Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/IiKdZihxK24qAbY3IlsJBY8DWuI.roa
File: IiKdZihxK24qAbY3IlsJBY8DWuI.roa (raw, json)
Hash identifier: GiUmS/2trsIX5BrmBaADREO7MrJkpyzXZUgRulZKo18=
Subject key identifier: 22:22:9D:66:28:71:2B:6E:2A:01:B6:37:22:5B:09:05:8F:03:5A:E2
Certificate issuer: /CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Certificate serial: 019F23691326A83789C910ACF725CD4D6F00
Authority key identifier: 55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/IiKdZihxK24qAbY3IlsJBY8DWuI.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62336
IP address blocks: 212.48.116.64/26 maxlen: 26
212.53.216.0/22 maxlen: 22
212.53.224.0/20 maxlen: 20
212.53.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:13:26:a8:37:89:c9:10:ac:f7:25:cd:4d:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22229d6628712b6e2a01b637225b09058f035ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:e1:22:06:29:5e:d9:6d:a6:35:98:0f:e0:
0d:9c:d0:a4:58:a3:be:7d:9e:d8:10:52:2f:2d:2d:
1d:43:02:69:76:0b:a8:1e:cc:1d:9c:7f:98:8d:cd:
fb:59:63:e2:a2:a7:0d:b3:e0:de:2c:cd:00:58:ae:
ad:3d:56:0c:a0:1b:01:95:d2:63:93:49:0c:3a:3c:
98:e7:a3:48:6d:1d:5b:ce:01:4b:af:01:ee:2b:91:
b8:dd:d9:fb:06:df:a9:81:17:c7:8b:fe:d8:f7:4b:
d2:3d:96:36:3d:05:fe:2a:7c:6b:bd:2d:cb:eb:7d:
e1:35:13:6e:7c:d9:1d:2e:8e:89:f4:35:25:6e:20:
95:08:38:69:9a:3e:49:18:3e:83:03:60:88:e5:ab:
55:c5:19:a8:8a:ea:55:0c:d4:a4:a8:04:cd:70:1a:
56:d5:07:5c:3b:34:60:6c:49:0d:8d:0b:ef:07:7c:
b5:7e:07:52:8f:17:fe:63:36:80:45:a7:cb:45:3b:
e4:48:15:48:5c:36:55:22:39:5a:d7:f4:f0:e2:14:
33:2f:71:e5:35:74:2f:42:34:92:ba:c7:05:8b:26:
6e:6d:bd:d2:84:1b:75:9c:8d:3c:a4:e1:8f:ac:10:
b5:1b:70:ff:62:ac:9b:25:cb:b0:19:49:f7:98:4f:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:22:9D:66:28:71:2B:6E:2A:01:B6:37:22:5B:09:05:8F:03:5A:E2
X509v3 Authority Key Identifier:
keyid:55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/IiKdZihxK24qAbY3IlsJBY8DWuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.116.64/26
212.53.216.0/22
212.53.224.0/19
Signature Algorithm: sha256WithRSAEncryption
16:7e:54:cf:87:c6:e4:84:dd:d9:55:4f:93:9e:30:30:ad:95:
52:97:6a:29:c5:59:47:f3:10:67:4e:0c:75:1b:ba:0e:62:a7:
74:04:3f:91:2e:97:e8:90:6d:51:d7:21:c6:3d:be:18:e4:5d:
83:87:4c:3b:5a:86:f5:4f:9a:b9:cc:35:ee:69:73:6f:8f:c8:
82:4b:76:22:1b:5c:18:ab:ea:24:ae:83:6d:9a:94:3c:80:3a:
b8:d8:0c:b7:88:28:87:24:76:ca:6f:e6:16:4e:3b:ca:b6:88:
5a:81:9a:eb:c9:ec:fa:07:48:18:2e:07:1d:6c:d1:81:d7:51:
56:65:28:b0:d3:30:02:23:55:61:8d:59:2b:f3:f6:56:90:d5:
98:13:e1:09:3f:0c:01:0f:07:75:7b:07:02:14:44:77:7b:43:
6a:12:21:08:0a:17:d1:39:95:27:3b:aa:33:6b:23:5e:6a:45:
28:e3:f8:a1:39:4a:cb:30:62:86:24:c4:6d:ee:e1:e3:94:7d:
6f:bb:de:5d:bc:52:47:d9:23:11:af:c3:77:d7:2a:cb:75:92:
af:fe:a1:fe:8d:13:be:98:8c:59:8b:d4:74:36:30:f5:fa:cf:
e0:ce:24:f9:bd:cc:5d:89:14:07:d4:3d:6b:59:b5:30:12:c9:
db:33:ff:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:27 2026 by rpki-client