Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/miRZLgrS3ikj92aWaxe372GNmyo.roa
File: miRZLgrS3ikj92aWaxe372GNmyo.roa (raw, json)
Hash identifier: ytVLZLDGf9fmu8jklE9PRipdJ7mFZYEYDhQTuNDhaOw=
Subject key identifier: 9A:24:59:2E:0A:D2:DE:29:23:F7:66:96:6B:17:B7:EF:61:8D:9B:2A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019DDE586A7A50538C2F091793C0772EB870
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/miRZLgrS3ikj92aWaxe372GNmyo.roa
Signing time: Thu 30 Apr 2026 12:23:49 +0000
ROA not before: Thu 30 Apr 2026 12:23:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.94.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.172.0/23 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
212.135.76.0/23 maxlen: 24
212.135.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:58:6a:7a:50:53:8c:2f:09:17:93:c0:77:2e:b8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Apr 30 12:23:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a24592e0ad2de2923f766966b17b7ef618d9b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:0c:8d:54:fe:b4:39:72:00:cd:e4:ce:86:
3c:fd:3c:b8:49:35:75:fc:ef:bf:15:1f:04:49:ac:
78:13:39:fe:88:02:81:25:3b:4b:73:42:d6:1b:ac:
51:7d:71:df:da:f5:0c:29:e4:24:11:c3:fb:fd:60:
90:ae:0b:9c:41:4c:96:ee:72:f8:b4:e0:58:58:27:
65:65:d7:ec:ba:6b:59:0e:72:62:b8:dd:b2:06:c2:
e8:f1:06:3b:b0:fe:84:93:b1:9a:76:b5:1c:c7:29:
7c:6a:33:0f:40:c4:f9:ea:a3:97:c0:37:4b:a6:82:
01:90:f0:9f:9e:e3:89:bb:d7:fd:76:da:31:5a:4c:
73:89:74:b6:fb:a8:6d:9f:d3:07:51:3b:6f:18:50:
c4:96:0e:0c:09:9b:1c:fb:5b:a4:e2:4f:c3:a3:f1:
22:78:1b:3b:cb:ae:54:e7:e7:ec:30:ea:21:7a:8c:
86:7b:6e:c7:5b:27:68:a2:0d:21:9d:53:79:91:20:
ff:86:35:74:85:4d:8a:ab:c2:93:aa:73:9e:e2:a6:
68:82:8b:69:9f:1f:8d:af:f9:4d:f5:ef:4a:2f:3e:
0c:f8:1a:a3:1f:24:43:c0:28:4a:16:3f:42:e8:94:
44:81:e1:61:e5:1c:95:6d:3c:ce:47:ad:6b:28:64:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:24:59:2E:0A:D2:DE:29:23:F7:66:96:6B:17:B7:EF:61:8D:9B:2A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/miRZLgrS3ikj92aWaxe372GNmyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.94.0/24
212.134.124.0/22
212.134.164.0/22
212.134.172.0/23
212.134.208.0/22
212.134.224.0/22
212.135.76.0/23
212.135.175.0/24
Signature Algorithm: sha256WithRSAEncryption
86:24:e4:91:fa:99:da:8f:81:45:20:33:f5:03:92:65:4d:d9:
5d:bf:34:1b:58:97:91:53:cd:b7:7e:5f:b4:f3:24:ef:fc:f7:
00:92:29:77:20:62:ed:01:fe:e6:2c:52:6b:e6:73:74:0d:ac:
a1:69:a9:ed:20:9c:dc:d5:06:b1:25:28:30:2b:98:03:5c:56:
9d:81:72:8c:06:c2:fa:82:76:51:49:59:1d:c9:7b:ab:34:1b:
aa:a5:e9:a4:dc:0f:d9:7a:17:2c:30:cc:2c:d7:4a:6d:19:90:
98:c7:1e:34:10:aa:ed:28:41:83:2c:4e:61:3f:45:b8:e0:7a:
c1:e0:7c:b0:52:e2:a8:83:23:13:e7:ab:fb:e7:81:db:25:ad:
79:96:26:a8:0a:18:0a:16:83:2d:1c:b1:81:71:7a:4e:74:ec:
5b:e5:50:4c:a1:69:06:1a:a5:b6:19:29:8a:c1:81:d8:e2:86:
06:91:08:7c:af:5c:52:d3:ce:c2:d0:4f:9f:4c:db:8a:ae:b0:
a9:f9:db:00:63:f1:99:53:0d:30:11:7c:9c:42:54:c6:df:f4:
93:67:15:25:45:04:f0:8b:74:9c:62:5c:50:2e:8a:ee:fd:76:
66:36:d0:c0:b0:e9:46:b3:23:34:2a:10:13:a8:8c:26:22:73:
28:4f:5f:25
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZ3eWGp6UFOMLwkXk8B3LrhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNDMwMTIyMzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTI0NTkyZTBhZDJkZTI5MjNmNzY2OTY2YjE3YjdlZjYxOGQ5YjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/0MjVT+tDlyAM3kzoY8/Ty4STV1
/O+/FR8ESax4Ezn+iAKBJTtLc0LWG6xRfXHf2vUMKeQkEcP7/WCQrgucQUyW7nL4
tOBYWCdlZdfsumtZDnJiuN2yBsLo8QY7sP6Ek7GadrUcxyl8ajMPQMT56qOXwDdL
poIBkPCfnuOJu9f9dtoxWkxziXS2+6htn9MHUTtvGFDElg4MCZsc+1uk4k/Do/Ei
eBs7y65U5+fsMOoheoyGe27HWydoog0hnVN5kSD/hjV0hU2Kq8KTqnOe4qZogotp
nx+Nr/lN9e9KLz4M+BqjHyRDwChKFj9C6JREgeFh5RyVbTzOR61rKGT7IwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFJokWS4K0t4pI/dmlmsXt+9hjZsqMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvbWlSWkxnclMzaWtqOTJhV2F4ZTM3MkdObXlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQA1IYuAwQA
1IY0AwQA1IY2AwQA1IZeAwQC1IZ8AwQC1IakAwQB1IasAwQC1IbQAwQC1IbgAwQB
1IdMAwQA1IevMA0GCSqGSIb3DQEBCwUAA4IBAQCGJOSR+pnaj4FFIDP1A5JlTdld
vzQbWJeRU823fl+08yTv/PcAkil3IGLtAf7mLFJr5nN0DayhaantIJzc1QaxJSgw
K5gDXFadgXKMBsL6gnZRSVkdyXurNBuqpemk3A/ZehcsMMws10ptGZCYxx40EKrt
KEGDLE5hP0W44HrB4HywUuKogyMT56v754HbJa15liaoChgKFoMtHLGBcXpOdOxb
5VBMoWkGGqW2GSmKwYHY4oYGkQh8r1xS087C0E+fTNuKrrCp+dsAY/GZUw0wEXyc
QlTG3/STZxUlRQTwi3ScYlxQLoru/XZmNtDAsOlGsyM0KhATqIwmInMoT18l
-----END CERTIFICATE-----
Generated at Wed May 13 02:11:55 2026 by rpki-client