Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212335.roa
File: AS212335.roa (raw, json)
Hash identifier: GSnpZZX+CBnfJYO0WAEBN8p+mhoqRRPyokzYFcjfr6E=
Subject key identifier: 0C:02:7A:EA:47:E4:CD:DD:6D:8E:3A:F2:12:71:6C:9C:55:CF:78:D3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0CB96A2EFDBCB0DCCB652B9C92E7D551B6D29F98
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212335.roa
Signing time: Tue 21 Jul 2026 12:49:14 +0000
ROA not before: Tue 21 Jul 2026 12:44:14 +0000
ROA not after: Tue 20 Jul 2027 12:49:14 +0000
asID: 212335
IP address blocks: 45.137.157.0/24 maxlen: 24
179.61.155.0/24 maxlen: 24
181.214.241.0/24 maxlen: 24
185.170.56.0/24 maxlen: 24
191.96.18.0/24 maxlen: 24
191.96.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b9:6a:2e:fd:bc:b0:dc:cb:65:2b:9c:92:e7:d5:51:b6:d2:9f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 21 12:44:14 2026 GMT
Not After : Jul 20 12:49:14 2027 GMT
Subject: CN=0C027AEA47E4CDDD6D8E3AF212716C9C55CF78D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:c1:a0:6a:99:47:0a:73:0f:75:b7:90:10:
62:2d:cc:61:4a:a3:cc:fd:1f:95:cd:34:07:7f:ae:
56:88:91:93:09:13:81:2a:22:60:d7:42:d9:fb:ec:
bc:4f:ba:51:93:9b:10:a2:f9:b4:b0:03:a4:94:95:
33:07:da:7d:83:7f:b6:de:6c:35:8d:78:b8:51:fe:
8c:5f:a2:ad:8b:7d:ba:88:f0:17:ef:df:70:83:81:
2d:6c:26:3f:cd:ec:70:fd:df:9b:39:c8:fa:69:7a:
cc:73:62:14:43:9c:8c:18:df:3c:97:ca:cf:a0:c4:
4e:53:4f:52:b8:75:f8:6e:f0:60:f4:56:cc:ca:bb:
fe:56:d9:67:6e:c5:de:18:c1:b6:67:e5:2b:99:4a:
b4:f3:5d:97:12:5c:63:db:51:b8:20:e1:70:94:6a:
67:6a:4b:c4:86:5c:1e:37:5e:39:b6:52:bd:0a:ef:
07:8e:88:35:7c:90:d9:86:0c:77:18:2d:77:d6:84:
18:4e:ce:d5:1a:b3:68:d2:f5:13:e8:bf:6d:17:dd:
8a:68:00:35:ed:6c:f9:a3:57:c9:db:5e:33:f7:23:
77:32:62:26:8a:55:5b:86:d0:d3:0e:9e:ab:78:84:
77:86:34:20:e7:f7:4f:0b:b8:af:bb:2a:59:c7:6d:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:02:7A:EA:47:E4:CD:DD:6D:8E:3A:F2:12:71:6C:9C:55:CF:78:D3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.157.0/24
179.61.155.0/24
181.214.241.0/24
185.170.56.0/24
191.96.18.0/24
191.96.187.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f4:a6:20:f6:b4:26:60:df:7a:dc:e3:59:f1:a2:e4:69:46:
e8:cc:a4:ba:9c:b3:97:29:93:da:28:a4:ca:85:ff:52:d9:07:
3b:34:bf:74:df:ad:48:cb:a7:04:3a:fe:df:cf:c3:e5:81:c8:
da:88:da:77:e9:90:2d:68:ee:8d:84:3d:57:4b:1b:26:5e:1d:
7e:62:ef:e4:87:c4:fc:31:0b:2c:24:cf:53:6d:5a:f5:69:d8:
53:14:2e:6f:9b:bc:3e:cf:80:b6:73:e8:7d:82:90:7f:c0:54:
4c:9f:22:97:82:ca:6c:05:9a:44:5f:3c:b0:ec:9d:0e:06:74:
30:34:63:5c:e1:39:84:cb:99:25:88:9f:d6:6f:58:b0:f8:ff:
d7:67:01:cd:d6:a1:81:da:a8:9a:31:45:1c:fa:fb:a1:9b:c5:
6a:81:26:63:8e:bb:b2:99:2c:38:7b:b6:32:87:b2:ca:4f:e5:
99:dc:ea:59:f0:83:77:6d:09:dd:3c:82:f6:3a:33:be:28:6d:
bf:bd:16:83:36:9b:91:a1:27:26:3c:ec:ab:73:54:7d:57:68:
ab:0e:37:2d:42:ee:f4:4c:c2:02:c2:1b:e5:46:f8:d5:b0:55:
31:a0:d1:e1:c8:8c:33:bd:c7:54:78:86:43:5a:f5:27:41:ef:
56:6d:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:55:19 2026 by rpki-client