Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qODvu02izTMdVQkThWzneIRQWBg.roa
File: qODvu02izTMdVQkThWzneIRQWBg.roa (raw, json)
Hash identifier: Fbg2YzIskYuT74jGL4MSDkiy1bw0i7HLLQtXBlN9oPM=
Subject key identifier: A8:E0:EF:BB:4D:A2:CD:33:1D:55:09:13:85:6C:E7:78:84:50:58:18
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E8898AC1DDA85D7652E4D4DC096518BFD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qODvu02izTMdVQkThWzneIRQWBg.roa
Signing time: Tue 02 Jun 2026 13:49:27 +0000
ROA not before: Tue 02 Jun 2026 13:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.134.16.0/24 maxlen: 24
212.134.17.0/24 maxlen: 24
212.134.18.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.23.0/24 maxlen: 24
212.134.24.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.37.0/24 maxlen: 24
212.134.39.0/24 maxlen: 24
212.134.40.0/22 maxlen: 24
212.134.40.0/24 maxlen: 24
212.134.41.0/24 maxlen: 24
212.134.42.0/24 maxlen: 24
212.134.43.0/24 maxlen: 24
212.134.45.0/24 maxlen: 24
212.134.47.0/24 maxlen: 24
212.134.48.0/22 maxlen: 24
212.134.48.0/24 maxlen: 24
212.134.50.0/24 maxlen: 24
212.134.51.0/24 maxlen: 24
212.134.53.0/24 maxlen: 24
212.134.55.0/24 maxlen: 24
212.134.56.0/23 maxlen: 24
212.134.56.0/24 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.81.0/24 maxlen: 24
212.134.82.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.88.0/24 maxlen: 24
212.134.89.0/24 maxlen: 24
212.134.91.0/24 maxlen: 24
212.134.95.0/24 maxlen: 24
212.134.97.0/24 maxlen: 24
212.134.100.0/22 maxlen: 24
212.134.101.0/24 maxlen: 24
212.134.102.0/24 maxlen: 24
212.134.103.0/24 maxlen: 24
212.134.106.0/23 maxlen: 24
212.134.112.0/22 maxlen: 24
212.134.112.0/24 maxlen: 24
212.134.113.0/24 maxlen: 24
212.134.114.0/24 maxlen: 24
212.134.115.0/24 maxlen: 24
212.134.120.0/22 maxlen: 24
212.134.121.0/24 maxlen: 24
212.134.122.0/24 maxlen: 24
212.134.123.0/24 maxlen: 24
212.134.128.0/22 maxlen: 24
212.134.128.0/24 maxlen: 24
212.134.129.0/24 maxlen: 24
212.134.132.0/22 maxlen: 24
212.134.134.0/24 maxlen: 24
212.134.136.0/21 maxlen: 24
212.134.136.0/22 maxlen: 24
212.134.140.0/22 maxlen: 24
212.134.148.0/24 maxlen: 24
212.134.152.0/22 maxlen: 24
212.134.152.0/24 maxlen: 24
212.134.153.0/24 maxlen: 24
212.134.155.0/24 maxlen: 24
212.134.159.0/24 maxlen: 24
212.134.160.0/22 maxlen: 24
212.134.160.0/24 maxlen: 24
212.134.161.0/24 maxlen: 24
212.134.163.0/24 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.175.0/24 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.177.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.180.0/22 maxlen: 24
212.134.184.0/22 maxlen: 24
212.134.188.0/22 maxlen: 24
212.134.188.0/24 maxlen: 24
212.134.189.0/24 maxlen: 24
212.134.190.0/24 maxlen: 24
212.134.191.0/24 maxlen: 24
212.134.196.0/22 maxlen: 24
212.134.197.0/24 maxlen: 24
212.134.198.0/24 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.200.0/22 maxlen: 24
212.134.204.0/22 maxlen: 24
212.134.204.0/24 maxlen: 24
212.134.205.0/24 maxlen: 24
212.134.207.0/24 maxlen: 24
212.134.212.0/22 maxlen: 24
212.134.216.0/22 maxlen: 24
212.134.216.0/24 maxlen: 24
212.134.228.0/22 maxlen: 24
212.134.228.0/24 maxlen: 24
212.134.229.0/24 maxlen: 24
212.134.230.0/24 maxlen: 24
212.134.231.0/24 maxlen: 24
212.134.232.0/21 maxlen: 24
212.134.232.0/22 maxlen: 24
212.134.232.0/24 maxlen: 24
212.134.236.0/22 maxlen: 24
212.134.244.0/22 maxlen: 24
212.134.244.0/24 maxlen: 24
212.134.245.0/24 maxlen: 24
212.134.246.0/24 maxlen: 24
212.134.247.0/24 maxlen: 24
212.134.248.0/22 maxlen: 24
212.134.248.0/24 maxlen: 24
212.134.249.0/24 maxlen: 24
212.134.252.0/22 maxlen: 24
212.134.254.0/24 maxlen: 24
212.135.16.0/22 maxlen: 24
212.135.16.0/24 maxlen: 24
212.135.17.0/24 maxlen: 24
212.135.18.0/24 maxlen: 24
212.135.19.0/24 maxlen: 24
212.135.20.0/24 maxlen: 24
212.135.21.0/24 maxlen: 24
212.135.22.0/23 maxlen: 24
212.135.22.0/24 maxlen: 24
212.135.23.0/24 maxlen: 24
212.135.24.0/23 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.28.0/23 maxlen: 24
212.135.28.0/24 maxlen: 24
212.135.29.0/24 maxlen: 24
212.135.80.0/20 maxlen: 24
212.135.128.0/23 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.140.0/23 maxlen: 24
212.135.141.0/24 maxlen: 24
212.135.142.0/23 maxlen: 24
212.135.144.0/23 maxlen: 24
212.135.144.0/24 maxlen: 24
212.135.145.0/24 maxlen: 24
212.135.149.0/24 maxlen: 24
212.135.152.0/24 maxlen: 24
212.135.154.0/24 maxlen: 24
212.135.155.0/24 maxlen: 24
212.135.156.0/24 maxlen: 24
212.135.157.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.162.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.167.0/24 maxlen: 24
212.135.168.0/24 maxlen: 24
212.135.169.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
212.135.196.0/24 maxlen: 24
212.135.197.0/24 maxlen: 24
212.135.198.0/24 maxlen: 24
212.135.199.0/24 maxlen: 24
212.135.204.0/22 maxlen: 24
212.135.240.0/23 maxlen: 24
212.135.240.0/24 maxlen: 24
212.135.241.0/24 maxlen: 24
212.135.242.0/24 maxlen: 24
212.135.243.0/24 maxlen: 24
212.135.244.0/23 maxlen: 24
212.135.246.0/24 maxlen: 24
212.135.247.0/24 maxlen: 24
212.135.248.0/23 maxlen: 24
212.135.250.0/24 maxlen: 24
212.135.252.0/23 maxlen: 24
212.135.252.0/24 maxlen: 24
212.135.253.0/24 maxlen: 24
212.135.254.0/24 maxlen: 24
212.135.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:98:ac:1d:da:85:d7:65:2e:4d:4d:c0:96:51:8b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 2 13:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8e0efbb4da2cd331d550913856ce77884505818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:51:6d:79:ba:af:7e:b1:8e:0c:f9:11:8a:
e7:c0:72:a9:89:fb:6b:8a:a4:82:9a:57:93:ab:93:
0e:57:c8:dd:8b:b2:9e:a8:74:a8:da:8a:be:d0:12:
09:79:58:70:32:ad:f6:ac:b2:36:15:a5:d7:e3:95:
91:da:f2:49:78:c5:c6:6f:bd:26:92:f3:d9:1a:d9:
3a:db:6f:21:64:b3:58:35:89:66:a4:4c:5b:d6:84:
d1:7b:45:d8:09:3e:4e:3e:c8:a8:5a:d6:fd:1e:f6:
db:86:4b:7c:8a:21:8e:02:4c:e7:7a:bc:a7:90:cb:
80:f0:c7:f0:ba:7e:de:1e:aa:6f:71:9a:04:7a:56:
d1:1f:64:4d:16:67:c3:14:24:a1:7c:c1:3f:af:58:
17:ed:bd:00:79:06:d5:36:3c:a5:c9:88:d2:45:b8:
e1:cf:48:d0:bf:b5:ed:7c:b1:85:49:c0:43:a5:78:
ca:69:13:8f:f7:61:76:f9:23:17:6a:4a:96:f4:47:
49:a4:27:ca:7e:3f:9d:ae:97:22:59:55:8e:73:c7:
65:33:70:e8:56:5a:f9:7d:23:39:53:e7:ed:5d:7c:
88:66:e8:ba:6b:7a:b8:cc:ef:51:d1:b5:82:89:c6:
76:f1:3b:42:fb:1e:e9:ae:a1:de:25:33:96:0b:92:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E0:EF:BB:4D:A2:CD:33:1D:55:09:13:85:6C:E7:78:84:50:58:18
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qODvu02izTMdVQkThWzneIRQWBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.16.0/22
212.134.22.0-212.134.24.255
212.134.36.0/23
212.134.39.0-212.134.43.255
212.134.45.0/24
212.134.47.0-212.134.51.255
212.134.53.0/24
212.134.55.0-212.134.58.255
212.134.80.0/22
212.134.88.0/23
212.134.91.0/24
212.134.95.0/24
212.134.97.0/24
212.134.100.0/22
212.134.106.0/23
212.134.112.0/22
212.134.120.0/22
212.134.128.0/20
212.134.148.0/24
212.134.152.0/22
212.134.159.0-212.134.163.255
212.134.171.0/24
212.134.175.0-212.134.177.255
212.134.179.0-212.134.191.255
212.134.196.0-212.134.207.255
212.134.212.0-212.134.219.255
212.134.228.0-212.134.239.255
212.134.244.0-212.134.255.255
212.135.16.0-212.135.26.255
212.135.28.0/23
212.135.80.0/20
212.135.128.0/23
212.135.135.0/24
212.135.140.0-212.135.145.255
212.135.149.0/24
212.135.152.0/24
212.135.154.0-212.135.158.255
212.135.161.0-212.135.162.255
212.135.164.0-212.135.173.255
212.135.196.0/22
212.135.204.0/22
212.135.240.0-212.135.250.255
212.135.252.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:ab:00:14:7e:30:d7:bf:9a:25:ff:ae:99:88:4c:b9:9d:94:
f4:1a:9a:38:5a:da:e5:51:0a:4a:83:a4:ae:56:d7:07:c9:65:
cc:4e:e9:a5:0d:d2:47:a5:4b:0f:af:02:26:ce:a8:9e:35:3e:
63:ae:1b:38:06:3a:62:c6:c5:fb:8b:0c:ab:7f:ff:ab:8e:a1:
df:eb:b3:3c:f9:8d:5c:ba:c0:2c:f5:c3:d3:39:a2:a2:c2:80:
25:f7:71:99:37:4e:a7:20:12:ff:00:92:fa:08:5e:44:29:77:
61:ea:ef:8f:bb:41:a6:f0:72:1d:70:6f:87:d5:9d:cd:22:f0:
6c:51:47:ed:7d:f7:88:8d:a6:c0:e6:b2:ff:a5:2a:30:bc:8f:
d7:43:c1:69:86:eb:ab:84:76:08:6c:19:b2:c2:bc:98:34:71:
c5:66:e6:c3:09:3e:d7:b6:48:7f:b2:f9:1b:8f:87:45:07:eb:
bf:42:1f:9c:eb:9d:d8:00:f5:a7:ec:ef:73:1a:b3:1b:0c:07:
fb:4c:f0:74:61:7e:62:02:04:3c:e1:5a:4e:05:5c:fd:ae:e4:
a1:40:67:b0:3c:61:61:ad:66:04:f3:53:33:50:9a:78:e5:c9:
50:6a:23:c6:4e:45:51:f8:3a:d0:55:6d:34:b8:2b:32:0c:1e:
1a:e8:e7:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:49 2026 by rpki-client