Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
File: AS212683.roa (raw, json)
Hash identifier: BwOgtfEcCk7g4aqT1LELucP7vhuPE3X5bl+ju2h3rxo=
Subject key identifier: F9:3D:EE:0B:C7:6A:F3:C1:BF:75:82:47:99:24:ED:C6:18:C4:EC:77
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 706D62A0298B68F1883CC11812815D9E07619C60
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
Signing time: Mon 20 Jul 2026 08:08:05 +0000
ROA not before: Mon 20 Jul 2026 08:03:05 +0000
ROA not after: Mon 19 Jul 2027 08:08:05 +0000
asID: 212683
IP address blocks: 51.146.19.0/24 maxlen: 24
51.194.132.0/23 maxlen: 24
51.241.64.0/24 maxlen: 24
51.241.76.0/24 maxlen: 24
51.241.192.0/23 maxlen: 24
51.241.195.0/24 maxlen: 24
51.241.196.0/23 maxlen: 23
51.241.232.0/23 maxlen: 23
51.241.253.0/24 maxlen: 24
94.193.32.0/20 maxlen: 20
188.220.50.0/23 maxlen: 23
188.220.87.0/24 maxlen: 24
188.221.17.0/24 maxlen: 24
188.221.52.0/24 maxlen: 24
188.221.106.0/24 maxlen: 24
188.221.111.0/24 maxlen: 24
188.221.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:6d:62:a0:29:8b:68:f1:88:3c:c1:18:12:81:5d:9e:07:61:9c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 20 08:03:05 2026 GMT
Not After : Jul 19 08:08:05 2027 GMT
Subject: CN=F93DEE0BC76AF3C1BF7582479924EDC618C4EC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:3d:6e:0a:3c:00:ec:59:29:24:dc:0d:8d:
0e:a2:ca:ac:97:f3:dc:e2:ff:92:ee:97:00:a4:5a:
99:2b:ce:d9:0e:cc:ac:25:ec:e8:89:53:4c:9b:dd:
f0:9d:13:6a:85:26:bc:af:31:32:de:e4:f5:c9:9d:
75:32:b7:91:f3:1f:44:ff:3d:19:72:96:7d:87:57:
ec:6e:17:78:54:b3:f2:3a:47:52:4a:f6:9b:f5:0a:
a1:00:6f:18:79:31:c7:d9:2e:85:5d:ef:e5:13:bc:
2b:5b:50:96:6a:6f:0c:f1:4d:0a:25:a1:72:24:67:
99:bd:e0:10:10:6f:f4:bf:58:2f:10:19:84:00:4f:
c6:0e:a6:ac:fd:bb:43:94:1d:ec:77:de:af:c9:fc:
a6:bb:1b:35:96:ae:a3:af:4b:98:bd:70:09:e6:07:
45:fd:cb:62:52:dc:25:14:65:0c:73:56:f9:57:91:
dc:8a:9a:9b:1a:f2:22:7a:09:fd:eb:a0:9c:22:3f:
95:11:87:b4:49:ee:75:78:2c:6f:a4:0a:15:73:71:
07:e9:bf:3e:ec:22:d4:05:eb:49:45:e4:76:fa:08:
b2:db:47:8b:42:dd:bc:38:b3:1a:e6:42:d4:6e:89:
9e:a4:fe:7f:59:3e:bd:6e:23:79:5f:fe:3e:7d:15:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:EE:0B:C7:6A:F3:C1:BF:75:82:47:99:24:ED:C6:18:C4:EC:77
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.19.0/24
51.194.132.0/23
51.241.64.0/24
51.241.76.0/24
51.241.192.0/23
51.241.195.0-51.241.197.255
51.241.232.0/23
51.241.253.0/24
94.193.32.0/20
188.220.50.0/23
188.220.87.0/24
188.221.17.0/24
188.221.52.0/24
188.221.106.0/24
188.221.111.0/24
188.221.186.0/24
Signature Algorithm: sha256WithRSAEncryption
82:43:3d:c3:f9:1c:81:48:44:e0:ff:3f:ec:9b:e6:8b:3c:02:
37:6d:6d:d5:25:20:f0:27:23:e8:a4:92:9d:8f:71:37:7d:9b:
63:3b:c5:e0:ff:b5:6d:72:53:04:4d:e5:b5:e2:3a:94:e6:5f:
e8:65:20:01:d2:b4:d5:2c:c3:16:e9:5b:72:b8:35:9d:35:2c:
39:0a:fb:1e:a1:56:6a:b0:16:6c:37:27:3b:7a:dc:9a:99:9d:
b1:22:36:61:71:04:26:59:1e:c3:fa:5c:07:2c:8f:2a:7d:59:
88:35:6e:d4:26:36:f2:83:3d:89:b3:8a:16:6b:12:08:66:5b:
f9:09:44:88:04:14:cd:a4:5a:a0:59:68:9e:36:72:f2:28:5f:
f5:d0:57:18:2b:35:b5:d6:7b:7a:bd:4a:52:36:fa:a8:e4:7e:
3e:b9:8a:f2:b8:ef:f6:06:25:76:61:3c:e2:71:39:9c:32:84:
fb:83:ca:02:67:0a:07:2a:d1:53:2c:e5:65:48:f4:45:dc:e5:
30:f1:4f:6f:99:f7:32:be:50:3c:49:2a:9b:b8:12:6c:8c:8a:
98:50:be:09:71:58:78:d9:f0:21:45:3c:53:23:e6:c7:d8:b7:
de:2c:dc:33:6b:3a:44:e1:46:f6:e7:be:9d:de:50:c6:af:d3:
93:3b:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:30:05 2026 by rpki-client