Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VeqFbxbKI4wW3oAeL4wEqXSwpgg.roa
File: VeqFbxbKI4wW3oAeL4wEqXSwpgg.roa (raw, json)
Hash identifier: wMgK5ICZ2/GuTFJq83cuffONimdooazCqYt89te0PgU=
Subject key identifier: 55:EA:85:6F:16:CA:23:8C:16:DE:80:1E:2F:8C:04:A9:74:B0:A6:08
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DAFCAA8569E69D6D16B99E83D1509AE14
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VeqFbxbKI4wW3oAeL4wEqXSwpgg.roa
Signing time: Tue 21 Apr 2026 11:26:27 +0000
ROA not before: Tue 21 Apr 2026 11:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134135
IP address blocks: 212.134.32.0/22 maxlen: 22
212.134.96.0/24 maxlen: 24
212.134.106.0/24 maxlen: 24
212.134.107.0/24 maxlen: 24
212.134.108.0/24 maxlen: 24
212.134.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:ca:a8:56:9e:69:d6:d1:6b:99:e8:3d:15:09:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 21 11:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55ea856f16ca238c16de801e2f8c04a974b0a608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:28:24:d9:b1:39:7e:d2:2f:95:b3:73:8e:
38:cb:0d:8b:d9:41:79:f5:87:c8:ca:82:4d:7a:14:
f4:54:f9:1f:93:b1:8b:55:ae:fa:fe:60:29:16:d9:
a3:bf:1c:88:57:52:ed:82:5a:19:49:ef:1e:fb:ca:
0a:d4:42:e7:69:a0:8e:73:3b:e0:ab:3f:2c:8e:4d:
54:fb:3c:1c:b8:b3:b9:64:81:64:91:dd:ef:7f:f5:
7a:a8:01:74:c3:33:e3:41:61:38:21:86:20:34:f4:
80:61:e3:d4:dd:b5:ec:9e:f6:0c:b7:08:1f:06:09:
53:ba:88:e3:08:43:bd:ff:ec:b4:e1:6d:9e:83:a4:
50:59:e8:a8:50:78:84:02:8c:1a:d1:e9:ff:6e:6c:
aa:71:e1:be:e6:4b:a5:42:db:6f:e7:15:f0:2a:1b:
75:01:11:89:22:b9:46:a4:ea:a8:4c:9b:a2:53:e3:
88:a9:b1:ff:33:19:46:1a:a7:46:9f:66:a0:18:a6:
4f:47:c4:78:e3:75:08:46:be:42:37:ab:55:37:23:
76:be:26:58:d0:44:aa:86:34:54:47:03:04:7d:07:
6a:0c:b6:9e:c9:7f:bf:12:12:4b:25:ac:e0:cf:82:
4c:cd:e3:56:68:d2:42:82:fe:7b:11:72:65:b1:7b:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EA:85:6F:16:CA:23:8C:16:DE:80:1E:2F:8C:04:A9:74:B0:A6:08
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VeqFbxbKI4wW3oAeL4wEqXSwpgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.32.0/22
212.134.96.0/24
212.134.106.0-212.134.109.255
Signature Algorithm: sha256WithRSAEncryption
46:6b:cc:57:7c:35:e6:39:92:7e:b6:e7:61:cb:9d:db:fc:08:
22:f8:57:1c:03:5b:89:9e:9c:3a:42:83:86:38:ba:21:15:00:
aa:98:c2:1b:65:5f:34:b3:37:d9:14:b4:d5:f0:d8:60:dc:47:
fd:a0:11:a7:64:e2:df:ce:58:d0:3d:e8:52:61:cf:a9:f9:31:
cd:99:94:eb:f2:c3:5c:62:3c:e6:c7:30:2a:bd:85:d7:ed:19:
ac:40:7e:31:98:32:2c:14:08:c3:9d:c9:e5:f3:27:7f:40:33:
c2:53:d2:64:c0:43:f6:69:41:75:f2:c0:c6:ca:0b:3e:10:cc:
62:88:6f:d0:50:d7:00:7b:aa:e1:28:82:23:66:4e:04:7b:06:
4e:8b:fb:87:36:33:30:f2:3f:4d:87:ed:08:0d:cb:77:0c:13:
8c:91:3d:20:bb:c0:81:f0:17:87:c3:f9:7c:6b:b6:df:02:aa:
f4:b2:69:63:1b:fd:e4:3f:a6:d8:01:2e:9d:8c:45:60:dc:d3:
80:b3:31:f2:07:25:1c:46:74:e6:5e:2b:87:1b:98:9b:46:56:
e3:b5:36:52:2b:73:45:6e:4d:b9:f2:09:ad:f4:d3:0e:1f:f5:
f2:b2:bc:09:c8:67:26:4c:0f:bc:b6:e0:37:79:ed:7d:e2:2b:
e8:8d:d1:9f
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ2vyqhWnmnW0WuZ6D0VCa4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNDIxMTEyNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWVhODU2ZjE2Y2EyMzhjMTZkZTgwMWUyZjhjMDRhOTc0YjBhNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwEoJNmxOX7SL5Wzc444yw2L2UF5
9YfIyoJNehT0VPkfk7GLVa76/mApFtmjvxyIV1LtgloZSe8e+8oK1ELnaaCOczvg
qz8sjk1U+zwcuLO5ZIFkkd3vf/V6qAF0wzPjQWE4IYYgNPSAYePU3bXsnvYMtwgf
BglTuojjCEO9/+y04W2eg6RQWeioUHiEAowa0en/bmyqceG+5kulQttv5xXwKht1
ARGJIrlGpOqoTJuiU+OIqbH/MxlGGqdGn2agGKZPR8R443UIRr5CN6tVNyN2viZY
0ESqhjRURwMEfQdqDLaeyX+/EhJLJazgz4JMzeNWaNJCgv57EXJlsXuNHQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFFXqhW8WyiOMFt6AHi+MBKl0sKYIMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvVmVxRmJ4YktJNHdXM29BZUw0d0VxWFN3cGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQC1IYgAwQA
1IZgMAwDBAHUhmoDBAHUhmwwDQYJKoZIhvcNAQELBQADggEBAEZrzFd8NeY5kn62
52HLndv8CCL4VxwDW4menDpCg4Y4uiEVAKqYwhtlXzSzN9kUtNXw2GDcR/2gEadk
4t/OWNA96FJhz6n5Mc2ZlOvyw1xiPObHMCq9hdftGaxAfjGYMiwUCMOdyeXzJ39A
M8JT0mTAQ/ZpQXXywMbKCz4QzGKIb9BQ1wB7quEogiNmTgR7Bk6L+4c2MzDyP02H
7QgNy3cME4yRPSC7wIHwF4fD+Xxrtt8CqvSyaWMb/eQ/ptgBLp2MRWDc04CzMfIH
JRxGdOZeK4cbmJtGVuO1NlIrc0VuTbnyCa300w4f9fKyvAnIZyZMD7y24Dd57X3i
K+iN0Z8=
-----END CERTIFICATE-----
Generated at Wed May 13 05:54:50 2026 by rpki-client