Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212337.roa
File: AS212337.roa (raw, json)
Hash identifier: F7r1iRGdDxGqsQQD72yy5j2HUiw/2D1umSRF6qWqETY=
Subject key identifier: 0F:04:15:FB:62:AB:5B:A5:07:01:06:E7:5F:B9:75:5E:20:4A:EA:EE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4E5BFDB46C50023F5FD770F3517FAD1C14C37FAC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212337.roa
Signing time: Fri 08 May 2026 19:48:16 +0000
ROA not before: Fri 08 May 2026 19:43:16 +0000
ROA not after: Fri 07 May 2027 19:48:16 +0000
asID: 212337
IP address blocks: 155.117.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5b:fd:b4:6c:50:02:3f:5f:d7:70:f3:51:7f:ad:1c:14:c3:7f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 8 19:43:16 2026 GMT
Not After : May 7 19:48:16 2027 GMT
Subject: CN=0F0415FB62AB5BA5070106E75FB9755E204AEAEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:41:6d:88:a0:62:e4:aa:63:26:44:8e:6c:
fe:17:f5:27:d4:27:8b:d9:a3:d2:3c:f2:af:56:a2:
46:53:73:50:43:2e:cc:71:3a:7b:2e:91:c9:6c:fa:
b3:3c:5f:78:b8:7d:a4:5a:b5:6d:11:8d:8f:b5:ff:
f2:f2:20:97:8c:f3:6c:bc:c7:84:46:8b:93:6a:97:
ed:a1:74:eb:d1:43:86:e3:de:fa:8f:56:fc:a3:ac:
24:11:0c:2d:ce:04:0f:0d:59:76:81:5d:be:76:4d:
d4:d3:a5:c8:ef:c2:c2:b9:0c:a6:ba:63:62:6a:a9:
a7:6e:04:ea:61:88:69:8d:e8:38:1d:ba:3b:7f:29:
3c:dd:49:63:bf:22:48:5d:bb:71:e9:8e:48:d2:63:
38:53:7a:72:bd:9f:12:3e:74:4d:e9:71:22:9e:ee:
1c:ae:3f:ad:ee:11:30:ab:0f:8d:be:2b:67:83:aa:
70:11:23:ab:71:7a:2f:91:01:b5:61:d4:72:da:45:
72:52:28:58:32:b3:ba:c4:b5:27:24:09:98:e6:f3:
38:d0:c3:ab:5b:30:28:3a:8e:49:84:26:e0:e0:32:
c9:3c:be:f5:64:5a:e1:10:7f:0f:8f:48:6b:7b:c4:
b1:08:e6:95:ec:22:d2:2e:f4:e7:10:25:a9:00:a7:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:04:15:FB:62:AB:5B:A5:07:01:06:E7:5F:B9:75:5E:20:4A:EA:EE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.36.0/24
Signature Algorithm: sha256WithRSAEncryption
59:83:f5:6f:06:cb:2e:fc:e1:86:e7:85:d2:94:ad:00:f3:2f:
ef:bf:42:2e:33:90:96:91:d3:d6:ce:28:0a:7d:2d:a5:29:f6:
d6:1e:e1:f8:64:a7:b2:55:66:e9:7b:b9:0c:b6:a3:88:f6:7a:
ee:18:da:bd:55:29:e7:4c:8d:55:82:c0:2a:1f:e5:80:1d:0d:
d2:eb:dc:f5:a5:5a:33:33:65:3c:28:97:1d:4f:1f:9f:ea:26:
69:1b:fc:4c:09:81:e8:88:3a:fe:54:5d:f1:9b:1d:83:d9:44:
61:11:e2:e8:98:ce:46:5f:55:f2:4d:24:96:a0:7d:c5:30:0f:
4a:95:b3:1d:c9:a7:5f:26:30:f4:9b:d0:35:aa:8c:69:84:7a:
ce:18:b1:a2:dd:8f:49:e0:bd:dc:32:20:a5:8b:fa:47:e7:2b:
d5:bd:e5:2b:9e:47:92:cb:0f:12:6a:c1:28:4a:63:9a:93:e6:
7d:e2:9e:13:50:09:0a:93:5e:b0:95:5f:f7:89:fe:a0:db:c5:
93:1b:54:a9:7f:c3:8c:21:3b:a7:c9:3b:40:7d:97:a4:93:c3:
54:de:ca:6b:c2:32:27:48:ae:ed:a6:b5:d9:51:8c:ab:30:67:
8d:27:c9:06:2a:b0:39:ca:41:34:42:92:1f:9e:d1:62:65:5d:
1c:38:e4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:42:30 2026 by rpki-client