Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Gz3TfICukPGj9bJbUuoqdtF5i2E.roa
File: Gz3TfICukPGj9bJbUuoqdtF5i2E.roa (raw, json)
Hash identifier: awUeGVtXOp3PE86PicjboT/ugHUiO71o6AFCXr5YYm4=
Subject key identifier: 1B:3D:D3:7C:80:AE:90:F1:A3:F5:B2:5B:52:EA:2A:76:D1:79:8B:61
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E1B95B85BA32F463DEB0035C7C2EE223B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Gz3TfICukPGj9bJbUuoqdtF5i2E.roa
Signing time: Tue 12 May 2026 09:47:37 +0000
ROA not before: Tue 12 May 2026 09:47:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 212.134.49.0/24 maxlen: 24
212.134.191.0/24 maxlen: 24
212.134.245.0/24 maxlen: 24
212.134.249.0/24 maxlen: 24
212.135.141.0/24 maxlen: 24
212.135.150.0/24 maxlen: 24
212.135.197.0/24 maxlen: 24
212.135.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:95:b8:5b:a3:2f:46:3d:eb:00:35:c7:c2:ee:22:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 12 09:47:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b3dd37c80ae90f1a3f5b25b52ea2a76d1798b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:3d:d1:84:29:8b:b2:09:04:bd:15:54:38:
82:d4:7c:25:d9:87:38:f0:3c:b6:ac:51:6a:13:72:
0f:72:1e:49:64:1a:c8:ca:30:a3:da:05:3e:bb:ef:
5e:76:00:f9:e2:71:30:43:2d:90:50:41:05:31:d8:
51:8e:99:66:a7:54:a0:f9:dc:d6:7c:d5:a8:f9:76:
1c:e1:e7:2f:0d:02:d4:1f:65:06:c9:ad:71:53:39:
69:bf:08:67:7d:39:55:de:d6:0b:62:ca:9b:a6:69:
6b:3b:be:df:e8:61:bb:4f:ac:6c:c7:2b:28:63:03:
ee:fe:72:ab:08:43:f9:8c:02:ff:70:c3:32:f4:44:
54:95:d3:6f:26:21:42:b8:85:6a:52:3a:cc:85:e8:
28:04:b8:72:ee:b7:2e:a8:6c:72:a8:8b:96:84:69:
d2:22:dc:8b:e3:d4:c6:aa:2b:a9:ff:3c:71:7d:b3:
f0:b0:a3:27:fd:21:d7:8f:68:fd:a7:bb:c9:9f:98:
f9:67:b8:96:e4:38:ed:7d:dc:63:7c:22:0f:6b:e3:
dd:fc:49:ea:99:30:d3:f8:d3:d5:32:71:45:f3:3a:
2a:36:e1:f6:f0:35:43:08:29:d2:94:cd:a1:9f:30:
e3:fb:08:46:2f:b3:8e:6b:91:47:cf:1d:73:63:a8:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3D:D3:7C:80:AE:90:F1:A3:F5:B2:5B:52:EA:2A:76:D1:79:8B:61
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Gz3TfICukPGj9bJbUuoqdtF5i2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.49.0/24
212.134.191.0/24
212.134.245.0/24
212.134.249.0/24
212.135.141.0/24
212.135.150.0/24
212.135.197.0/24
212.135.242.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:4e:83:43:e1:5a:1f:f3:2b:c5:ec:53:12:44:d1:5f:10:8c:
13:fe:f6:dd:8e:d6:f4:69:ca:f3:f5:22:dd:c7:7e:70:ad:88:
25:79:c2:11:bc:22:7b:04:c7:2a:3d:6e:01:d0:7b:95:92:b8:
40:f7:2c:53:f4:1d:16:e4:01:4d:6a:9d:49:9b:a3:b6:53:74:
9c:6c:fb:29:ea:e8:70:18:48:f6:e2:83:0d:d2:ac:8c:cb:69:
f8:eb:53:6f:e3:d1:f7:36:f5:fe:db:45:df:f0:8f:59:21:fe:
90:77:cf:cd:40:26:fb:35:49:03:d8:89:3d:dd:c1:a9:01:57:
a6:fb:0b:87:99:3f:20:b1:e7:f6:c2:b8:4e:50:49:42:59:fa:
49:19:38:5a:ed:98:cf:7d:79:f3:93:82:39:26:45:bd:38:85:
76:0b:26:fa:6c:57:05:7d:21:c9:2e:fe:e2:97:ee:43:be:6e:
a1:5f:15:1d:6e:14:d2:cd:5f:52:66:66:16:2f:91:be:29:8e:
55:ea:a3:f4:d4:3a:18:08:8d:32:e4:6b:5d:33:a6:fa:a3:86:
23:d1:8d:95:8d:48:37:06:f8:30:47:ea:db:a3:30:c8:3e:32:
ac:9d:40:17:68:0e:1a:bb:a2:c7:d9:e5:bc:b5:f4:7d:b2:11:
fd:da:61:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:37 2026 by rpki-client