Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MUOZDN4knjDzMdXkloqHGw21t1g.roa
File: MUOZDN4knjDzMdXkloqHGw21t1g.roa (raw, json)
Hash identifier: LbtCdU7fs+i/wwv42G2rfWxotbkPyStfcoq3O3rg6M0=
Subject key identifier: 31:43:99:0C:DE:24:9E:30:F3:31:D5:E4:96:8A:87:1B:0D:B5:B7:58
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D24CCDD66387E0009D26DC0C884E222C3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MUOZDN4knjDzMdXkloqHGw21t1g.roa
Signing time: Wed 25 Mar 2026 11:41:38 +0000
ROA not before: Wed 25 Mar 2026 11:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.134.18.0/24 maxlen: 24
212.134.19.0/24 maxlen: 24
212.134.22.0/24 maxlen: 24
212.134.23.0/24 maxlen: 24
212.134.24.0/24 maxlen: 24
212.134.25.0/24 maxlen: 24
212.134.36.0/24 maxlen: 24
212.134.39.0/24 maxlen: 24
212.134.40.0/22 maxlen: 24
212.134.47.0/24 maxlen: 24
212.134.48.0/22 maxlen: 24
212.134.55.0/24 maxlen: 24
212.134.56.0/23 maxlen: 24
212.134.58.0/24 maxlen: 24
212.134.80.0/24 maxlen: 24
212.134.82.0/24 maxlen: 24
212.134.83.0/24 maxlen: 24
212.134.89.0/24 maxlen: 24
212.134.95.0/24 maxlen: 24
212.134.98.0/23 maxlen: 24
212.134.104.0/23 maxlen: 24
212.134.106.0/23 maxlen: 24
212.134.109.0/24 maxlen: 24
212.134.110.0/23 maxlen: 24
212.134.112.0/22 maxlen: 24
212.134.128.0/22 maxlen: 24
212.134.131.0/24 maxlen: 24
212.134.132.0/22 maxlen: 24
212.134.136.0/22 maxlen: 24
212.134.140.0/22 maxlen: 24
212.134.148.0/24 maxlen: 24
212.134.152.0/22 maxlen: 24
212.134.156.0/24 maxlen: 24
212.134.157.0/24 maxlen: 24
212.134.160.0/22 maxlen: 24
212.134.171.0/24 maxlen: 24
212.134.175.0/24 maxlen: 24
212.134.179.0/24 maxlen: 24
212.134.188.0/22 maxlen: 24
212.134.196.0/22 maxlen: 24
212.134.199.0/24 maxlen: 24
212.134.204.0/22 maxlen: 24
212.134.212.0/22 maxlen: 24
212.134.216.0/22 maxlen: 24
212.134.228.0/22 maxlen: 24
212.134.232.0/22 maxlen: 24
212.134.232.0/24 maxlen: 24
212.134.236.0/22 maxlen: 24
212.134.244.0/22 maxlen: 24
212.134.248.0/22 maxlen: 24
212.134.248.0/24 maxlen: 24
212.134.252.0/22 maxlen: 24
212.135.16.0/22 maxlen: 24
212.135.20.0/24 maxlen: 24
212.135.21.0/24 maxlen: 24
212.135.22.0/23 maxlen: 24
212.135.24.0/23 maxlen: 24
212.135.24.0/24 maxlen: 24
212.135.26.0/24 maxlen: 24
212.135.28.0/23 maxlen: 24
212.135.80.0/20 maxlen: 24
212.135.100.0/22 maxlen: 24
212.135.128.0/23 maxlen: 24
212.135.128.0/24 maxlen: 24
212.135.129.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.155.0/24 maxlen: 24
212.135.158.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.162.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
212.135.166.0/24 maxlen: 24
212.135.167.0/24 maxlen: 24
212.135.169.0/24 maxlen: 24
212.135.170.0/24 maxlen: 24
212.135.171.0/24 maxlen: 24
212.135.172.0/24 maxlen: 24
212.135.173.0/24 maxlen: 24
212.135.204.0/22 maxlen: 24
212.135.240.0/23 maxlen: 24
212.135.241.0/24 maxlen: 24
212.135.242.0/24 maxlen: 24
212.135.243.0/24 maxlen: 24
212.135.246.0/24 maxlen: 24
212.135.247.0/24 maxlen: 24
212.135.248.0/23 maxlen: 24
212.135.250.0/24 maxlen: 24
212.135.251.0/24 maxlen: 24
212.135.252.0/23 maxlen: 24
212.135.252.0/24 maxlen: 24
212.135.254.0/24 maxlen: 24
212.135.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:cc:dd:66:38:7e:00:09:d2:6d:c0:c8:84:e2:22:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 25 11:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3143990cde249e30f331d5e4968a871b0db5b758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:f8:c8:50:f0:c8:0c:dc:14:cd:cf:1f:cc:
ac:26:6b:8d:5a:b6:63:43:7d:02:7e:88:39:14:f3:
63:6b:2a:c1:c8:a0:7c:5b:d1:e3:45:34:40:dc:60:
8c:f3:9a:0d:78:9b:66:b5:25:aa:53:34:c8:31:6f:
37:10:a3:f5:cf:20:7e:be:f4:df:3b:79:0b:02:8b:
0b:13:e8:e5:ed:86:8c:c7:3b:d0:4c:d6:1d:81:b1:
7a:37:b2:ef:01:dd:40:49:c7:1f:c1:79:c1:d2:76:
5f:7f:44:f2:26:ee:60:a6:80:63:81:6e:fb:f5:1b:
d3:03:82:5d:6d:78:02:0f:cf:d0:1d:d0:a9:ff:77:
5c:44:2f:7a:3c:92:81:26:84:1b:03:13:79:06:b4:
f8:ff:06:e0:90:18:52:29:a9:dd:e9:a7:66:2a:73:
8f:f3:1a:00:31:15:7c:c5:9f:f0:90:c9:dc:61:aa:
64:ca:94:47:13:de:39:bb:09:a8:19:0a:bd:06:19:
4c:74:a9:77:8e:93:53:5f:b9:41:2c:06:8d:f5:68:
9f:a1:4e:24:d0:21:a3:4e:26:89:af:d4:95:f6:4e:
05:fd:0d:a0:a7:e1:44:d5:8c:ef:62:fc:ee:71:fb:
6b:5e:63:88:06:c8:a6:f8:fc:6c:ae:a0:ff:46:cf:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:43:99:0C:DE:24:9E:30:F3:31:D5:E4:96:8A:87:1B:0D:B5:B7:58
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MUOZDN4knjDzMdXkloqHGw21t1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.18.0/23
212.134.22.0-212.134.25.255
212.134.36.0/24
212.134.39.0-212.134.43.255
212.134.47.0-212.134.51.255
212.134.55.0-212.134.58.255
212.134.80.0/24
212.134.82.0/23
212.134.89.0/24
212.134.95.0/24
212.134.98.0/23
212.134.104.0/22
212.134.109.0-212.134.115.255
212.134.128.0/20
212.134.148.0/24
212.134.152.0-212.134.157.255
212.134.160.0/22
212.134.171.0/24
212.134.175.0/24
212.134.179.0/24
212.134.188.0/22
212.134.196.0/22
212.134.204.0/22
212.134.212.0-212.134.219.255
212.134.228.0-212.134.239.255
212.134.244.0-212.134.255.255
212.135.16.0-212.135.26.255
212.135.28.0/23
212.135.80.0/20
212.135.100.0/22
212.135.128.0/23
212.135.135.0/24
212.135.155.0/24
212.135.158.0/24
212.135.161.0-212.135.162.255
212.135.164.0/24
212.135.166.0/23
212.135.169.0-212.135.173.255
212.135.204.0/22
212.135.240.0/22
212.135.246.0-212.135.255.255
Signature Algorithm: sha256WithRSAEncryption
b6:1c:1c:e1:16:57:08:10:63:5a:aa:17:19:2f:f3:a2:b0:25:
aa:0e:ed:e1:4c:a6:02:16:32:bd:0f:2a:61:82:54:90:de:c3:
d5:96:3e:08:9e:9c:98:ea:48:89:fd:d4:f3:2f:7b:13:c6:df:
09:c9:78:9c:da:f2:11:58:62:29:e2:5e:6a:ad:c9:0d:ff:a2:
22:97:a9:9d:3f:59:64:0c:41:b5:e3:c7:59:47:33:02:5b:ab:
4a:8a:72:9a:1b:f5:da:ef:2a:f1:ae:25:24:2b:7c:77:c0:24:
d9:1b:9c:77:ed:c3:7a:7e:84:28:59:99:a9:81:28:ea:a2:34:
05:ab:aa:32:08:55:4f:66:d1:03:ae:8a:c9:cb:1c:aa:25:2d:
0d:b3:70:8a:3a:91:eb:d2:24:01:14:b3:c8:ba:89:dd:44:ef:
0f:9f:3c:c3:f7:a2:ad:a2:cb:63:d2:b0:93:e3:9a:bb:a2:0f:
10:12:54:7c:94:55:02:61:6e:c1:6a:1f:e4:cb:8d:2f:ae:ec:
bd:0b:06:cc:ae:48:39:17:36:63:5e:3e:d9:84:58:2c:15:9a:
28:ab:01:f4:bf:c8:6c:de:4c:eb:2b:9f:3e:0b:27:75:ca:2c:
0b:f3:26:ff:d1:68:af:1d:09:ee:49:2b:23:dd:5c:ec:07:1d:
6c:7f:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:27 2026 by rpki-client