Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212335.roa
File: AS212335.roa (raw, json)
Hash identifier: m6oiStH6tp5M4QeTOXhuomjHcqJCfYPQJGjEBy+Gv2E=
Subject key identifier: C4:6F:F6:52:A7:08:73:B1:F2:7A:E5:F1:6E:9B:C2:A5:E9:4C:D7:00
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5523AB3075773285CA5FE0739AD6DE9F94EC9FBA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212335.roa
Signing time: Wed 22 Jul 2026 07:49:14 +0000
ROA not before: Wed 22 Jul 2026 07:44:14 +0000
ROA not after: Wed 21 Jul 2027 07:49:14 +0000
asID: 212335
IP address blocks: 45.142.238.0/23 maxlen: 24
45.149.102.0/24 maxlen: 24
176.105.224.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
194.5.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:23:ab:30:75:77:32:85:ca:5f:e0:73:9a:d6:de:9f:94:ec:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 22 07:44:14 2026 GMT
Not After : Jul 21 07:49:14 2027 GMT
Subject: CN=C46FF652A70873B1F27AE5F16E9BC2A5E94CD700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:82:34:bd:b2:79:d4:34:90:a6:c5:bb:bb:
07:68:eb:6e:3f:a0:d6:34:2e:0f:0f:53:09:ce:90:
ca:42:51:e6:2d:f4:64:fd:2a:1e:24:a1:f4:fc:1d:
8d:c4:90:6c:c8:b6:20:7e:f4:9b:7b:a3:5d:d1:37:
03:5b:3e:d5:03:56:54:8d:5d:fe:13:4e:f2:1b:01:
49:61:48:f4:b5:e7:06:d9:ba:48:84:cb:25:c0:33:
0a:a0:57:1c:b2:e6:f5:3f:42:67:38:63:5c:44:81:
4e:b4:dc:a1:ae:e9:0e:ce:52:2f:e2:fe:c7:4a:8d:
09:24:8d:bf:f3:68:90:16:0d:58:ef:b0:0e:4d:0a:
8e:2c:49:c7:16:d5:fb:8f:e3:72:97:87:fb:1b:0a:
1c:d7:5c:39:fc:18:87:71:5b:eb:3e:6b:c4:ae:01:
e3:d5:fe:a7:bb:d4:bf:24:bd:46:e8:d5:3e:88:06:
58:a5:1f:3d:79:69:0d:17:90:be:91:32:ec:94:68:
90:f2:c8:c7:fb:88:20:07:b1:19:5e:c2:e9:9c:8a:
84:23:79:2b:df:83:ec:47:51:1d:54:41:c5:cf:5a:
11:c3:43:00:77:c9:ea:4c:0e:ae:53:6a:35:e6:fb:
fe:42:04:f0:43:df:8c:89:7c:b7:ca:f8:42:9e:80:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6F:F6:52:A7:08:73:B1:F2:7A:E5:F1:6E:9B:C2:A5:E9:4C:D7:00
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
45.149.102.0/24
176.105.224.0/24
193.176.128.0/24
194.5.149.0/24
Signature Algorithm: sha256WithRSAEncryption
be:24:57:e6:3c:e5:39:59:54:30:5c:74:1d:fa:db:6f:e7:a9:
9a:f2:87:26:48:7a:ff:17:0d:4c:19:07:67:ea:ce:65:40:ac:
24:46:ef:d1:d6:4a:e1:ea:9b:24:5a:7e:54:04:14:58:58:ff:
3a:e8:91:39:18:dd:c6:73:30:a7:c9:eb:ae:50:33:95:a7:29:
e5:e9:a5:24:fc:0d:52:12:5c:01:ad:4a:c0:fc:60:0c:21:c7:
f7:8c:4b:25:30:82:31:bb:07:24:d5:ea:45:a7:d9:03:75:a3:
e5:42:98:89:93:2c:d8:7c:50:f4:c5:a2:a6:9a:c1:99:46:c8:
70:6e:03:13:e1:d3:4b:93:5e:ae:41:01:80:4f:ab:b7:37:3c:
00:54:0a:72:ca:84:20:61:49:de:12:32:be:5e:84:74:65:7a:
b7:80:cc:60:c6:55:2f:37:8a:d8:e3:2c:31:7e:b4:3d:33:b6:
8f:a2:d5:14:4a:19:e8:1b:8e:66:51:04:21:d5:a4:53:0c:27:
76:53:6b:37:aa:60:f6:25:13:5e:97:4e:67:35:7f:3f:c2:f3:
30:c3:0a:de:d0:98:88:60:c0:1e:c3:22:d1:e8:06:86:fe:c9:
eb:16:c8:a7:b2:bc:03:96:98:e9:5f:7f:dc:41:5d:8b:7a:5c:
b6:29:99:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:42:21 2026 by rpki-client