Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EWGQ0DJUclHwT36U2hnyzvZWq5U.roa
File: EWGQ0DJUclHwT36U2hnyzvZWq5U.roa (raw, json)
Hash identifier: dDxtabjl+5e4Ijc9F+VFkkYLy9AY1zTx0LltQK8ZU98=
Subject key identifier: 11:61:90:D0:32:54:72:51:F0:4F:7E:94:DA:19:F2:CE:F6:56:AB:95
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DA60CAAC10BB8EF536364506E6FE83C2B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EWGQ0DJUclHwT36U2hnyzvZWq5U.roa
Signing time: Sun 19 Apr 2026 14:02:21 +0000
ROA not before: Sun 19 Apr 2026 14:02:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203048
IP address blocks: 212.134.41.0/24 maxlen: 24
212.134.131.0/24 maxlen: 24
212.134.161.0/24 maxlen: 24
212.134.175.0/24 maxlen: 24
212.134.198.0/24 maxlen: 24
212.134.250.0/24 maxlen: 24
212.135.17.0/24 maxlen: 24
212.135.19.0/24 maxlen: 24
212.135.149.0/24 maxlen: 24
212.135.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 14:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:0c:aa:c1:0b:b8:ef:53:63:64:50:6e:6f:e8:3c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 19 14:02:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=116190d032547251f04f7e94da19f2cef656ab95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:24:06:a6:96:34:6c:5a:29:b3:2b:67:dc:
7c:f3:15:ab:13:1a:c0:83:19:0a:ae:8c:bd:4b:12:
43:41:11:2c:d5:b8:c8:0f:03:d3:00:55:3a:d9:4e:
4c:74:55:6b:7c:4e:60:84:79:67:89:f7:cf:f1:73:
63:ed:d8:80:95:35:71:0d:85:12:4f:0f:c3:bb:46:
d5:31:06:e1:eb:86:85:17:52:06:4d:45:62:10:d7:
e6:8b:b3:67:35:08:c9:4c:25:b3:d1:ea:21:93:4f:
86:52:a9:2e:68:0f:a9:d6:99:dd:c2:a4:f3:e1:27:
34:38:57:dc:43:21:98:7a:20:21:01:7b:4d:71:d6:
9f:88:50:aa:f3:03:d8:e0:39:83:84:20:bc:4e:1f:
d3:b4:a0:0b:bb:63:b1:d3:1c:e5:95:81:15:91:eb:
45:b0:eb:e4:75:72:41:9e:ad:60:99:04:a4:cd:95:
c5:dc:eb:f2:49:d1:fa:13:bc:e8:68:c6:c2:b8:14:
b5:cc:08:af:1b:26:f2:c6:28:45:15:dd:27:7b:32:
3d:af:a1:68:fe:b3:1f:e3:cd:82:1c:b1:66:72:b3:
b6:c7:2a:d5:25:8a:39:13:3f:ea:8e:df:bf:e2:89:
e0:fa:3b:b4:d3:5d:aa:6c:67:30:50:c5:5e:fa:ff:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:61:90:D0:32:54:72:51:F0:4F:7E:94:DA:19:F2:CE:F6:56:AB:95
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EWGQ0DJUclHwT36U2hnyzvZWq5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.41.0/24
212.134.131.0/24
212.134.161.0/24
212.134.175.0/24
212.134.198.0/24
212.134.250.0/24
212.135.17.0/24
212.135.19.0/24
212.135.149.0/24
212.135.246.0/24
Signature Algorithm: sha256WithRSAEncryption
34:65:6b:13:e4:45:a0:1b:7c:cd:7b:80:a7:24:65:d3:5f:04:
18:3d:b2:cf:a3:26:4b:27:24:34:97:5b:a9:20:e0:63:c0:7c:
2a:d2:7a:26:23:e8:38:39:6a:5d:84:64:d1:4b:2d:97:ae:81:
3d:15:91:17:ea:74:df:0d:ab:6e:1f:9c:05:4f:13:bc:0b:e3:
3c:37:a9:c9:f6:e2:d5:79:f9:72:51:ad:e8:7a:6e:9c:2c:a8:
39:c5:5f:22:76:62:e3:61:76:65:69:98:44:a4:dd:64:18:8a:
a1:b3:43:84:41:7b:ef:bd:c6:73:43:22:65:74:07:74:30:44:
dd:bf:53:b8:b5:98:c4:45:1b:cd:ff:7a:a7:86:30:a0:e3:82:
7c:50:af:27:09:a6:8d:63:2f:27:fa:9b:72:c4:53:53:4d:65:
fc:92:0e:c7:0c:0d:08:61:94:13:95:00:10:ad:cf:70:70:17:
ac:a4:7e:47:7f:fb:ba:2b:d0:74:a2:00:b9:4e:69:b8:61:5a:
c9:a8:e2:4f:c5:4f:23:58:29:8d:8f:f3:3e:e9:3d:62:4e:22:
6e:42:52:37:9c:3b:20:67:21:1b:b2:bf:72:5b:30:f0:f7:8e:
78:ae:94:b1:68:45:fe:7a:55:61:19:66:21:6b:06:4e:a9:c4:
a2:b7:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 00:26:49 2026 by rpki-client