Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212935.roa
File: AS212935.roa (raw, json)
Hash identifier: rs/o16ku6tZjHPvVFl6l4UPcOYclKW1hGM4fQjWcSGw=
Subject key identifier: B9:D5:31:D2:1A:32:AC:FE:6F:D7:03:7A:C4:73:66:1B:1A:05:ED:22
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6533F4A3EDE611ED068D068C429A93A62B08B75C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212935.roa
Signing time: Fri 13 Mar 2026 07:46:48 +0000
ROA not before: Fri 13 Mar 2026 07:41:48 +0000
ROA not after: Fri 12 Mar 2027 07:46:48 +0000
asID: 212935
IP address blocks: 191.96.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:33:f4:a3:ed:e6:11:ed:06:8d:06:8c:42:9a:93:a6:2b:08:b7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 13 07:41:48 2026 GMT
Not After : Mar 12 07:46:48 2027 GMT
Subject: CN=B9D531D21A32ACFE6FD7037AC473661B1A05ED22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:e4:fb:51:fb:e5:f7:31:5c:95:06:4e:29:
9a:50:3e:0c:f9:52:88:6e:22:b6:b9:dd:0f:6c:1f:
33:3b:62:66:55:fe:46:78:c9:30:0e:76:84:e5:3b:
ab:f7:66:88:d4:50:61:ad:5b:02:89:21:61:2d:89:
ea:9e:76:2f:e4:77:32:61:54:6e:8e:7d:ce:56:46:
98:49:35:07:d7:8d:98:90:1b:ec:21:ee:a3:71:96:
7a:8b:94:ed:c2:4e:0b:59:67:60:18:d5:e9:74:54:
e6:b3:6f:18:0b:d6:78:7b:af:a2:9e:82:9e:a1:a6:
b9:dd:20:b2:70:b8:e7:ff:d3:f0:e1:22:9c:fd:60:
d4:9a:12:22:31:0d:9c:05:7b:4b:87:89:b3:03:a1:
6e:dd:bc:0f:c2:77:55:a2:a2:bc:5c:09:c4:cc:59:
d6:08:7e:52:3e:98:4b:21:93:4d:63:8e:64:e4:5e:
64:32:9d:08:00:98:14:5a:9c:83:45:c9:67:0a:3f:
bc:85:db:99:64:21:d8:06:ff:bd:2c:40:7e:d5:a7:
77:e6:b2:fe:40:c5:5f:76:52:91:6d:ac:16:2f:1c:
5c:53:c5:31:1f:3e:b3:b2:ce:fb:b9:b0:97:64:8a:
65:f5:c6:94:f7:71:2a:e6:32:af:a1:4f:3c:bb:ee:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D5:31:D2:1A:32:AC:FE:6F:D7:03:7A:C4:73:66:1B:1A:05:ED:22
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.204.0/24
Signature Algorithm: sha256WithRSAEncryption
78:44:d7:84:ff:02:ff:4c:23:b6:47:51:4f:74:2d:fe:5c:e1:
fd:67:e3:91:55:99:c0:49:c2:d0:f2:60:96:2b:f0:0c:ad:3a:
ac:3b:47:88:3b:4b:8a:d1:5e:4a:fd:73:36:ad:66:38:b8:b1:
be:ba:30:db:70:a4:09:d0:e6:ce:a9:58:2c:d7:d4:ef:99:09:
30:41:1a:4b:83:73:10:4a:3e:9c:49:5a:b3:4c:18:a5:1b:b6:
58:90:54:77:fc:5a:28:91:7f:9c:80:7e:32:94:41:f7:e3:af:
84:60:77:30:e5:16:4d:b7:23:91:59:84:13:75:4e:65:71:d0:
9b:d7:96:94:65:0f:ab:62:6b:0f:e4:02:26:66:47:82:24:2e:
87:7e:15:4d:d9:d7:24:12:8c:6c:3a:a3:9d:74:f7:ff:e4:ed:
e0:20:63:04:5a:fd:d4:55:82:1c:d1:40:da:f9:68:68:dc:c3:
28:5d:58:b3:fa:c6:3e:85:ee:cd:50:cd:99:3a:4d:21:98:f3:
1d:5a:bf:85:98:a9:6a:23:78:15:dd:73:45:a7:c7:fc:c7:60:
50:98:05:a7:66:57:b6:1d:b9:a3:5f:37:20:c7:8e:59:05:cb:
a2:9b:e7:55:64:28:e4:7f:fc:d7:25:04:bb:f9:dd:d2:69:43:
8c:ef:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:02:23 2026 by rpki-client