Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LgiBuzu0BUbwfG4ttOb3jreZ7Pk.roa
File: LgiBuzu0BUbwfG4ttOb3jreZ7Pk.roa (raw, json)
Hash identifier: u1Tky8WWqpcsDfYyDIiRNuOn0Mpkkp9Sfr2jdrBTAWE=
Subject key identifier: 2E:08:81:BB:3B:B4:05:46:F0:7C:6E:2D:B4:E6:F7:8E:B7:99:EC:F9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E1C0E909AC879512EF0B43A3A5BBC928E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LgiBuzu0BUbwfG4ttOb3jreZ7Pk.roa
Signing time: Tue 12 May 2026 11:59:37 +0000
ROA not before: Tue 12 May 2026 11:59:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.134.17.0/24 maxlen: 24
212.134.18.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.23.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.40.0/22 maxlen: 24
212.134.41.0/24 maxlen: 24
212.134.42.0/24 maxlen: 24
212.134.45.0/24 maxlen: 24
212.134.47.0/24 maxlen: 24
212.134.48.0/22 maxlen: 24
212.134.51.0/24 maxlen: 24
212.134.56.0/23 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.81.0/24 maxlen: 24
212.134.82.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.88.0/24 maxlen: 24
212.134.89.0/24 maxlen: 24
212.134.91.0/24 maxlen: 24
212.134.97.0/24 maxlen: 24
212.134.100.0/22 maxlen: 24
212.134.101.0/24 maxlen: 24
212.134.102.0/24 maxlen: 24
212.134.103.0/24 maxlen: 24
212.134.106.0/23 maxlen: 24
212.134.112.0/22 maxlen: 24
212.134.112.0/24 maxlen: 24
212.134.113.0/24 maxlen: 24
212.134.114.0/24 maxlen: 24
212.134.115.0/24 maxlen: 24
212.134.120.0/22 maxlen: 24
212.134.121.0/24 maxlen: 24
212.134.122.0/24 maxlen: 24
212.134.123.0/24 maxlen: 24
212.134.128.0/22 maxlen: 24
212.134.128.0/24 maxlen: 24
212.134.129.0/24 maxlen: 24
212.134.130.0/24 maxlen: 24
212.134.132.0/22 maxlen: 24
212.134.134.0/24 maxlen: 24
212.134.136.0/22 maxlen: 24
212.134.140.0/22 maxlen: 24
212.134.148.0/24 maxlen: 24
212.134.152.0/22 maxlen: 24
212.134.152.0/24 maxlen: 24
212.134.157.0/24 maxlen: 24
212.134.160.0/22 maxlen: 24
212.134.160.0/24 maxlen: 24
212.134.163.0/24 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.176.0/24 maxlen: 24
212.134.177.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.188.0/22 maxlen: 24
212.134.188.0/24 maxlen: 24
212.134.190.0/24 maxlen: 24
212.134.196.0/22 maxlen: 24
212.134.198.0/24 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.204.0/22 maxlen: 24
212.134.205.0/24 maxlen: 24
212.134.207.0/24 maxlen: 24
212.134.212.0/22 maxlen: 24
212.134.216.0/22 maxlen: 24
212.134.216.0/24 maxlen: 24
212.134.228.0/22 maxlen: 24
212.134.228.0/24 maxlen: 24
212.134.232.0/22 maxlen: 24
212.134.232.0/24 maxlen: 24
212.134.236.0/22 maxlen: 24
212.134.244.0/22 maxlen: 24
212.134.246.0/24 maxlen: 24
212.134.247.0/24 maxlen: 24
212.134.248.0/22 maxlen: 24
212.134.248.0/24 maxlen: 24
212.134.252.0/22 maxlen: 24
212.135.16.0/22 maxlen: 24
212.135.20.0/24 maxlen: 24
212.135.21.0/24 maxlen: 24
212.135.22.0/23 maxlen: 24
212.135.22.0/24 maxlen: 24
212.135.24.0/23 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.28.0/23 maxlen: 24
212.135.80.0/20 maxlen: 24
212.135.128.0/23 maxlen: 24
212.135.134.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.140.0/23 maxlen: 24
212.135.142.0/23 maxlen: 24
212.135.144.0/23 maxlen: 24
212.135.145.0/24 maxlen: 24
212.135.154.0/24 maxlen: 24
212.135.155.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.162.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
212.135.165.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.167.0/24 maxlen: 24
212.135.168.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
212.135.196.0/24 maxlen: 24
212.135.198.0/24 maxlen: 24
212.135.204.0/22 maxlen: 24
212.135.240.0/23 maxlen: 24
212.135.240.0/24 maxlen: 24
212.135.241.0/24 maxlen: 24
212.135.243.0/24 maxlen: 24
212.135.244.0/23 maxlen: 24
212.135.246.0/24 maxlen: 24
212.135.247.0/24 maxlen: 24
212.135.248.0/23 maxlen: 24
212.135.250.0/24 maxlen: 24
212.135.252.0/23 maxlen: 24
212.135.252.0/24 maxlen: 24
212.135.253.0/24 maxlen: 24
212.135.254.0/24 maxlen: 24
212.135.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0e:90:9a:c8:79:51:2e:f0:b4:3a:3a:5b:bc:92:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 12 11:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e0881bb3bb40546f07c6e2db4e6f78eb799ecf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:af:53:fd:b1:5f:1a:23:91:0c:b1:d3:66:
ac:eb:99:05:60:fe:06:5d:88:3b:7b:b0:cd:eb:f7:
b1:7b:a3:17:52:17:e2:bb:22:07:95:cb:96:5e:b6:
8d:fc:9d:b5:9b:f1:34:96:61:b6:60:f0:0a:91:df:
47:ef:ed:47:63:70:75:89:86:80:05:c7:a2:fc:60:
66:83:cc:bc:61:1c:20:77:f2:61:fc:ee:df:27:41:
c6:9d:c4:75:4a:e4:b2:96:ca:e5:d6:d8:26:91:52:
ef:ef:68:8f:99:44:c8:f2:1b:50:d3:19:13:1d:9d:
c4:c5:a6:2a:d0:dc:6a:48:2d:4e:48:a6:48:bf:7e:
1d:23:e1:3c:aa:cc:92:e6:59:74:13:10:54:57:19:
ee:c1:ba:64:8d:6d:94:a3:22:4a:c7:32:8e:61:a3:
54:6d:ec:b0:d4:7a:c4:1a:41:82:79:57:1f:a8:60:
84:c0:47:33:06:51:a4:bb:0c:57:13:78:7b:f1:f9:
14:86:53:08:bf:ed:da:79:9e:bc:48:20:90:52:0e:
79:10:9b:68:a3:f7:1d:00:b5:04:89:d7:11:61:a8:
0c:16:a8:31:41:a4:e3:61:44:1f:8f:ac:5f:c1:31:
dc:33:4f:ed:5d:cb:02:bf:7c:5d:35:bd:70:df:d5:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:08:81:BB:3B:B4:05:46:F0:7C:6E:2D:B4:E6:F7:8E:B7:99:EC:F9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LgiBuzu0BUbwfG4ttOb3jreZ7Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.17.0-212.134.19.255
212.134.22.0/23
212.134.36.0/24
212.134.40.0/22
212.134.45.0/24
212.134.47.0-212.134.51.255
212.134.56.0-212.134.58.255
212.134.80.0/22
212.134.88.0/23
212.134.91.0/24
212.134.97.0/24
212.134.100.0/22
212.134.106.0/23
212.134.112.0/22
212.134.120.0/22
212.134.128.0/20
212.134.148.0/24
212.134.152.0/22
212.134.157.0/24
212.134.160.0/22
212.134.171.0/24
212.134.176.0/23
212.134.179.0/24
212.134.188.0/22
212.134.196.0/22
212.134.204.0/22
212.134.212.0-212.134.219.255
212.134.228.0-212.134.239.255
212.134.244.0-212.134.255.255
212.135.16.0-212.135.26.255
212.135.28.0/23
212.135.80.0/20
212.135.128.0/23
212.135.134.0/23
212.135.140.0-212.135.145.255
212.135.154.0/23
212.135.158.0/24
212.135.161.0-212.135.162.255
212.135.164.0-212.135.168.255
212.135.170.0/24
212.135.173.0/24
212.135.196.0/24
212.135.198.0/24
212.135.204.0/22
212.135.240.0/23
212.135.243.0-212.135.250.255
212.135.252.0/22
Signature Algorithm: sha256WithRSAEncryption
94:bd:87:08:ea:7d:1e:ff:98:c3:22:53:54:b6:ea:67:c0:d7:
3a:41:25:9e:1d:74:8f:b7:a8:bc:97:35:ef:92:14:d4:57:8e:
95:7c:3e:3f:01:6b:58:67:31:94:50:bc:a2:bc:04:0d:38:88:
96:61:93:83:fc:8d:8e:d7:84:6e:77:0f:61:9d:24:26:dd:7d:
a5:87:25:54:be:40:cd:f4:f1:05:58:e0:4b:0d:d0:27:32:5c:
07:6e:14:e5:1e:04:68:26:04:17:6d:c5:01:c4:91:a3:d2:89:
06:42:35:16:40:5f:4f:65:37:e8:72:c6:84:ea:54:d0:15:5f:
00:85:e2:a1:38:0a:b6:47:dd:8b:4c:76:13:c2:c7:3d:04:b8:
99:16:a9:df:3a:90:c1:34:8f:de:56:75:aa:7a:a8:83:5f:de:
5e:6b:e8:5c:18:c8:f5:ce:af:b3:47:e6:52:75:55:44:28:79:
8f:77:02:8b:86:a9:81:87:5a:59:2f:71:f7:15:ae:4e:af:d4:
46:b3:29:40:80:e9:2c:95:d7:77:c2:c7:14:0e:dd:00:ec:b5:
86:23:74:9e:9f:7f:98:ed:8a:10:2d:8d:97:c8:be:c2:f1:1c:
47:54:19:e6:ad:df:ce:cb:63:f1:5b:fd:7b:2b:3e:c9:4b:cd:
da:be:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:34 2026 by rpki-client