Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/f6lSY51HXBDGy6jCmg6B3TLfmAI.roa
File: f6lSY51HXBDGy6jCmg6B3TLfmAI.roa (raw, json)
Hash identifier: DEeQoI6DaywfKlQkhWGB/h+7c7GW31qCcLJjwpYVUU8=
Subject key identifier: 7F:A9:52:63:9D:47:5C:10:C6:CB:A8:C2:9A:0E:81:DD:32:DF:98:02
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DA60CAA1F4BE8125A90687CD9C9570C1D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/f6lSY51HXBDGy6jCmg6B3TLfmAI.roa
Signing time: Sun 19 Apr 2026 14:02:20 +0000
ROA not before: Sun 19 Apr 2026 14:02:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.134.18.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.39.0/24 maxlen: 24
212.134.40.0/22 maxlen: 24
212.134.47.0/24 maxlen: 24
212.134.48.0/22 maxlen: 24
212.134.55.0/24 maxlen: 24
212.134.56.0/23 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.81.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.89.0/24 maxlen: 24
212.134.95.0/24 maxlen: 24
212.134.96.0/24 maxlen: 24
212.134.98.0/23 maxlen: 24
212.134.100.0/22 maxlen: 24
212.134.104.0/23 maxlen: 24
212.134.106.0/23 maxlen: 24
212.134.109.0/24 maxlen: 24
212.134.110.0/23 maxlen: 24
212.134.112.0/22 maxlen: 24
212.134.120.0/22 maxlen: 24
212.134.128.0/22 maxlen: 24
212.134.128.0/24 maxlen: 24
212.134.132.0/22 maxlen: 24
212.134.135.0/24 maxlen: 24
212.134.136.0/22 maxlen: 24
212.134.140.0/22 maxlen: 24
212.134.148.0/24 maxlen: 24
212.134.152.0/22 maxlen: 24
212.134.156.0/24 maxlen: 24
212.134.160.0/22 maxlen: 24
212.134.163.0/24 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.188.0/22 maxlen: 24
212.134.196.0/22 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.204.0/22 maxlen: 24
212.134.212.0/22 maxlen: 24
212.134.216.0/22 maxlen: 24
212.134.219.0/24 maxlen: 24
212.134.228.0/22 maxlen: 24
212.134.228.0/24 maxlen: 24
212.134.232.0/22 maxlen: 24
212.134.232.0/24 maxlen: 24
212.134.236.0/22 maxlen: 24
212.134.244.0/22 maxlen: 24
212.134.248.0/22 maxlen: 24
212.134.251.0/24 maxlen: 24
212.134.252.0/22 maxlen: 24
212.134.253.0/24 maxlen: 24
212.135.16.0/22 maxlen: 24
212.135.20.0/24 maxlen: 24
212.135.21.0/24 maxlen: 24
212.135.22.0/23 maxlen: 24
212.135.24.0/23 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.28.0/23 maxlen: 24
212.135.80.0/20 maxlen: 24
212.135.128.0/23 maxlen: 24
212.135.128.0/24 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.144.0/23 maxlen: 24
212.135.155.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.162.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.204.0/22 maxlen: 24
212.135.240.0/23 maxlen: 24
212.135.240.0/24 maxlen: 24
212.135.241.0/24 maxlen: 24
212.135.247.0/24 maxlen: 24
212.135.248.0/23 maxlen: 24
212.135.251.0/24 maxlen: 24
212.135.252.0/23 maxlen: 24
212.135.252.0/24 maxlen: 24
212.135.253.0/24 maxlen: 24
212.135.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:0c:aa:1f:4b:e8:12:5a:90:68:7c:d9:c9:57:0c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 19 14:02:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fa952639d475c10c6cba8c29a0e81dd32df9802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:51:e7:ee:ca:d1:e3:ff:ff:8e:84:70:4f:
ab:ba:6f:f8:59:27:9c:11:61:fc:55:16:d1:ef:ba:
c9:35:75:ed:2e:3a:bb:df:85:46:2b:bd:b4:18:5b:
ee:66:8c:1c:ce:b9:ad:3b:99:be:ba:fd:45:77:6f:
b8:77:f5:06:90:ac:8d:f0:05:ac:45:dc:9b:9a:37:
0a:4b:1b:a6:27:89:6d:13:47:cc:ce:2e:27:14:77:
ca:87:f5:19:01:ca:55:0e:b4:41:32:68:de:a8:87:
0f:2f:ee:73:bb:a2:7d:cf:fb:c2:0a:5e:c1:5a:4f:
7c:2c:8d:b8:fa:05:44:af:77:63:28:91:17:b7:6c:
5d:a3:f3:69:a1:64:ee:9b:b4:d7:65:8b:6a:68:a6:
5d:22:c1:3e:f1:a8:83:2c:5d:df:8d:ed:79:e0:44:
e0:67:1a:fd:69:69:9d:4c:89:36:69:ee:e0:cf:76:
3c:52:fb:01:d5:d3:ee:00:7c:14:56:e4:f4:61:65:
23:1c:46:b5:72:8f:31:49:f6:98:6f:f1:cb:f3:05:
70:66:ad:78:ca:2e:0a:7b:cb:0e:90:2e:32:28:4a:
25:7b:cf:9a:12:9c:bb:c0:10:98:7a:80:2d:eb:36:
ad:49:fc:0c:4a:df:81:99:7c:40:4e:79:89:ff:fb:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:52:63:9D:47:5C:10:C6:CB:A8:C2:9A:0E:81:DD:32:DF:98:02
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/f6lSY51HXBDGy6jCmg6B3TLfmAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.18.0/24
212.134.36.0/24
212.134.39.0-212.134.43.255
212.134.47.0-212.134.51.255
212.134.55.0-212.134.58.255
212.134.80.0/23
212.134.83.0/24
212.134.89.0/24
212.134.95.0-212.134.96.255
212.134.98.0-212.134.107.255
212.134.109.0-212.134.115.255
212.134.120.0/22
212.134.128.0/20
212.134.148.0/24
212.134.152.0-212.134.156.255
212.134.160.0/22
212.134.171.0/24
212.134.179.0/24
212.134.188.0/22
212.134.196.0/22
212.134.204.0/22
212.134.212.0-212.134.219.255
212.134.228.0-212.134.239.255
212.134.244.0-212.134.255.255
212.135.16.0-212.135.26.255
212.135.28.0/23
212.135.80.0/20
212.135.128.0/23
212.135.135.0/24
212.135.144.0/23
212.135.155.0/24
212.135.158.0/24
212.135.161.0-212.135.162.255
212.135.165.0/24
212.135.204.0/22
212.135.240.0/23
212.135.247.0-212.135.249.255
212.135.251.0-212.135.254.255
Signature Algorithm: sha256WithRSAEncryption
c0:9c:83:74:a7:04:ce:d1:1c:f0:f0:51:aa:1d:f5:10:74:6e:
8a:ea:75:7c:85:d2:dd:6a:d0:2a:04:10:84:29:32:95:91:41:
cd:2b:89:88:6a:d6:a0:1b:98:5e:9d:3b:31:b2:b7:66:0f:16:
a5:7c:80:0b:fc:6e:63:25:aa:c6:37:be:7a:07:fe:89:d5:0a:
9c:67:38:e8:61:33:8a:ca:f3:ae:f5:8b:0b:5f:5f:08:76:f0:
bc:a4:00:7a:16:a5:fa:14:21:0a:03:a8:5c:e9:8c:5c:76:c0:
e2:37:ec:11:ba:ac:82:28:1b:7e:6b:c4:07:e4:ef:d7:bc:77:
f1:57:f7:42:59:81:30:87:d8:1d:95:68:39:da:31:ec:10:be:
1a:67:4d:67:2c:73:bf:5d:b8:09:ca:b0:34:78:c3:53:e1:11:
6d:ca:5c:8f:0c:ce:34:28:b4:c2:7a:1f:a9:ad:db:bf:3c:51:
49:e7:79:3c:a8:f8:d3:d8:2c:ec:9e:b9:52:31:27:53:50:ef:
bc:1b:ee:49:ed:88:5a:9d:4e:6f:fa:ca:6b:88:6d:93:d0:a3:
ca:2c:ff:a5:d5:b2:b9:ac:65:3e:3d:d2:6c:94:42:c1:9f:c1:
6e:f4:7c:c2:62:08:6d:5c:7f:a3:56:50:20:42:06:d6:a2:47:
75:42:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 23:00:12 2026 by rpki-client