Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212335.roa
File: AS212335.roa (raw, json)
Hash identifier: Honbh/KJ8LqNlLWSb8zs+ebPG1EFzjtCj4+Oyq5hZeY=
Subject key identifier: D5:37:33:92:F9:F6:5F:E5:D3:54:F7:EC:8E:08:2C:99:C7:9A:57:DF
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 231ECDC5388EC7B74A5767BA70568DF65FE3F9E0
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212335.roa
Signing time: Wed 20 Aug 2025 07:44:09 +0000
ROA not before: Wed 20 Aug 2025 07:39:09 +0000
ROA not after: Wed 19 Aug 2026 07:44:09 +0000
asID: 212335
IP address blocks: 45.142.238.0/23 maxlen: 24
45.149.102.0/24 maxlen: 24
176.105.224.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
194.5.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:42:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:1e:cd:c5:38:8e:c7:b7:4a:57:67:ba:70:56:8d:f6:5f:e3:f9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 20 07:39:09 2025 GMT
Not After : Aug 19 07:44:09 2026 GMT
Subject: CN=D5373392F9F65FE5D354F7EC8E082C99C79A57DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:70:ab:03:92:37:3e:bc:c8:92:32:53:b0:
48:e2:17:f9:57:45:1b:96:9e:d8:08:c0:f1:41:90:
ae:b7:0b:43:17:4c:6f:2e:24:ba:aa:56:e4:1f:e1:
2a:a9:30:74:8c:73:1e:f8:14:50:74:47:31:a9:6b:
62:d5:b1:7c:17:b9:15:e0:1a:36:73:ab:ca:fc:36:
53:a9:be:d5:64:1c:ca:b6:5b:e2:b3:e7:db:c1:b9:
e5:b4:1e:99:e2:05:09:a7:50:5e:46:bb:19:a2:41:
eb:76:b3:81:55:35:dc:62:21:e3:a4:28:77:14:a1:
41:62:09:37:89:86:74:7e:ec:7f:5b:32:7f:84:34:
a1:38:f0:18:bb:13:81:eb:8e:16:71:16:35:71:5a:
df:e6:c6:63:b0:d4:20:c2:63:36:72:1e:c0:c6:66:
f7:80:ac:18:0a:44:09:af:54:90:53:6d:71:39:19:
ef:6a:20:95:0a:dc:2f:6a:1f:a4:44:ca:a1:33:7e:
4b:c1:7f:90:7d:ef:74:7e:7b:13:d2:26:5b:d5:0c:
79:42:56:c4:ac:98:cd:f0:1b:cc:a9:fb:3b:b0:85:
0f:63:b0:a8:51:a6:e9:ac:3a:6d:e5:84:f3:85:ce:
a0:52:74:e9:2e:46:a1:c6:bb:e4:23:df:da:04:d0:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:37:33:92:F9:F6:5F:E5:D3:54:F7:EC:8E:08:2C:99:C7:9A:57:DF
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
45.149.102.0/24
176.105.224.0/24
193.176.128.0/24
194.5.149.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1b:f2:a5:3b:61:04:3f:fc:26:dc:a3:c6:0f:ad:11:96:3a:
d7:d8:73:9f:fa:a4:f0:60:08:83:e7:e2:e1:1e:cf:5c:20:9c:
9b:3f:bf:21:f4:24:cb:f7:04:e9:32:44:34:b5:0f:a7:be:ec:
03:65:f6:8f:61:32:f1:4b:86:e6:df:51:84:2f:57:08:4f:1b:
eb:96:17:9d:53:03:06:84:44:d3:cf:5f:8d:56:70:7f:35:3f:
f4:8b:3c:89:2f:79:68:cb:bb:ae:b6:6b:28:2d:93:17:8f:8b:
08:68:8e:e9:33:69:7d:bb:0e:05:44:98:74:e3:76:ed:b6:2c:
eb:cd:96:0a:5b:c6:24:00:3f:86:85:76:80:a2:dd:84:3e:c9:
7a:22:48:db:3e:b4:fb:11:80:12:5c:a1:a8:78:f4:ac:c6:79:
7e:a5:21:8a:6d:76:85:fd:1d:2e:f7:39:be:a0:d9:97:e5:d0:
fb:86:45:f4:16:e2:dc:80:49:c3:0c:1b:cd:22:ff:ce:40:1a:
92:85:a5:15:7a:de:cf:1c:e2:09:6b:1b:c6:15:2d:55:d8:a0:
3e:dc:22:ff:45:a7:bc:7f:4a:6a:4c:ef:3a:c8:2a:d2:7f:75:
91:c7:16:b8:a8:7f:62:44:48:6c:26:16:80:80:d9:ce:4b:d1:
d6:29:b4:46
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUIx7NxTiOx7dKV2e6cFaN9l/j+eAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTA4MjAwNzM5MDlaFw0yNjA4MTkwNzQ0MDlaMDMxMTAvBgNV
BAMTKEQ1MzczMzkyRjlGNjVGRTVEMzU0RjdFQzhFMDgyQzk5Qzc5QTU3REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sXCrA5I3PrzIkjJTsEjiF/lX
RRuWntgIwPFBkK63C0MXTG8uJLqqVuQf4SqpMHSMcx74FFB0RzGpa2LVsXwXuRXg
GjZzq8r8NlOpvtVkHMq2W+Kz59vBueW0HpniBQmnUF5GuxmiQet2s4FVNdxiIeOk
KHcUoUFiCTeJhnR+7H9bMn+ENKE48Bi7E4HrjhZxFjVxWt/mxmOw1CDCYzZyHsDG
ZveArBgKRAmvVJBTbXE5Ge9qIJUK3C9qH6REyqEzfkvBf5B973R+exPSJlvVDHlC
VsSsmM3wG8yp+zuwhQ9jsKhRpumsOm3lhPOFzqBSdOkuRqHGu+Qj39oE0GghAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQU1Tczkvn2X+XTVPfsjggsmceaV98wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjEyMzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLY7u
AwQALZVmAwQAsGngAwQAwbCAAwQAwgWVMA0GCSqGSIb3DQEBCwUAA4IBAQBIG/Kl
O2EEP/wm3KPGD60RljrX2HOf+qTwYAiD5+LhHs9cIJybP78h9CTL9wTpMkQ0tQ+n
vuwDZfaPYTLxS4bm31GEL1cITxvrlhedUwMGhETTz1+NVnB/NT/0izyJL3loy7uu
tmsoLZMXj4sIaI7pM2l9uw4FRJh043bttizrzZYKW8YkAD+GhXaAot2EPsl6Ikjb
PrT7EYASXKGoePSsxnl+pSGKbXaF/R0u9zm+oNmX5dD7hkX0FuLcgEnDDBvNIv/O
QBqShaUVet7PHOIJaxvGFS1V2KA+3CL/Rae8f0pqTO86yCrSf3WRxxa4qH9iREhs
JhaAgNnOS9HWKbRG
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:59:47 2025 by rpki-client