Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Xsy4NRN_NCuRw6mn_RSOKTqyguA.roa
File: Xsy4NRN_NCuRw6mn_RSOKTqyguA.roa (raw, json)
Hash identifier: kTaMyySsl24ZyAnSV9YTVDuLTM6aXc2xXJVw8tZluiE=
Subject key identifier: 5E:CC:B8:35:13:7F:34:2B:91:C3:A9:A7:FD:14:8E:29:3A:B2:82:E0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06FB7F20F7B861A5E71AF58B6284D74DF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Xsy4NRN_NCuRw6mn_RSOKTqyguA.roa
Signing time: Sat 05 Sep 2026 03:58:41 +0000
ROA not before: Sat 05 Sep 2026 03:58:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 212.134.133.0/24 maxlen: 24
212.134.135.0/24 maxlen: 24
212.134.177.0/24 maxlen: 24
212.135.152.0/24 maxlen: 24
212.135.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:b7:f2:0f:7b:86:1a:5e:71:af:58:b6:28:4d:74:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 5 03:58:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5eccb835137f342b91c3a9a7fd148e293ab282e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:4b:09:2a:d6:9c:4e:78:e1:55:40:ca:07:
d7:db:11:ca:0d:62:1d:82:4b:7f:4f:b4:ed:70:f5:
7a:67:39:7d:fa:7a:dd:fd:97:a2:bc:87:66:79:01:
80:cb:42:b9:ff:88:91:24:32:64:ef:4b:e5:bb:77:
78:b8:e9:c3:84:75:f6:59:b7:72:92:99:21:00:5a:
75:22:07:ed:eb:63:dc:e3:95:37:39:4e:fb:7d:4c:
2e:91:bc:ea:6f:7b:7c:e8:19:a4:b0:61:6a:cf:03:
04:c0:60:5b:82:14:c2:9e:47:d1:18:45:2c:72:23:
36:94:3f:e6:17:ad:a2:e7:61:70:80:e7:2b:1f:57:
cb:51:1e:de:19:3d:ee:c8:32:01:85:26:18:5d:09:
c0:1e:6b:8f:80:ec:89:2d:18:47:67:40:87:07:5e:
e8:55:97:df:d5:9a:07:fd:72:0f:d2:ce:69:17:b0:
6e:17:f5:12:5d:6f:10:c1:60:aa:78:0d:16:00:9c:
dc:db:46:b0:5a:e3:54:a6:cc:8e:04:41:7f:e5:b4:
7f:cc:dd:9c:ec:ce:8d:8e:ef:b6:16:61:15:96:ad:
1d:fc:50:57:66:57:65:39:9c:0d:c3:32:2c:0c:10:
a5:3a:44:cc:30:cb:6f:e9:8e:29:0a:05:aa:61:99:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:B8:35:13:7F:34:2B:91:C3:A9:A7:FD:14:8E:29:3A:B2:82:E0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Xsy4NRN_NCuRw6mn_RSOKTqyguA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.133.0/24
212.134.135.0/24
212.134.177.0/24
212.135.152.0/24
212.135.157.0/24
Signature Algorithm: sha256WithRSAEncryption
98:90:fd:be:44:24:bc:fc:d7:3c:62:1c:c7:5d:25:d1:bb:f3:
1f:79:83:ac:28:1c:31:4e:d8:98:29:9a:34:24:f9:a4:0e:ca:
9a:57:1f:60:c5:0f:cd:c2:08:08:07:0f:6a:de:8a:b1:1f:18:
c2:5f:2c:75:83:59:f6:dc:59:76:fa:af:e1:98:5a:68:bf:68:
fe:1e:31:39:00:d4:0b:37:e1:62:60:85:0c:3b:5f:46:77:47:
4c:76:a2:ef:ce:2d:3c:00:19:6a:bd:ab:b9:8b:d4:26:90:04:
1b:27:29:26:c7:3c:bc:9e:64:a0:48:5a:58:53:6d:02:50:d4:
7a:34:c2:6d:5d:7b:6d:c7:47:88:3f:29:90:0f:9c:4b:8c:31:
f6:24:29:ef:41:03:18:bc:81:9f:1f:23:1f:08:8d:f0:a3:b7:
18:e6:95:85:90:ff:e1:d4:1c:c6:56:ec:07:8e:30:c5:17:2b:
e4:21:2f:ed:95:50:6d:80:c0:84:a5:79:06:d7:a6:4f:c1:ed:
55:c4:12:00:80:6c:a2:80:10:03:5a:92:dc:a1:12:32:08:bc:
86:ff:37:de:17:0e:23:67:72:dd:8a:34:76:0c:61:33:5a:07:
f6:61:2d:75:d0:76:9b:9a:e4:58:85:19:ee:fd:ac:77:b7:5c:
9d:a3:36:e8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaBvt/IPe4YaXnGvWLYoTXTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTA1MDM1ODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWNjYjgzNTEzN2YzNDJiOTFjM2E5YTdmZDE0OGUyOTNhYjI4MmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuVLCSrWnE544VVAygfX2xHKDWId
gkt/T7TtcPV6Zzl9+nrd/ZeivIdmeQGAy0K5/4iRJDJk70vlu3d4uOnDhHX2Wbdy
kpkhAFp1Igft62Pc45U3OU77fUwukbzqb3t86BmksGFqzwMEwGBbghTCnkfRGEUs
ciM2lD/mF62i52FwgOcrH1fLUR7eGT3uyDIBhSYYXQnAHmuPgOyJLRhHZ0CHB17o
VZff1ZoH/XIP0s5pF7BuF/USXW8QwWCqeA0WAJzc20awWuNUpsyOBEF/5bR/zN2c
7M6Nju+2FmEVlq0d/FBXZldlOZwNwzIsDBClOkTMMMtv6Y4pCgWqYZn+TQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFF7MuDUTfzQrkcOpp/0Ujik6soLgMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvWHN5NE5STl9OQ3VSdzZtbl9SU09LVHF5Z3VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQA1IaFAwQA
1IaHAwQA1IaxAwQA1IeYAwQA1IedMA0GCSqGSIb3DQEBCwUAA4IBAQCYkP2+RCS8
/Nc8YhzHXSXRu/MfeYOsKBwxTtiYKZo0JPmkDsqaVx9gxQ/NwggIBw9q3oqxHxjC
Xyx1g1n23Fl2+q/hmFpov2j+HjE5ANQLN+FiYIUMO19Gd0dMdqLvzi08ABlqvau5
i9QmkAQbJykmxzy8nmSgSFpYU20CUNR6NMJtXXttx0eIPymQD5xLjDH2JCnvQQMY
vIGfHyMfCI3wo7cY5pWFkP/h1BzGVuwHjjDFFyvkIS/tlVBtgMCEpXkG16ZPwe1V
xBIAgGyigBADWpLcoRIyCLyG/zfeFw4jZ3LdijR2DGEzWgf2YS110HabmuRYhRnu
/ax3t1ydozbo
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:20:13 2026 by rpki-client