Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212384.roa
File: AS212384.roa (raw, json)
Hash identifier: WGBUCX26LPKIO9gdKFP+8XRyod2aP2Bu8yNQvBqJ18E=
Subject key identifier: 98:B4:E3:C1:A4:5D:3F:5F:16:CB:61:12:31:14:57:59:AA:FE:8B:7B
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 302C30B2AC81B1C369A091759911AA5ABE047618
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212384.roa
Signing time: Tue 09 Sep 2025 00:55:00 +0000
ROA not before: Tue 09 Sep 2025 00:50:00 +0000
ROA not after: Tue 08 Sep 2026 00:55:00 +0000
asID: 212384
IP address blocks: 45.142.238.0/23 maxlen: 24
45.146.83.0/24 maxlen: 24
45.154.107.0/24 maxlen: 24
152.89.248.0/24 maxlen: 24
176.105.224.0/24 maxlen: 24
176.105.225.0/24 maxlen: 24
193.29.96.0/24 maxlen: 24
194.5.149.0/24 maxlen: 24
194.113.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:2c:30:b2:ac:81:b1:c3:69:a0:91:75:99:11:aa:5a:be:04:76:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 9 00:50:00 2025 GMT
Not After : Sep 8 00:55:00 2026 GMT
Subject: CN=98B4E3C1A45D3F5F16CB611231145759AAFE8B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:9d:cc:c4:6d:52:c4:9c:55:5a:9f:5d:ff:
2b:95:3e:74:e6:4b:49:89:2b:98:23:83:0e:91:43:
0a:83:08:9a:b2:75:1d:e4:92:65:9d:bd:a4:5c:d4:
dd:31:3b:ff:5d:06:b2:67:c9:84:91:07:fe:b3:c4:
f9:e5:0c:45:c1:d8:47:b9:b5:cd:9b:b9:3d:67:ec:
54:e0:6f:82:3a:22:ca:eb:a2:4f:ed:29:97:62:3c:
ab:5e:d2:e4:70:2e:96:b8:e2:48:85:56:a8:03:7a:
b9:7f:3e:70:b0:d2:26:c8:ab:77:ce:d4:4d:6a:99:
29:5e:cd:2e:e9:6e:8a:42:52:a1:a8:d0:3a:fa:d5:
b7:11:76:4b:1e:cd:2c:05:f6:e3:e3:e6:e1:a7:46:
9d:0f:28:46:9c:a7:f7:dc:2b:a4:6d:81:f9:61:03:
26:31:ff:79:1a:d1:9d:9e:25:46:58:7d:ce:e8:8e:
5d:9d:65:c9:6d:3c:b4:20:32:04:dc:e8:c2:83:ad:
0d:57:d3:d8:72:05:a1:a2:fe:05:40:89:b5:1d:24:
b6:0b:db:c8:eb:f9:ee:2f:74:f1:b0:df:fa:b3:06:
b1:3c:51:68:7c:49:f3:d2:b8:c8:d1:ee:8a:c8:a4:
e4:d0:c0:24:8f:80:db:0f:4a:63:52:77:15:2e:be:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:E3:C1:A4:5D:3F:5F:16:CB:61:12:31:14:57:59:AA:FE:8B:7B
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
45.146.83.0/24
45.154.107.0/24
152.89.248.0/24
176.105.224.0/23
193.29.96.0/24
194.5.149.0/24
194.113.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6d:59:9f:80:1a:ce:2e:9d:54:b7:fb:09:e1:a2:d0:f4:f4:
e1:1f:17:a5:82:83:ac:7e:9c:d3:a4:de:62:2f:00:f6:37:25:
3d:10:71:e4:84:87:96:02:6b:5f:cf:ae:98:45:bb:65:62:20:
99:15:df:1a:df:ce:51:c2:bd:76:d6:47:f7:fd:23:01:95:02:
9c:b4:3e:fd:3d:41:8a:58:a8:64:8c:ea:ca:b2:90:26:83:08:
86:4d:f8:72:7d:8a:b1:ff:61:ba:91:39:a3:14:6b:ca:78:8d:
61:a9:65:7a:6c:14:ca:a7:8c:96:39:db:0c:8e:00:ae:33:05:
71:14:90:52:75:37:b3:33:71:54:d5:cd:c6:a0:53:c4:90:a1:
05:b4:cd:89:d8:b7:b1:97:b2:39:ca:77:6e:ea:e5:dc:5e:09:
f2:5b:a3:99:21:64:4d:50:e9:d6:87:be:9e:d4:8e:41:78:0f:
ee:33:29:1a:c2:1d:63:65:b3:bf:e4:2f:21:be:7c:b4:b3:a7:
96:6a:99:76:df:d6:ed:b4:74:1d:45:93:08:b8:1d:35:a4:c3:
97:e5:02:6f:82:3c:4f:a6:be:59:97:1f:9f:a3:7a:e2:4e:03:
4d:d3:e0:0f:ee:a9:b1:7d:1d:e4:d2:9d:fb:6a:3b:25:9e:9b:
28:27:49:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:47:42 2025 by rpki-client