Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/IzHBf-6JQHYiq0mQaX9LNODSrgY.roa
File: IzHBf-6JQHYiq0mQaX9LNODSrgY.roa (raw, json)
Hash identifier: QyUgoGmd9TYlb5SKtNXg1Y50O2LoAn5N5cOAKeGh974=
Subject key identifier: 23:31:C1:7F:EE:89:40:76:22:AB:49:90:69:7F:4B:34:E0:D2:AE:06
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 019EAC0A4E17F96E73E698621453FAEE09CD
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/IzHBf-6JQHYiq0mQaX9LNODSrgY.roa
Signing time: Tue 09 Jun 2026 11:00:16 +0000
ROA not before: Tue 09 Jun 2026 11:00:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137502
IP address blocks: 213.248.216.0/24 maxlen: 24
213.248.217.0/24 maxlen: 24
213.248.218.0/24 maxlen: 24
213.248.219.0/24 maxlen: 24
213.248.220.0/24 maxlen: 24
213.248.221.0/24 maxlen: 24
213.248.222.0/24 maxlen: 24
213.248.223.0/24 maxlen: 24
213.248.224.0/24 maxlen: 24
213.248.225.0/24 maxlen: 24
213.248.226.0/24 maxlen: 24
213.248.227.0/24 maxlen: 24
213.248.254.0/24 maxlen: 24
213.248.255.0/24 maxlen: 24
2a01:618:200::/48 maxlen: 48
2a01:618:201::/48 maxlen: 48
2a01:618:202::/48 maxlen: 48
2a01:618:203::/48 maxlen: 48
2a01:618:400::/48 maxlen: 48
2a01:618:401::/48 maxlen: 48
2a01:618:402::/48 maxlen: 48
2a01:618:403::/48 maxlen: 48
2a01:618:404::/48 maxlen: 48
2a01:618:405::/48 maxlen: 48
2a01:618:406::/48 maxlen: 48
2a01:618:407::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:0a:4e:17:f9:6e:73:e6:98:62:14:53:fa:ee:09:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Jun 9 11:00:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2331c17fee89407622ab4990697f4b34e0d2ae06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:86:ac:5a:4c:5a:4b:e3:8f:06:56:be:9e:
fa:fd:65:45:84:21:98:2b:52:70:3d:04:40:e8:9a:
a3:94:6f:b1:5d:d8:fc:e5:8a:6b:02:d0:bf:56:34:
43:2d:1e:63:ab:ce:19:11:26:31:ca:f4:6e:96:35:
1e:2a:4b:3b:f2:75:47:89:49:a6:b1:d4:b3:8d:ee:
03:34:1e:e0:d2:98:58:91:cc:56:07:19:43:b7:d4:
49:26:4a:d7:a4:75:c2:03:48:30:a8:3a:49:29:35:
cf:a1:c4:44:78:8f:0d:fa:70:d0:62:83:76:7d:37:
fb:43:a3:d4:c3:37:f4:34:4e:15:3c:d2:6d:45:13:
69:a6:a8:ab:58:75:66:be:3e:b6:69:ec:43:fe:97:
58:07:a2:77:aa:43:fa:3e:37:37:5e:f9:da:3d:bc:
b9:45:3f:4f:2d:7f:82:6b:a3:f4:d3:17:d8:d8:60:
ac:f5:17:fe:6e:69:93:23:88:c9:f4:94:cf:89:18:
ce:c2:38:17:09:b6:11:87:7e:2c:5a:21:73:a4:6a:
c4:8a:ba:1c:37:b0:37:0c:37:e8:67:3a:e5:cf:d6:
23:e4:8e:32:17:67:5a:2b:13:dc:cf:17:94:65:fd:
8c:91:8a:c5:2c:05:b5:c4:47:ad:e9:5b:50:ab:b7:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:31:C1:7F:EE:89:40:76:22:AB:49:90:69:7F:4B:34:E0:D2:AE:06
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/IzHBf-6JQHYiq0mQaX9LNODSrgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.216.0-213.248.227.255
213.248.254.0/23
IPv6:
2a01:618:200::/46
2a01:618:400::/45
Signature Algorithm: sha256WithRSAEncryption
17:81:fe:74:43:12:ac:e9:29:27:a6:79:57:7c:d5:5d:39:d7:
72:ac:1e:0e:e6:d4:a4:f0:9d:85:c7:02:35:b3:0a:5f:46:03:
89:a8:18:07:bc:e0:19:46:0f:b1:4d:6f:c2:11:ab:b5:a4:f2:
e3:c0:fd:bc:97:83:11:61:cf:46:f9:0a:2a:b4:3c:c5:6a:9a:
1e:5c:3d:16:94:11:c9:c8:6a:94:77:06:69:79:93:4c:86:23:
dc:eb:c5:9c:ad:d3:a4:41:3a:0e:53:40:ac:6b:5d:9b:fa:8a:
c4:30:8c:d5:b8:aa:e3:74:5b:18:4f:4f:14:42:58:12:0c:7a:
63:71:30:a6:ea:53:77:d0:44:82:ff:b2:ce:3e:df:78:52:17:
bb:e9:9f:b3:24:ca:7a:af:ea:c2:fc:87:1d:e9:df:ba:c7:ae:
06:19:a2:16:22:8f:ae:65:10:85:e2:37:e2:4a:c3:00:d8:1c:
f9:ed:22:9b:4c:2d:0a:29:c1:76:14:60:13:8b:70:17:ec:3f:
24:05:61:a8:5d:e8:b0:35:1c:6e:a9:e9:b9:aa:1f:51:20:c3:
c3:06:6c:b5:96:46:60:69:71:60:f1:02:00:c0:d4:c8:fa:79:
28:7d:5e:a4:38:2c:97:e0:1b:1a:45:d4:46:eb:49:35:36:bf:
4a:07:5b:94
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZ6sCk4X+W5z5phiFFP67gnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj
ZGQ1NGYwHhcNMjYwNjA5MTEwMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzMxYzE3ZmVlODk0MDc2MjJhYjQ5OTA2OTdmNGIzNGUwZDJhZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp6GrFpMWkvjjwZWvp76/WVFhCGY
K1JwPQRA6JqjlG+xXdj85YprAtC/VjRDLR5jq84ZESYxyvRuljUeKks78nVHiUmm
sdSzje4DNB7g0phYkcxWBxlDt9RJJkrXpHXCA0gwqDpJKTXPocREeI8N+nDQYoN2
fTf7Q6PUwzf0NE4VPNJtRRNppqirWHVmvj62aexD/pdYB6J3qkP6Pjc3XvnaPby5
RT9PLX+Ca6P00xfY2GCs9Rf+bmmTI4jJ9JTPiRjOwjgXCbYRh34sWiFzpGrEiroc
N7A3DDfoZzrlz9Yj5I4yF2daKxPczxeUZf2MkYrFLAW1xEet6VtQq7fKnwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFCMxwX/uiUB2IqtJkGl/SzTg0q4GMB8GA1UdIwQY
MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt
MzQ2MzY4ODI3ZTY4LzEvSXpIQmYtNkpRSFlpcTBtUWFYOUxOT0RTcmdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4
LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAaBAIAATAUMAwDBAPV+NgD
BALV+OADBAHV+P4wGAQCAAIwEgMHAioBBhgCAAMHAyoBBhgEADANBgkqhkiG9w0B
AQsFAAOCAQEAF4H+dEMSrOkpJ6Z5V3zVXTnXcqweDubUpPCdhccCNbMKX0YDiagY
B7zgGUYPsU1vwhGrtaTy48D9vJeDEWHPRvkKKrQ8xWqaHlw9FpQRychqlHcGaXmT
TIYj3OvFnK3TpEE6DlNArGtdm/qKxDCM1biq43RbGE9PFEJYEgx6Y3EwpupTd9BE
gv+yzj7feFIXu+mfsyTKeq/qwvyHHenfuseuBhmiFiKPrmUQheI34krDANgc+e0i
m0wtCinBdhRgE4twF+w/JAVhqF3osDUcbqnpuaofUSDDwwZstZZGYGlxYPECAMDU
yPp5KH1epDgsl+AbGkXURutJNTa/SgdblA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:45:21 2026 by rpki-client