Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/KyEl-NBPpQ9teBrmm7tpFc8-Dj4.roa
File: KyEl-NBPpQ9teBrmm7tpFc8-Dj4.roa (raw, json)
Hash identifier: LX3Hr454zl2MUCj61HpMXcW0BQ8pIuxmh8gRh4mgIis=
Subject key identifier: 2B:21:25:F8:D0:4F:A5:0F:6D:78:1A:E6:9B:BB:69:15:CF:3E:0E:3E
Certificate issuer: /CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Certificate serial: 019F2369143729B3686689F642392DCD55E8
Authority key identifier: 55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/KyEl-NBPpQ9teBrmm7tpFc8-Dj4.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210236
IP address blocks: 212.48.111.144/29 maxlen: 29
212.48.111.152/29 maxlen: 29
212.53.147.0/24 maxlen: 24
212.53.178.0/24 maxlen: 24
212.53.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:14:37:29:b3:68:66:89:f6:42:39:2d:cd:55:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b2125f8d04fa50f6d781ae69bbb6915cf3e0e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:0b:f3:ad:c2:0a:2c:63:0d:29:7f:52:d7:
c7:f6:c8:1f:62:68:04:c1:a5:5f:41:8a:04:78:13:
c0:a1:db:dd:fe:44:9f:0e:85:c5:68:72:f5:8d:5d:
70:80:24:8c:da:eb:e7:42:4a:4f:0d:21:25:e0:6a:
c6:87:01:4d:ae:e7:f9:02:fd:3b:6e:4e:cc:71:19:
b4:19:58:0b:c1:c0:19:4f:e9:8b:24:92:d2:70:44:
13:0b:23:21:81:65:90:c1:73:4a:15:77:54:33:7a:
91:c7:78:0d:f4:f6:a9:ff:b0:9e:10:dc:29:b9:8d:
01:02:ff:7d:d2:11:91:8b:73:ff:4d:c6:5f:85:bc:
13:41:e9:85:73:a7:e5:6a:b2:66:13:72:65:bb:9e:
87:57:6b:24:f4:89:34:a6:ac:68:e2:58:5d:92:3e:
f0:04:22:7a:94:5e:b9:7a:bb:26:a1:84:7e:7a:dc:
7d:3c:6a:aa:f3:95:2b:7f:31:32:0b:a3:56:67:20:
0d:64:92:f0:ca:22:69:65:aa:af:df:ca:b4:0a:90:
8b:16:ec:e1:3f:a7:bf:be:1e:5d:95:e1:91:3f:96:
6a:d8:64:6f:30:4f:62:31:ab:00:bf:a3:aa:55:ca:
21:99:3c:db:b1:0b:9f:f5:73:b4:7d:d7:81:8d:c1:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:21:25:F8:D0:4F:A5:0F:6D:78:1A:E6:9B:BB:69:15:CF:3E:0E:3E
X509v3 Authority Key Identifier:
keyid:55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/KyEl-NBPpQ9teBrmm7tpFc8-Dj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.111.144/28
212.53.147.0/24
212.53.178.0/24
212.53.193.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9e:e5:7b:c1:b6:44:59:67:2a:ef:3b:7c:c2:08:08:a9:57:
8a:6f:4a:7e:9b:87:13:4b:31:29:b4:7f:5a:2c:9b:1c:40:b6:
f8:11:30:ca:1d:88:a1:40:16:2c:72:0a:dd:0a:b5:05:be:28:
8e:0a:36:00:e6:ef:b4:7a:cc:9d:f4:b8:74:44:be:9c:b8:7a:
e2:51:0d:d4:77:70:11:4c:84:df:1c:75:a2:cc:f7:4c:63:5b:
6a:d9:36:b5:f0:87:62:08:5f:a9:f7:79:33:5e:a9:be:c1:a1:
38:4b:9a:bc:97:f1:04:39:83:80:ab:b8:8b:4c:0a:37:a2:5b:
6c:6c:f5:43:0f:eb:eb:78:87:de:fc:cf:a4:53:36:03:4d:73:
4b:e3:ee:d8:ee:d8:af:a2:7b:8e:89:20:06:09:2a:8f:a3:5c:
83:e8:97:b0:d8:85:57:59:bd:08:be:dd:96:f2:c3:3a:08:37:
ff:f1:3c:0c:e8:00:0b:0b:2b:c0:0f:71:57:52:fb:61:af:c3:
8e:7c:49:5f:4b:c2:47:4d:71:bc:3f:59:f1:03:c1:e4:56:02:
e6:b9:df:8c:96:47:a2:a8:36:e6:0e:58:42:a8:91:3c:be:42:
e2:35:94:75:47:91:ca:68:64:b2:7b:8c:e5:f0:34:7b:4c:ae:
81:c6:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:39 2026 by rpki-client