Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gAVS9BplSA1CmRMyyJK0zIoSs24.roa
File: gAVS9BplSA1CmRMyyJK0zIoSs24.roa (raw, json)
Hash identifier: 9JAfrDb3IOXn6i/koPN/DsZaWH19+jCL0G3owkAwbXM=
Subject key identifier: 80:05:52:F4:1A:65:48:0D:42:99:13:32:C8:92:B4:CC:8A:12:B3:6E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D9B320A6E37117BA22ED1949F55B86387
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gAVS9BplSA1CmRMyyJK0zIoSs24.roa
Signing time: Fri 17 Apr 2026 11:27:21 +0000
ROA not before: Fri 17 Apr 2026 11:27:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 212.134.17.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.25.0/24 maxlen: 24
212.134.48.0/24 maxlen: 24
212.134.51.0/24 maxlen: 24
212.134.56.0/24 maxlen: 24
212.134.154.0/24 maxlen: 24
212.134.157.0/24 maxlen: 24
212.134.177.0/24 maxlen: 24
212.134.189.0/24 maxlen: 24
212.134.190.0/24 maxlen: 24
212.134.206.0/24 maxlen: 24
212.134.207.0/24 maxlen: 24
212.134.216.0/24 maxlen: 24
212.134.231.0/24 maxlen: 24
212.134.246.0/24 maxlen: 24
212.134.248.0/24 maxlen: 24
212.135.134.0/24 maxlen: 24
212.135.145.0/24 maxlen: 24
212.135.148.0/24 maxlen: 24
212.135.152.0/24 maxlen: 24
212.135.154.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:32:0a:6e:37:11:7b:a2:2e:d1:94:9f:55:b8:63:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 17 11:27:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=800552f41a65480d42991332c892b4cc8a12b36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:36:35:85:c9:46:1b:c5:02:53:a3:6c:4b:
0a:46:bb:09:60:15:fe:f4:bb:80:7b:0b:3b:7e:1c:
28:a4:9e:f9:6a:57:df:3c:e3:06:6e:ff:75:09:fa:
87:37:7a:6d:b0:5b:e3:68:e0:c3:b6:53:80:be:c3:
99:a5:dc:fd:b7:a9:a3:00:06:87:11:7f:a7:f8:c9:
66:c2:66:4a:8e:c9:95:ce:b7:65:40:21:58:3b:c1:
e5:55:d9:92:4c:a2:6f:2e:22:9e:d7:d4:bd:b6:58:
23:88:54:7f:8a:7e:07:91:f3:a9:c7:7b:86:f9:3f:
c4:ad:87:68:32:52:e9:80:01:69:a9:51:2d:0a:48:
f1:df:38:24:db:18:a2:2a:12:0b:03:ba:4d:2f:d6:
b8:f6:54:ff:2a:44:da:85:79:2f:b2:5b:61:5a:a4:
6a:e9:05:c8:58:c8:8f:b3:9c:d7:ca:60:cd:77:36:
8c:7b:cd:79:3b:2b:88:77:96:4b:62:3d:49:2c:52:
2f:c7:93:39:95:c4:80:de:01:37:d0:e1:dc:2a:64:
bb:ae:c4:43:12:d9:ac:29:46:f6:7b:a5:71:34:11:
17:f5:f7:3c:ba:ea:3e:0c:b1:45:ea:34:61:f2:e9:
d6:41:ca:2b:e6:3c:7f:6f:bb:99:cb:38:57:9b:ed:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:05:52:F4:1A:65:48:0D:42:99:13:32:C8:92:B4:CC:8A:12:B3:6E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gAVS9BplSA1CmRMyyJK0zIoSs24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.17.0/24
212.134.19.0/24
212.134.25.0/24
212.134.48.0/24
212.134.51.0/24
212.134.56.0/24
212.134.154.0/24
212.134.157.0/24
212.134.177.0/24
212.134.189.0-212.134.190.255
212.134.206.0/23
212.134.216.0/24
212.134.231.0/24
212.134.246.0/24
212.134.248.0/24
212.135.134.0/24
212.135.145.0/24
212.135.148.0/24
212.135.152.0/24
212.135.154.0/24
212.135.164.0/24
212.135.170.0/24
212.135.173.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ae:b5:ce:1b:ec:21:c9:35:0c:40:21:67:94:05:df:8f:c5:
ab:e2:97:c5:55:78:21:b3:5e:bc:5b:26:7b:ee:40:37:d6:71:
a0:4a:3b:27:b8:2d:a1:b4:2c:ba:6f:b8:38:c7:ab:cc:e1:f5:
c1:fe:64:8e:02:92:b0:13:6d:99:f5:c2:20:30:2c:1f:31:0f:
91:93:ac:12:45:68:e3:5e:6a:37:aa:51:a0:3b:cd:04:47:da:
51:98:92:43:ba:37:c7:5d:af:d3:1e:cb:71:8d:9c:fe:ed:84:
b1:46:d0:fd:7f:00:f7:dd:07:ba:95:9f:9b:71:30:46:e7:d9:
02:cd:24:6f:73:57:44:e5:97:5f:a5:cf:b9:a2:a0:79:d5:74:
f1:b9:4e:bb:82:21:67:18:47:07:51:6b:fe:e2:6a:bf:9f:0e:
12:ff:3e:d2:a6:56:67:3c:38:ff:3e:33:1a:e3:64:55:60:74:
14:5a:be:76:7c:eb:69:3d:56:e9:21:b8:08:02:87:4f:c1:c1:
65:7f:c1:b3:85:0c:52:96:19:d5:5f:9f:a8:df:35:87:f4:3c:
c5:99:fd:5a:c9:49:57:bf:11:a8:f4:85:6d:bb:dd:98:49:b9:
39:c3:9e:68:65:a7:35:f6:62:75:54:5f:a4:67:92:e1:86:a2:
1f:52:f5:3a
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAZ2bMgpuNxF7oi7RlJ9VuGOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNDE3MTEyNzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDA1NTJmNDFhNjU0ODBkNDI5OTEzMzJjODkyYjRjYzhhMTJiMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrM2NYXJRhvFAlOjbEsKRrsJYBX+
9LuAews7fhwopJ75alffPOMGbv91CfqHN3ptsFvjaODDtlOAvsOZpdz9t6mjAAaH
EX+n+MlmwmZKjsmVzrdlQCFYO8HlVdmSTKJvLiKe19S9tlgjiFR/in4HkfOpx3uG
+T/ErYdoMlLpgAFpqVEtCkjx3zgk2xiiKhILA7pNL9a49lT/KkTahXkvslthWqRq
6QXIWMiPs5zXymDNdzaMe815OyuId5ZLYj1JLFIvx5M5lcSA3gE30OHcKmS7rsRD
EtmsKUb2e6VxNBEX9fc8uuo+DLFF6jRh8unWQcor5jx/b7uZyzhXm+2MjQIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFIAFUvQaZUgNQpkTMsiStMyKErNuMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZ0FWUzlCcGxTQTFDbVJNeXlKSzB6SW9TczI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBADU
hhEDBADUhhMDBADUhhkDBADUhjADBADUhjMDBADUhjgDBADUhpoDBADUhp0DBADU
hrEwDAMEANSGvQMEANSGvgMEAdSGzgMEANSG2AMEANSG5wMEANSG9gMEANSG+AME
ANSHhgMEANSHkQMEANSHlAMEANSHmAMEANSHmgMEANSHpAMEANSHqgMEANSHrTAN
BgkqhkiG9w0BAQsFAAOCAQEAgK61zhvsIck1DEAhZ5QF34/Fq+KXxVV4IbNevFsm
e+5AN9ZxoEo7J7gtobQsum+4OMerzOH1wf5kjgKSsBNtmfXCIDAsHzEPkZOsEkVo
415qN6pRoDvNBEfaUZiSQ7o3x12v0x7LcY2c/u2EsUbQ/X8A990HupWfm3EwRufZ
As0kb3NXROWXX6XPuaKgedV08blOu4IhZxhHB1Fr/uJqv58OEv8+0qZWZzw4/z4z
GuNkVWB0FFq+dnzraT1W6SG4CAKHT8HBZX/Bs4UMUpYZ1V+fqN81h/Q8xZn9WslJ
V78RqPSFbbvdmEm5OcOeaGWnNfZidVRfpGeS4YaiH1L1Og==
-----END CERTIFICATE-----
Generated at Sun Apr 19 23:00:17 2026 by rpki-client