24
212.134.95.0/24 maxlen: 24
212.134.96.0/24 maxlen: 24
212.134.98.0/23 maxlen: 24
212.134.104.0/23 maxlen: 24
212.134.106.0/23 maxlen: 24
212.134.109.0/24 maxlen: 24
212.134.110.0/23 maxlen: 24
212.134.112.0/22 maxlen: 24
212.134.128.0/24 maxlen: 24
212.134.131.0/24 maxlen: 24
212.134.132.0/22 maxlen: 24
212.134.140.0/22 maxlen: 24
212.134.148.0/24 maxlen: 24
212.134.152.0/22 maxlen: 24
212.134.156.0/24 maxlen: 24
212.134.157.0/24 maxlen: 24
212.134.160.0/22 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.175.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.188.0/22 maxlen: 24
212.134.196.0/22 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.212.0/22 maxlen: 24
212.134.216.0/22 maxlen: 24
212.134.228.0/22 maxlen: 24
212.134.228.0/24 maxlen: 24
212.134.232.0/22 maxlen: 24
212.134.232.0/24 maxlen: 24
212.134.236.0/22 maxlen: 24
212.134.244.0/22 maxlen: 24
212.134.248.0/24 maxlen: 24
212.134.252.0/22 maxlen: 24
212.135.16.0/22 maxlen: 24
212.135.20.0/24 maxlen: 24
212.135.21.0/24 maxlen: 24
212.135.22.0/23 maxlen: 24
212.135.24.0/23 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.28.0/23 maxlen: 24
212.135.80.0/20 maxlen: 24
212.135.128.0/23 maxlen: 24
212.135.128.0/24 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.155.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.162.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.167.0/24 maxlen: 24
212.135.168.0/24 maxlen: 24
212.135.169.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
212.135.204.0/22 maxlen: 24
212.135.240.0/23 maxlen: 24
212.135.241.0/24 maxlen: 24
212.135.242.0/24 maxlen: 24
212.135.243.0/24 maxlen: 24
212.135.246.0/24 maxlen: 24
212.135.247.0/24 maxlen: 24
212.135.248.0/23 maxlen: 24
212.135.250.0/24 maxlen: 24
212.135.251.0/24 maxlen: 24
212.135.252.0/23 maxlen: 24
212.135.252.0/24 maxlen: 24
212.135.254.0/24 maxlen: 24
212.135.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:16:44:53:bd:2e:37:80:a7:72:f3:33:a5:d9:6c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 4 18:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04900de0881fa042945c886f79ad84b550c19762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:09:c9:20:4e:31:d6:6c:bb:f4:ef:06:06:
65:63:e6:ec:3f:4f:92:4e:58:6b:f7:1f:d0:3a:1f:
94:66:c5:37:c1:eb:82:f9:f2:fc:ee:7f:96:10:b3:
3e:67:de:2d:db:f3:3a:58:74:cc:ff:e7:d0:0e:ab:
79:ba:94:24:8b:f1:54:dc:0a:f2:c3:47:87:f9:48:
16:1d:c1:fe:f4:6d:72:f5:d1:51:9c:d8:00:bc:f4:
14:ff:94:5f:00:43:c4:54:f9:ce:71:0c:3f:e4:dd:
bc:a7:1f:0a:4d:c0:ec:41:51:18:03:99:b3:07:c9:
9e:0d:4d:fc:63:dc:1f:b5:23:19:6a:25:dc:f2:83:
06:50:b5:07:3f:ac:de:82:fb:ad:e0:fc:07:5b:df:
94:de:c2:d3:06:e3:e5:69:20:3a:ee:7c:53:b8:a1:
14:4b:8f:a0:8d:61:85:48:f7:d7:ad:3c:6a:83:4b:
29:7e:b3:b4:10:6c:88:9b:7b:31:4b:80:f3:cb:b0:
aa:48:a4:72:df:24:ef:04:cb:26:f0:34:cd:5f:13:
bb:8e:3c:38:de:0d:87:bd:dc:ee:63:5e:81:c1:13:
15:d8:d1:cd:87:f9:2c:5a:79:19:e7:3c:22:7e:d2:
4e:18:e3:5e:ee:d2:3d:9c:4d:73:a8:72:81:be:1e:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:90:0D:E0:88:1F:A0:42:94:5C:88:6F:79:AD:84:B5:50:C1:97:62
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BJAN4IgfoEKUXIhvea2EtVDBl2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.18.0/23
212.134.22.0-212.134.25.255
212.134.36.0/24
212.134.39.0-212.134.43.255
212.134.47.0-212.134.51.255
212.134.56.0-212.134.58.255
212.134.80.0/22
212.134.89.0/24
212.134.95.0-212.134.96.255
212.134.98.0/23
212.134.104.0/22
212.134.109.0-212.134.115.255
212.134.128.0/24
212.134.131.0-212.134.135.255
212.134.140.0/22
212.134.148.0/24
212.134.152.0-212.134.157.255
212.134.160.0/22
212.134.171.0/24
212.134.175.0/24
212.134.179.0/24
212.134.188.0/22
212.134.196.0/22
212.134.212.0-212.134.219.255
212.134.228.0-212.134.239.255
212.134.244.0-212.134.248.255
212.134.252.0/22
212.135.16.0-212.135.26.255
212.135.28.0/23
212.135.80.0/20
212.135.128.0/23
212.135.135.0/24
212.135.155.0/24
212.135.158.0/24
212.135.161.0-212.135.162.255
212.135.164.0-212.135.173.255
212.135.204.0/22
212.135.240.0/22
212.135.246.0-212.135.255.255
Signature Algorithm: sha256WithRSAEncryption
41:af:b9:34:31:35:fe:b3:56:ac:29:2d:15:8c:c8:e9:92:2d:
7a:3d:c5:f3:34:af:a1:f9:df:33:f5:a7:51:80:26:69:ce:9b:
a7:a3:5c:cd:bf:e2:1c:29:d9:42:db:a1:41:ae:ea:82:9f:17:
ee:0c:eb:0f:c1:29:24:46:a2:d8:d5:fc:30:b5:8b:02:1c:25:
f0:d5:43:b1:a5:c7:2b:42:00:64:12:92:43:10:70:1e:65:de:
68:39:ec:d8:4a:95:9c:ee:47:4c:07:ac:73:b3:ae:78:22:fb:
5d:50:27:96:60:ca:31:d7:87:f5:17:e8:84:fa:a0:25:6d:65:
d1:92:83:ef:c7:fb:87:ad:33:88:c1:0c:41:46:8e:c7:57:a0:
d1:b6:ad:bb:45:48:ec:c6:74:64:6e:4d:ec:63:23:2b:02:53:
ba:88:df:f0:d9:2c:39:ed:36:d9:0e:60:3c:40:ea:0a:c8:ca:
8b:f7:05:05:3b:69:71:30:1a:f1:24:3c:45:31:84:10:24:d6:
d1:27:c1:1a:fe:58:24:89:57:9d:89:0b:05:4d:19:42:00:99:
9d:fd:22:cc:16:bc:4e:f5:1a:6f:c1:ea:35:89:75:e2:ff:77:
e7:d0:0e:73:91:41:66:c7:74:e4:6f:a2:c9:95:b1:10:d8:99:
f3:84:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:16 2026 by rpki-client