Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XRBEdTEkL5lWESjGkwTYmj7Vp4Q.roa
File: XRBEdTEkL5lWESjGkwTYmj7Vp4Q.roa (raw, json)
Hash identifier: muIWodpth/hXCb48QjnfQOpq8owA/g6jXp4y0Bdu4Z8=
Subject key identifier: 5D:10:44:75:31:24:2F:99:56:11:28:C6:93:04:D8:9A:3E:D5:A7:84
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019CC1FBBF62C2E05101449178EF38B9F2C2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XRBEdTEkL5lWESjGkwTYmj7Vp4Q.roa
Signing time: Fri 06 Mar 2026 07:10:27 +0000
ROA not before: Fri 06 Mar 2026 07:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.134.18.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.23.0/24 maxlen: 24
212.134.24.0/24 maxlen: 24
212.134.25.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.39.0/24 maxlen: 24
212.134.40.0/22 maxlen: 24
212.134.47.0/24 maxlen: 24
212.134.48.0/22 maxlen: 24
212.134.56.0/23 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.81.0/24 maxlen: 24
212.134.82.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.89.0/24 maxlen: 24
212.134.95.0/24 maxlen: 24
212.134.96.0/24 maxlen: 24
212.134.98.0/23 maxlen: 24
212.134.104.0/23 maxlen: 24
212.134.106.0/23 maxlen: 24
212.134.109.0/24 maxlen: 24
212.134.110.0/23 maxlen: 24
212.134.112.0/22 maxlen: 24
212.134.128.0/24 maxlen: 24
212.134.131.0/24 maxlen: 24
212.134.132.0/22 maxlen: 24
212.134.140.0/22 maxlen: 24
212.134.148.0/24 maxlen: 24
212.134.152.0/22 maxlen: 24
212.134.156.0/24 maxlen: 24
212.134.157.0/24 maxlen: 24
212.134.160.0/22 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.175.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.188.0/22 maxlen: 24
212.134.196.0/22 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.212.0/22 maxlen: 24
212.134.216.0/22 maxlen: 24
212.134.228.0/22 maxlen: 24
212.134.232.0/22 maxlen: 24
212.134.232.0/24 maxlen: 24
212.134.236.0/22 maxlen: 24
212.134.244.0/22 maxlen: 24
212.134.248.0/24 maxlen: 24
212.134.252.0/22 maxlen: 24
212.135.16.0/22 maxlen: 24
212.135.20.0/24 maxlen: 24
212.135.21.0/24 maxlen: 24
212.135.22.0/23 maxlen: 24
212.135.24.0/23 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.28.0/23 maxlen: 24
212.135.80.0/20 maxlen: 24
212.135.128.0/23 maxlen: 24
212.135.128.0/24 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.155.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.162.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.167.0/24 maxlen: 24
212.135.168.0/24 maxlen: 24
212.135.169.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
212.135.204.0/22 maxlen: 24
212.135.240.0/23 maxlen: 24
212.135.241.0/24 maxlen: 24
212.135.242.0/24 maxlen: 24
212.135.243.0/24 maxlen: 24
212.135.246.0/24 maxlen: 24
212.135.247.0/24 maxlen: 24
212.135.248.0/23 maxlen: 24
212.135.250.0/24 maxlen: 24
212.135.251.0/24 maxlen: 24
212.135.252.0/23 maxlen: 24
212.135.252.0/24 maxlen: 24
212.135.254.0/24 maxlen: 24
212.135.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Mar 2026 14:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c1:fb:bf:62:c2:e0:51:01:44:91:78:ef:38:b9:f2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 6 07:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d10447531242f99561128c69304d89a3ed5a784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:03:10:98:4f:f6:32:e1:e9:c0:41:77:7b:75:
a4:0c:7a:78:69:8f:e0:40:4d:28:dc:1b:0f:cc:1d:
b6:01:10:ab:5d:48:5f:a9:8f:bc:16:8b:80:47:1e:
d2:77:e1:fa:ba:36:8a:6a:0e:d6:5b:81:5b:3f:28:
14:f8:69:d6:6c:60:1b:49:c3:e8:94:29:27:92:e3:
ab:94:89:c3:93:72:af:86:c6:1b:a5:f9:ff:5e:50:
1a:81:82:32:09:74:09:af:69:ba:00:cc:56:1d:fb:
6a:01:2f:e2:44:7b:56:99:95:43:5a:03:ff:1f:1f:
d2:93:2c:f1:03:dc:df:4c:8f:1d:d4:37:8c:3a:3c:
85:fb:69:58:48:d5:9b:77:a0:bd:ca:96:29:35:af:
ff:9e:eb:81:e0:bc:8d:0c:51:c0:cb:37:00:d7:db:
a3:43:dd:eb:22:f6:e7:28:ae:43:89:97:1d:6f:80:
3d:57:55:f0:82:84:aa:7c:59:7c:b1:95:2b:a5:81:
e1:eb:46:13:7b:7e:6f:cf:bb:4a:3f:0d:d7:90:d4:
a0:2a:eb:03:88:d4:8d:df:4c:cd:9d:ac:cc:7b:2c:
ba:8f:2c:92:e8:44:f9:62:7f:30:46:a5:c0:79:c4:
34:ee:5a:4e:c8:46:6f:5e:6a:e3:23:ce:39:8f:bd:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:10:44:75:31:24:2F:99:56:11:28:C6:93:04:D8:9A:3E:D5:A7:84
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XRBEdTEkL5lWESjGkwTYmj7Vp4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.18.0/23
212.134.22.0-212.134.25.255
212.134.36.0/24
212.134.39.0-212.134.43.255
212.134.47.0-212.134.51.255
212.134.56.0-212.134.58.255
212.134.80.0/22
212.134.89.0/24
212.134.95.0-212.134.96.255
212.134.98.0/23
212.134.104.0/22
212.134.109.0-212.134.115.255
212.134.128.0/24
212.134.131.0-212.134.135.255
212.134.140.0/22
212.134.148.0/24
212.134.152.0-212.134.157.255
212.134.160.0/22
212.134.171.0/24
212.134.175.0/24
212.134.179.0/24
212.134.188.0/22
212.134.196.0/22
212.134.212.0-212.134.219.255
212.134.228.0-212.134.239.255
212.134.244.0-212.134.248.255
212.134.252.0/22
212.135.16.0-212.135.26.255
212.135.28.0/23
212.135.80.0/20
212.135.128.0/23
212.135.135.0/24
212.135.155.0/24
212.135.158.0/24
212.135.161.0-212.135.162.255
212.135.164.0-212.135.173.255
212.135.204.0/22
212.135.240.0/22
212.135.246.0-212.135.255.255
Signature Algorithm: sha256WithRSAEncryption
90:33:35:f1:d0:6c:80:30:14:55:31:bc:10:a3:55:7e:ca:6d:
3b:d2:4b:d8:ad:00:4a:a4:82:67:a3:a9:1a:16:b9:3d:f8:d6:
b8:6b:a0:e4:48:d7:25:8a:a3:04:a6:13:c3:1b:35:7f:ec:f4:
4d:8c:c6:c9:2e:bc:a3:d1:3b:a6:a0:c1:2f:7f:42:42:92:61:
83:8a:6c:b0:cd:78:29:28:5a:38:bc:f1:81:17:6f:f8:2d:84:
d0:3c:9f:4b:8f:35:fd:9e:5c:a0:ec:f1:9d:f8:07:2a:ec:cb:
45:30:90:ec:d9:e4:c3:31:8e:4f:b4:7e:26:07:76:97:c9:c4:
66:0f:d7:f7:38:e5:49:41:d9:d3:5a:19:28:29:c3:4c:9b:87:
57:d8:e8:be:37:74:70:81:c2:ae:d4:61:51:5d:fc:bf:48:16:
70:be:65:3c:2a:bc:34:9b:48:e8:73:4e:8b:af:ae:0f:08:24:
eb:00:4b:40:13:4a:b0:cb:15:a2:ba:77:90:b5:cb:77:f1:88:
19:0b:2a:70:7b:fd:13:77:16:53:51:07:30:73:73:c9:0a:b3:
a1:24:74:29:75:3d:9f:81:cf:3d:fb:95:31:45:08:e8:dc:e9:
be:4c:63:62:13:5e:ed:04:60:d7:eb:62:91:55:63:c7:5e:c3:
00:77:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:34:49 2026 by rpki-client