Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212683.roa
File: AS212683.roa (raw, json)
Hash identifier: wXHcigYP3KSU9sMO801nZge9IK0JmOV7r4xlH7Q7F9U=
Subject key identifier: 94:FA:06:44:34:27:31:23:E8:AE:5F:C1:F6:FB:C7:FE:07:39:FC:EC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1E7F20E3B1B8D6FE00239F09CA52BF88172B47AF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212683.roa
Signing time: Tue 12 Aug 2025 14:46:44 +0000
ROA not before: Tue 12 Aug 2025 14:41:44 +0000
ROA not after: Tue 11 Aug 2026 14:46:44 +0000
asID: 212683
IP address blocks: 143.14.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7f:20:e3:b1:b8:d6:fe:00:23:9f:09:ca:52:bf:88:17:2b:47:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 12 14:41:44 2025 GMT
Not After : Aug 11 14:46:44 2026 GMT
Subject: CN=94FA064434273123E8AE5FC1F6FBC7FE0739FCEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:48:77:d9:83:43:a3:e3:f4:e4:83:99:03:ab:
1e:65:42:aa:c3:60:b4:b5:6d:4c:63:f7:07:46:a0:
7f:86:03:db:ed:78:14:ac:4a:34:ba:d0:3b:e6:dd:
24:5b:13:90:31:0f:2b:05:ef:e4:f2:f9:60:54:f3:
f4:b1:bd:d6:a8:e2:7f:28:41:f6:12:c5:4a:04:e7:
2b:5e:87:d3:12:92:72:7b:9e:01:ea:d4:dd:35:8e:
05:38:5e:0c:12:92:9e:4a:25:e8:73:d8:1f:2d:88:
59:6f:2f:a2:b9:f3:fb:82:28:b3:79:86:32:a4:e2:
ba:6a:49:27:74:bf:0d:bf:f1:49:a9:58:2d:14:23:
c8:fe:12:5d:70:5f:02:69:fb:5f:40:3d:5a:af:63:
1b:71:83:2f:e8:2e:ee:83:3f:2d:67:81:6b:58:bd:
af:e0:df:c9:ab:3c:6c:a6:cd:17:2b:b8:a3:4d:97:
19:19:60:ce:bf:53:42:02:2b:b4:a8:56:e9:df:af:
c6:b8:04:40:c8:6e:f4:f1:29:84:62:75:77:38:7a:
57:5a:c5:21:71:f4:1b:4f:2f:9e:5d:36:20:bf:ec:
2c:d2:da:bd:2a:ca:ac:bd:7a:c2:0b:09:cf:05:49:
76:a3:d8:e7:a8:b3:4c:ed:50:20:6c:62:c4:2f:b7:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FA:06:44:34:27:31:23:E8:AE:5F:C1:F6:FB:C7:FE:07:39:FC:EC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.242.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:42:af:06:7b:a9:83:70:77:00:0a:04:c3:46:5b:45:3a:43:
a4:54:1d:ec:33:e4:e2:ce:c1:84:91:2b:46:75:d5:67:d9:9a:
31:20:72:43:a5:ed:4f:6d:e7:ed:14:dd:04:f7:cf:fc:ce:a4:
cc:84:b0:8c:5d:04:91:42:3b:7a:36:5a:36:e7:2b:08:af:a9:
85:28:18:10:d4:0e:ba:22:79:bf:1d:24:d6:56:16:78:31:f2:
bc:6e:1d:48:7e:34:7b:fe:ec:fe:8f:c9:7f:ee:b2:2d:ea:c4:
f4:f9:43:9c:e3:45:be:cc:7c:a8:f0:bc:56:42:8f:07:28:07:
c3:df:40:ed:b1:a2:6e:73:75:0a:a2:d7:27:ee:8a:a0:1a:44:
a6:75:d5:85:a4:9f:4b:0e:ba:3d:0a:b5:89:bd:86:cd:5d:3e:
24:66:49:63:0a:dd:9c:b7:cd:2f:b0:e7:cf:77:05:0d:89:e9:
f4:02:f3:21:be:92:cd:1e:dd:3e:0a:a4:38:c0:a6:0a:33:de:
c2:8e:6f:46:5b:1e:a2:fa:28:dc:e2:b6:c2:f7:7d:e7:54:30:
8c:b5:2f:3c:1a:19:6f:e3:d0:81:a7:03:10:f6:7e:dd:4a:9a:
69:2b:d2:1e:28:ae:d6:cb:c0:51:e4:fb:8c:83:28:f1:71:e8:
16:6f:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:22 2025 by rpki-client