Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Z1MjLWulEnUaDE5KBfGjLMuMh_g.roa
File: Z1MjLWulEnUaDE5KBfGjLMuMh_g.roa (raw, json)
Hash identifier: N9+CSLxsjMXMRhoyseoPrB1U0qzJ8pQFGWh1qOw5BFs=
Subject key identifier: 67:53:23:2D:6B:A5:12:75:1A:0C:4E:4A:05:F1:A3:2C:CB:8C:87:F8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E5E8A39569D30CBC0758C20104ECADF3A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Z1MjLWulEnUaDE5KBfGjLMuMh_g.roa
Signing time: Mon 25 May 2026 09:49:37 +0000
ROA not before: Mon 25 May 2026 09:49:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203048
IP address blocks: 212.134.182.0/24 maxlen: 24
212.134.204.0/24 maxlen: 24
212.134.237.0/24 maxlen: 24
212.135.140.0/24 maxlen: 24
212.135.151.0/24 maxlen: 24
212.135.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5e:8a:39:56:9d:30:cb:c0:75:8c:20:10:4e:ca:df:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 25 09:49:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6753232d6ba512751a0c4e4a05f1a32ccb8c87f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:33:ad:f9:8f:3c:df:a5:e5:9b:f6:87:c1:
20:74:a6:e7:e7:67:cc:8c:91:fa:2b:bc:21:4f:85:
f9:00:74:9f:e6:b8:90:19:32:5b:db:54:31:1e:7f:
58:89:5b:be:c9:df:4f:49:23:7d:19:1e:0a:d6:4d:
1f:a3:07:9c:02:a2:bf:49:db:bc:3a:ef:05:35:37:
8d:d4:65:1b:40:b9:07:b0:f6:9a:99:98:21:6d:64:
e1:cf:03:77:60:3a:c7:d7:40:c1:fc:25:34:8e:c6:
5c:5b:7c:f9:e4:52:b4:e8:db:4d:7d:68:dd:b9:30:
c7:0d:e7:7b:76:57:b9:9e:96:cb:8a:8e:9c:25:30:
2e:b5:ff:47:7b:ac:b8:db:a7:ce:73:00:67:12:ba:
f2:35:b9:30:d4:b3:22:f3:f2:87:21:53:1e:1c:4e:
cd:bc:06:65:a3:d3:18:d2:4e:66:20:c8:01:3a:3b:
63:b6:60:e9:66:7f:62:34:1e:62:8c:ab:24:dc:6a:
c9:9a:9b:35:cf:6b:79:85:b3:37:0d:8f:44:38:b2:
44:5a:66:6b:fa:55:b9:d6:ab:4c:4d:a3:a3:de:e0:
4a:1c:30:d3:26:fe:bd:cd:54:77:6c:b6:af:b8:4d:
78:ba:a1:13:ec:70:f0:49:cb:e0:1b:99:3d:07:5d:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:53:23:2D:6B:A5:12:75:1A:0C:4E:4A:05:F1:A3:2C:CB:8C:87:F8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Z1MjLWulEnUaDE5KBfGjLMuMh_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.182.0/24
212.134.204.0/24
212.134.237.0/24
212.135.140.0/24
212.135.151.0/24
212.135.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:78:f2:0e:6d:35:7a:2c:98:ed:6e:ef:a8:cc:d8:32:df:34:
b2:8a:7c:37:61:99:b3:98:f2:56:e7:be:35:0e:27:6f:aa:b5:
97:33:5b:17:bb:f9:81:0b:eb:e9:d4:f4:6a:06:5d:94:4b:fa:
b5:a0:fa:ff:22:de:1e:2c:f6:a1:7e:a4:52:0e:3e:6b:ad:13:
de:f3:e9:54:e8:07:ee:ed:bd:d7:4b:2c:9b:89:cc:ee:50:08:
fe:2b:82:d5:1b:bf:35:aa:8b:48:64:8a:a1:10:3d:46:ee:18:
e6:2f:b6:21:97:32:57:2b:2d:4c:db:54:5c:d0:36:af:86:63:
27:b9:e6:07:fe:cb:ff:c7:69:10:18:4b:dd:8f:af:01:fc:45:
70:d7:2e:5a:c8:ea:8b:6b:b0:c3:85:2d:a3:84:f2:d4:d8:94:
52:e8:f6:1e:38:99:43:f2:bd:ef:f7:6a:98:f4:c9:ff:97:44:
3e:df:6c:2b:b9:73:90:6a:78:16:0a:6a:fb:b7:39:80:9b:73:
83:40:67:f4:1a:cd:52:ae:94:82:a1:60:f8:2f:d8:08:06:a3:
dd:1a:94:6e:b5:f4:f9:a6:2a:90:e9:85:b7:66:43:b7:5d:ab:
08:75:0d:82:ec:91:ce:8f:24:06:3d:85:fb:c7:14:4e:6d:5c:
61:aa:0b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 03:58:45 2026 by rpki-client