Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cqGEPBuGu6yNW-1LydNKcZX0jj0.roa
File: cqGEPBuGu6yNW-1LydNKcZX0jj0.roa (raw, json)
Hash identifier: 3oGLAIzIUfnftqPdrvUC9ym3uRZxOmb674eAaTEFGM0=
Subject key identifier: 72:A1:84:3C:1B:86:BB:AC:8D:5B:ED:4B:C9:D3:4A:71:95:F4:8E:3D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D154497C955CF48C9FCFDF137046D5E76
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cqGEPBuGu6yNW-1LydNKcZX0jj0.roa
Signing time: Sun 22 Mar 2026 11:18:29 +0000
ROA not before: Sun 22 Mar 2026 11:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 212.134.90.0/24 maxlen: 24
212.134.97.0/24 maxlen: 24
212.135.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:15:44:97:c9:55:cf:48:c9:fc:fd:f1:37:04:6d:5e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 22 11:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72a1843c1b86bbac8d5bed4bc9d34a7195f48e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:97:bd:10:0b:05:27:fe:fc:9c:51:b5:44:9e:
95:90:cf:75:c5:c1:24:ac:0d:af:3d:38:d3:28:1a:
69:28:30:e8:ad:58:65:e1:97:16:bf:19:f8:49:5e:
ae:1f:67:5f:40:d6:48:12:00:93:aa:1b:d1:81:24:
be:39:ef:2d:f2:f9:3a:ae:c0:bb:83:f5:c3:8f:b0:
ad:01:a2:db:28:3a:2d:c1:7c:29:bf:34:c3:5a:69:
1c:10:52:b7:25:f1:80:98:05:5a:e3:48:36:ec:af:
1e:34:8e:32:39:05:8a:30:c3:22:d9:2d:78:98:40:
49:f0:8b:79:81:2c:b2:b8:ee:8e:1d:29:5a:27:f3:
ee:29:11:83:38:e4:c0:31:e5:d2:3e:c2:6f:ea:f6:
f7:88:43:c6:da:51:e6:e3:bd:7c:8e:28:5a:22:5c:
97:e4:a1:01:c1:09:fe:83:93:81:6f:fd:fc:f4:36:
f8:c6:cf:67:58:57:f8:77:96:75:e8:88:60:0e:67:
1a:ef:2c:01:18:19:26:6b:4a:2e:86:98:1b:b2:3d:
7e:4f:ac:47:87:d5:37:3d:b9:5d:ba:2b:81:e8:61:
d8:f1:84:56:a4:02:fb:b0:e6:ba:30:a1:31:97:25:
f4:33:38:39:af:cb:b2:25:9b:6f:b6:fb:35:ad:5e:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A1:84:3C:1B:86:BB:AC:8D:5B:ED:4B:C9:D3:4A:71:95:F4:8E:3D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cqGEPBuGu6yNW-1LydNKcZX0jj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.90.0/24
212.134.97.0/24
212.135.160.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:a8:99:cb:be:aa:a5:b4:13:fd:9e:4b:80:6a:4e:e7:17:4d:
eb:3c:68:37:f6:19:81:67:2c:21:6d:ea:7f:61:4d:59:45:49:
9d:a9:5d:e1:59:1b:4f:6c:d7:91:1e:d1:19:13:b3:c5:6f:84:
40:45:f2:6e:6a:af:a6:a0:ed:f0:2f:85:cd:9b:dc:45:f8:64:
68:c3:6b:8e:89:c5:30:50:56:80:33:bd:65:67:80:a5:b1:b1:
b7:6a:51:41:ea:1c:f1:f8:30:cc:44:85:67:ed:4c:cf:4d:0a:
81:e2:93:cc:ef:f1:65:8c:a9:2c:0f:e1:93:10:d8:59:49:6f:
2a:e6:b9:e0:3c:14:2e:56:c3:81:e2:0b:4f:67:5b:d2:cb:e6:
fa:36:62:85:9d:f8:f6:3c:7c:a7:82:43:98:b6:91:67:88:73:
f1:18:47:77:98:a9:74:30:87:6d:97:72:3d:12:a3:5b:d8:ee:
c4:48:97:83:87:bd:51:5d:a5:ed:27:6a:14:e2:5c:84:0c:b7:
b8:77:3b:75:5f:da:1c:38:80:0e:4b:d8:5f:3f:73:42:b1:eb:
11:e5:f2:1b:69:f5:d3:ea:e7:cc:d8:a2:c7:0e:d4:ea:28:86:
0b:56:0e:6e:93:b5:26:e3:a5:d9:7d:12:b3:b8:0c:c9:b8:f7:
25:ee:34:dc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ0VRJfJVc9Iyfz98TcEbV52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMzIyMTExODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmExODQzYzFiODZiYmFjOGQ1YmVkNGJjOWQzNGE3MTk1ZjQ4ZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ze9EAsFJ/78nFG1RJ6VkM91xcEk
rA2vPTjTKBppKDDorVhl4ZcWvxn4SV6uH2dfQNZIEgCTqhvRgSS+Oe8t8vk6rsC7
g/XDj7CtAaLbKDotwXwpvzTDWmkcEFK3JfGAmAVa40g27K8eNI4yOQWKMMMi2S14
mEBJ8It5gSyyuO6OHSlaJ/PuKRGDOOTAMeXSPsJv6vb3iEPG2lHm4718jihaIlyX
5KEBwQn+g5OBb/389Db4xs9nWFf4d5Z16IhgDmca7ywBGBkma0ouhpgbsj1+T6xH
h9U3PblduiuB6GHY8YRWpAL7sOa6MKExlyX0Mzg5r8uyJZtvtvs1rV6o4QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHKhhDwbhrusjVvtS8nTSnGV9I49MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvY3FHRVBCdUd1NnlOVy0xTHlkTktjWlgwamowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1IZaAwQA
1IZhAwQA1IegMA0GCSqGSIb3DQEBCwUAA4IBAQDcqJnLvqqltBP9nkuAak7nF03r
PGg39hmBZywhbep/YU1ZRUmdqV3hWRtPbNeRHtEZE7PFb4RARfJuaq+moO3wL4XN
m9xF+GRow2uOicUwUFaAM71lZ4ClsbG3alFB6hzx+DDMRIVn7UzPTQqB4pPM7/Fl
jKksD+GTENhZSW8q5rngPBQuVsOB4gtPZ1vSy+b6NmKFnfj2PHyngkOYtpFniHPx
GEd3mKl0MIdtl3I9EqNb2O7ESJeDh71RXaXtJ2oU4lyEDLe4dzt1X9ocOIAOS9hf
P3NCsesR5fIbafXT6ufM2KLHDtTqKIYLVg5uk7Um46XZfRKzuAzJuPcl7jTc
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:45 2026 by rpki-client