Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cu_GnFQblZGlmAAGiYKWY4mneuQ.roa
File: cu_GnFQblZGlmAAGiYKWY4mneuQ.roa (raw, json)
Hash identifier: T3qRihkQMy6VOEczGMO+0EnOl/dv5YSG05tW35qM4FQ=
Subject key identifier: 72:EF:C6:9C:54:1B:95:91:A5:98:00:06:89:82:96:63:89:A7:7A:E4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1BAD2A2E27355BD26A7F4AABEAA4342A0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cu_GnFQblZGlmAAGiYKWY4mneuQ.roa
Signing time: Sun 08 Nov 2026 11:02:08 +0000
ROA not before: Sun 08 Nov 2026 11:02:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 212.134.168.0/23 maxlen: 24
217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ba:d2:a2:e2:73:55:bd:26:a7:f4:aa:be:aa:43:42:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 8 11:02:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72efc69c541b9591a59800068982966389a77ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:ef:2d:89:37:6e:8d:6f:e6:d6:07:6d:9a:
05:34:75:52:a0:c4:d9:e3:32:54:72:cc:81:0c:20:
d9:91:52:9d:38:16:68:81:a6:7d:f9:3e:81:b2:d3:
a1:ee:29:1f:23:90:06:72:3e:8c:98:3f:45:e7:b4:
2d:fb:aa:51:d8:18:4d:2d:57:3f:ab:5f:1a:58:22:
7e:2d:07:d0:30:65:2f:67:61:b7:f8:ad:a7:4f:60:
0c:16:c1:6c:bc:4f:3e:89:ba:18:93:e8:75:24:ca:
84:47:e3:bf:e4:1d:58:77:13:a2:8b:d7:49:08:9f:
10:ec:bc:a4:44:01:fd:60:51:c5:dd:a2:71:e7:e1:
25:6c:49:3c:07:ac:f8:0f:5b:21:ab:15:4e:6e:f5:
3c:7f:9b:80:78:08:f6:df:56:c4:5b:0c:f8:5e:5e:
34:99:fd:ff:40:d9:43:8b:14:3b:31:9b:4e:9a:e2:
a0:1f:58:13:91:f2:d0:12:b6:3a:98:59:be:0b:9e:
3c:2f:f6:dc:44:c8:00:16:7f:8a:17:d6:f0:8c:ec:
61:c1:d7:00:80:74:bc:a2:59:37:de:4a:a2:f4:b9:
81:17:82:9d:eb:7f:e6:97:02:d5:6b:65:f5:d2:13:
22:6b:af:d8:b8:5e:a0:f7:43:a0:ca:4f:3c:3a:43:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EF:C6:9C:54:1B:95:91:A5:98:00:06:89:82:96:63:89:A7:7A:E4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cu_GnFQblZGlmAAGiYKWY4mneuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.168.0/23
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:63:6f:c4:70:d1:c3:81:04:4d:0e:bc:1e:89:92:67:d4:db:
de:8a:44:8e:0a:57:28:46:ec:6e:99:23:27:40:f0:79:5c:36:
f5:fb:2b:49:ac:73:ef:4b:77:16:d4:cb:c5:85:fd:1c:48:e3:
d1:ed:cf:e2:b3:3c:45:04:ab:fa:57:d9:32:58:45:fb:72:7f:
a8:42:e9:3a:91:1d:03:c9:4f:d4:18:93:24:0d:86:56:20:be:
28:30:6a:d8:a6:6f:08:46:ac:51:39:a8:94:9d:b3:da:b1:b6:
5d:26:74:4d:b0:67:4f:6c:01:ad:8d:b2:d9:02:7d:58:a0:54:
9b:29:ce:0c:b5:3e:d8:a0:7f:3b:25:56:3d:3c:f0:a6:18:27:
1c:b6:59:0d:44:15:6d:19:4d:b4:13:cf:ed:54:b3:9a:b3:a7:
74:30:13:7d:cb:b5:ef:35:5a:ee:f1:a6:fb:8e:03:dd:b7:44:
6e:99:58:fc:53:7d:db:ab:b3:56:5c:95:be:0d:da:ba:a1:45:
18:2e:9c:22:a5:4a:40:b4:ec:08:93:b2:6a:ca:be:0b:45:43:
ca:16:23:37:69:c7:f3:20:ec:59:0c:df:f6:b8:29:93:a8:78:
fd:98:9a:e4:65:ff:33:89:66:6f:8e:94:b9:7a:2c:77:dd:29:
37:9f:cd:29
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaG60qLic1W9Jqf0qr6qQ0KgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMTA4MTEwMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmVmYzY5YzU0MWI5NTkxYTU5ODAwMDY4OTgyOTY2Mzg5YTc3YWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjvvLYk3bo1v5tYHbZoFNHVSoMTZ
4zJUcsyBDCDZkVKdOBZogaZ9+T6BstOh7ikfI5AGcj6MmD9F57Qt+6pR2BhNLVc/
q18aWCJ+LQfQMGUvZ2G3+K2nT2AMFsFsvE8+iboYk+h1JMqER+O/5B1YdxOii9dJ
CJ8Q7LykRAH9YFHF3aJx5+ElbEk8B6z4D1shqxVObvU8f5uAeAj231bEWwz4Xl40
mf3/QNlDixQ7MZtOmuKgH1gTkfLQErY6mFm+C548L/bcRMgAFn+KF9bwjOxhwdcA
gHS8olk33kqi9LmBF4Kd63/mlwLVa2X10hMia6/YuF6g90Ogyk88OkMg/QIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFHLvxpxUG5WRpZgABomClmOJp3rkMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvY3VfR25GUWJsWkdsbUFBR2lZS1dZNG1uZXVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQB1IaoAwQA
2cwKAwQA2cwMAwQB2cwOAwQB2cwgAwQA2cwjAwQA2cw8MA0GCSqGSIb3DQEBCwUA
A4IBAQB8Y2/EcNHDgQRNDrweiZJn1NveikSOClcoRuxumSMnQPB5XDb1+ytJrHPv
S3cW1MvFhf0cSOPR7c/iszxFBKv6V9kyWEX7cn+oQuk6kR0DyU/UGJMkDYZWIL4o
MGrYpm8IRqxROaiUnbPasbZdJnRNsGdPbAGtjbLZAn1YoFSbKc4MtT7YoH87JVY9
PPCmGCcctlkNRBVtGU20E8/tVLOas6d0MBN9y7XvNVru8ab7jgPdt0RumVj8U33b
q7NWXJW+Ddq6oUUYLpwipUpAtOwIk7Jqyr4LRUPKFiM3acfzIOxZDN/2uCmTqHj9
mJrkZf8ziWZvjpS5eix33Sk3n80p
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:40:26 2026 by rpki-client