Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212384.roa
File: AS212384.roa (raw, json)
Hash identifier: ZROD8voKY+JMj032xdw8z4XAezurAAcEFBfWmqQ6Efo=
Subject key identifier: BD:F8:E2:09:0D:05:00:D7:72:7F:E9:A4:BD:51:B6:F7:30:D2:2F:0C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2FF93A464CC4F7C2B0A26C57AF838D20AC276B0C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212384.roa
Signing time: Thu 12 Nov 2026 12:49:41 +0000
ROA not before: Thu 12 Nov 2026 12:44:41 +0000
ROA not after: Thu 11 Nov 2027 12:49:41 +0000
asID: 212384
IP address blocks: 85.209.179.0/24 maxlen: 24
181.214.63.0/24 maxlen: 24
181.214.169.0/24 maxlen: 24
181.214.241.0/24 maxlen: 24
181.215.29.0/24 maxlen: 24
181.215.144.0/24 maxlen: 24
185.139.239.0/24 maxlen: 24
185.170.42.0/24 maxlen: 24
191.96.211.0/24 maxlen: 24
191.101.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f9:3a:46:4c:c4:f7:c2:b0:a2:6c:57:af:83:8d:20:ac:27:6b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 12 12:44:41 2026 GMT
Not After : Nov 11 12:49:41 2027 GMT
Subject: CN=BDF8E2090D0500D7727FE9A4BD51B6F730D22F0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:31:28:95:0f:5d:b2:9c:a3:67:5b:64:cd:
50:23:4a:57:75:cc:32:e4:71:01:5f:50:2c:3e:a7:
5e:11:e3:ad:76:47:c7:82:d6:f1:18:ba:92:f4:31:
31:03:aa:3b:9b:f0:2a:c0:42:19:69:6c:16:26:a4:
af:13:51:e6:43:6b:73:e9:3f:01:a2:1e:72:70:e6:
b4:99:e9:05:15:6b:08:b7:31:69:69:0b:e5:f6:f1:
35:89:e8:2a:51:04:b1:8d:b2:f0:20:f0:62:32:44:
d9:1a:88:f5:3e:ad:f3:5a:eb:1a:f9:7f:6d:70:69:
dc:a8:8b:ec:08:3f:a3:fe:99:8b:e3:4c:ad:f1:2c:
fa:69:7e:da:75:e2:1c:12:81:1c:4a:3e:8c:55:a9:
32:b8:87:fb:32:a0:1a:ef:bc:e9:ca:ab:7c:0e:f0:
85:d9:7e:0b:7d:3b:e1:84:54:4f:87:87:66:09:b5:
15:70:9b:dd:ea:10:bb:2e:7b:4b:ee:63:e3:03:a9:
e5:54:9f:b0:95:b3:ee:ca:80:af:ef:dd:b2:4e:88:
f7:e1:79:c9:95:2b:3b:5c:87:0e:13:9e:4a:ce:f6:
28:15:28:34:32:4f:37:3e:d6:b9:58:ad:e7:44:2a:
fc:bb:92:e8:23:12:e8:31:b7:a6:f3:0b:e6:d3:a2:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F8:E2:09:0D:05:00:D7:72:7F:E9:A4:BD:51:B6:F7:30:D2:2F:0C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.179.0/24
181.214.63.0/24
181.214.169.0/24
181.214.241.0/24
181.215.29.0/24
181.215.144.0/24
185.139.239.0/24
185.170.42.0/24
191.96.211.0/24
191.101.122.0/24
Signature Algorithm: sha256WithRSAEncryption
11:39:ac:44:f1:97:59:90:91:40:8a:d1:e9:32:44:3d:c8:a8:
01:5d:4e:d5:04:2b:cf:68:2d:a4:19:af:79:ce:1b:1d:66:fd:
1d:fc:59:a8:11:d8:0f:72:84:72:d3:d1:39:22:61:d9:ab:41:
c6:ee:c0:f2:16:64:4c:4c:76:1e:82:2e:63:29:59:c4:1d:90:
c0:6a:f4:fb:da:f3:d4:c6:47:01:1b:a1:84:5f:8e:3e:e8:47:
cc:1d:45:7f:44:af:c9:23:30:3f:82:c1:ab:2d:f5:07:80:c3:
e2:64:38:43:95:c4:b7:7e:e4:b2:b6:a3:dd:87:3b:25:4a:ae:
20:83:bd:60:af:2b:62:7e:b1:a2:47:f2:ab:5d:0b:39:2f:8d:
ae:c1:f3:6d:b1:69:9c:1d:76:d9:80:45:4f:e9:a2:65:b0:0f:
d2:2c:dd:68:12:84:35:ed:2f:98:db:53:ea:06:3d:94:4b:d6:
b1:f9:49:7c:c4:b9:93:dc:54:79:65:d1:44:62:9a:0c:04:a7:
d1:43:e5:0a:65:c3:7f:30:10:76:d0:2f:b8:b1:3c:ca:dd:95:
d8:6b:90:ee:6e:60:1b:67:0f:02:01:a9:41:01:b4:cc:fa:11:
47:2b:6b:85:04:8c:a4:fc:ef:fb:54:08:2a:f7:f8:fa:8e:b7:
22:51:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 19:29:25 2026 by rpki-client