Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Lfyg_bgteG-lJRybsvEm2axxLrM.roa
File: Lfyg_bgteG-lJRybsvEm2axxLrM.roa (raw, json)
Hash identifier: aFs/lYquR3A19WaXe/uQKIRX9SrzPAnO9qKk7nekkCc=
Subject key identifier: 2D:FC:A0:FD:B8:2D:78:6F:A5:25:1C:9B:B2:F1:26:D9:AC:71:2E:B3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DF1B7D3D1F747A363B29E5C6C125BE604
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Lfyg_bgteG-lJRybsvEm2axxLrM.roa
Signing time: Mon 04 May 2026 06:40:49 +0000
ROA not before: Mon 04 May 2026 06:40:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48266
IP address blocks: 212.135.32.0/20 maxlen: 24
212.135.32.0/24 maxlen: 24
212.135.33.0/24 maxlen: 24
212.135.34.0/24 maxlen: 24
212.135.35.0/24 maxlen: 24
212.135.36.0/24 maxlen: 24
212.135.37.0/24 maxlen: 24
212.135.38.0/24 maxlen: 24
212.135.39.0/24 maxlen: 24
212.135.40.0/24 maxlen: 24
212.135.41.0/24 maxlen: 24
212.135.42.0/24 maxlen: 24
212.135.43.0/24 maxlen: 24
212.135.44.0/24 maxlen: 24
212.135.45.0/24 maxlen: 24
212.135.46.0/24 maxlen: 24
212.135.47.0/24 maxlen: 24
212.135.112.0/20 maxlen: 24
212.135.112.0/24 maxlen: 24
212.135.113.0/24 maxlen: 24
212.135.114.0/24 maxlen: 24
212.135.115.0/24 maxlen: 24
212.135.116.0/24 maxlen: 24
212.135.117.0/24 maxlen: 24
212.135.118.0/24 maxlen: 24
212.135.119.0/24 maxlen: 24
212.135.120.0/24 maxlen: 24
212.135.121.0/24 maxlen: 24
212.135.122.0/24 maxlen: 24
212.135.123.0/24 maxlen: 24
212.135.124.0/24 maxlen: 24
212.135.125.0/24 maxlen: 24
212.135.126.0/24 maxlen: 24
212.135.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f1:b7:d3:d1:f7:47:a3:63:b2:9e:5c:6c:12:5b:e6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 4 06:40:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dfca0fdb82d786fa5251c9bb2f126d9ac712eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:5f:87:41:2a:81:e6:87:57:ed:c8:04:a0:
f1:89:ca:57:4b:93:cb:1b:14:e7:96:99:54:3f:ae:
65:20:82:45:52:0d:b0:b1:3a:c1:6b:1e:66:41:6a:
0f:1e:c7:97:8c:e5:60:8c:75:68:dc:98:86:63:0d:
2e:4f:a2:c2:78:fb:f5:00:29:40:ab:e5:ba:5f:24:
c5:b8:20:42:18:d8:d5:53:51:d9:5d:3e:86:2c:4c:
e2:fe:7c:4a:89:2b:aa:20:f1:44:41:a1:43:27:6a:
aa:9a:3e:74:b3:e1:8f:22:f7:11:9b:bb:5d:4f:2d:
eb:e5:84:77:7b:ea:cb:0b:ee:ef:73:ff:a7:7b:7b:
c3:97:90:f8:d6:26:4d:77:83:03:eb:fb:44:5c:4c:
06:44:f4:26:e4:1b:c2:c3:e0:79:06:86:25:1b:ce:
8c:dd:85:9d:76:ad:5c:be:c3:78:72:93:57:2b:63:
b7:ad:bf:54:16:30:e5:4d:7e:af:5b:71:00:bb:df:
e1:69:09:a4:e8:32:33:d2:7e:17:52:ba:f1:59:47:
91:80:ba:69:ae:fd:2b:b0:d3:9e:4c:ff:6f:1d:3c:
43:57:1a:74:e3:8d:7c:2d:d5:ff:f4:f5:05:7e:f6:
d5:88:70:c6:90:aa:d6:74:5a:1a:57:d8:a8:4e:24:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FC:A0:FD:B8:2D:78:6F:A5:25:1C:9B:B2:F1:26:D9:AC:71:2E:B3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Lfyg_bgteG-lJRybsvEm2axxLrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.32.0/20
212.135.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:42:fd:ee:aa:cc:94:ef:32:4d:04:df:18:a8:a2:fc:3e:a2:
f3:65:fc:4b:1b:a2:22:7b:6d:ba:d6:b7:bc:8c:91:44:5a:eb:
83:78:90:54:a0:80:4b:bf:ee:0f:5f:bc:68:99:b2:aa:0a:aa:
f5:72:95:b8:b6:51:70:25:7e:26:e5:52:42:21:fc:9a:55:f3:
49:b0:0b:f6:3f:6a:43:77:83:fb:cc:32:d7:0e:7a:d4:77:f4:
b8:36:27:41:9d:09:c1:51:cb:45:42:6f:0b:b9:ce:2b:f5:f6:
93:aa:8f:cb:95:95:0c:2a:da:17:56:4c:17:a3:cd:ad:54:29:
ba:e4:7f:c9:84:e9:61:14:1f:6f:c4:5e:f6:d3:90:a5:88:4e:
2d:ee:f6:21:34:c1:9b:89:72:81:c2:44:b0:64:d9:54:a0:9d:
f5:d1:f0:f1:de:00:a3:f9:6b:a0:84:45:81:43:41:9c:a0:5d:
bd:11:ac:10:07:5e:75:90:28:0f:11:ab:1f:b1:36:9b:54:7b:
a8:dc:42:64:9c:e8:d3:21:81:27:54:19:1b:0d:57:57:05:e3:
d4:c0:a9:d7:30:dc:e0:bd:c4:dd:fc:1b:b8:fa:92:7f:1d:03:
89:3a:6c:e1:cd:5b:c2:8c:21:fc:73:b3:42:19:f2:15:d8:67:
be:ff:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:09 2026 by rpki-client