Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212669.roa
File: AS212669.roa (raw, json)
Hash identifier: qh4xKqT8zKl2y1aJGIJJMoDIzhb4VawNvZhHRG77Do4=
Subject key identifier: 21:07:8D:A1:AB:20:71:F9:DC:04:1F:FF:51:C5:2A:74:00:5B:8A:CD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 72898631BF061B80464C714EE428F1179D1FAA29
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212669.roa
Signing time: Fri 10 Jul 2026 12:07:32 +0000
ROA not before: Fri 10 Jul 2026 12:02:32 +0000
ROA not after: Fri 09 Jul 2027 12:07:32 +0000
asID: 212669
IP address blocks: 148.135.171.0/24 maxlen: 24
155.117.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:89:86:31:bf:06:1b:80:46:4c:71:4e:e4:28:f1:17:9d:1f:aa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 10 12:02:32 2026 GMT
Not After : Jul 9 12:07:32 2027 GMT
Subject: CN=21078DA1AB2071F9DC041FFF51C52A74005B8ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:21:13:80:19:66:d8:2d:e8:b3:fc:c8:96:
78:bf:97:24:d6:fb:e7:3a:ed:cc:bb:65:b0:65:59:
5e:b0:34:a8:e3:1d:94:0c:5b:05:4e:5c:72:d6:48:
8d:db:49:07:02:0e:29:18:74:ec:34:2b:96:70:c1:
ff:5f:c9:d8:ae:63:5c:ce:da:67:11:5e:43:3f:44:
6a:11:fa:22:7e:0f:a5:6d:cb:59:67:9e:0d:1b:dc:
d6:f9:32:56:54:45:38:e2:a1:c3:22:d5:94:92:c0:
0b:ff:96:68:43:e4:1b:c1:a3:59:cd:b3:44:3f:c9:
19:9a:60:ee:46:26:ea:8b:91:ae:98:f6:97:aa:69:
5d:0d:e6:f5:54:86:e2:94:ed:05:b9:a2:c0:7b:c0:
b2:d8:9f:13:ba:9f:26:7f:ae:9a:19:ce:6f:b6:d1:
49:ed:57:55:79:ea:ac:15:ef:98:17:9c:ec:fb:56:
65:14:55:5b:ee:1d:55:01:8d:7a:53:8a:23:ac:1f:
92:1a:44:96:7f:08:27:8e:ef:01:3e:9a:74:76:f8:
41:12:e7:bb:6d:df:4e:27:89:c2:74:0c:c0:7f:1a:
b2:12:f8:32:e7:e5:a4:31:19:4b:a8:52:28:6e:a9:
45:1c:31:9a:c0:54:52:6d:42:2d:ef:5d:9f:d0:29:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:8D:A1:AB:20:71:F9:DC:04:1F:FF:51:C5:2A:74:00:5B:8A:CD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.171.0/24
155.117.238.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c6:21:4c:a4:e6:49:65:da:fa:e4:08:23:ef:7b:60:50:b3:
9e:15:cb:7c:0b:65:d8:f7:29:e6:55:dc:48:a6:dd:c9:3d:67:
56:73:04:77:d4:38:46:fd:09:60:da:ef:53:5b:83:7d:b5:66:
65:92:cc:5c:67:86:fd:c1:3c:63:fb:a3:eb:e1:9a:ad:19:4d:
de:df:60:88:f6:d5:e2:e1:d9:d5:81:dd:a4:15:52:7e:17:5e:
c6:be:2a:35:f1:ed:bd:b0:29:59:af:89:0d:00:a0:cc:13:2a:
d7:ef:29:9d:75:14:8b:b2:21:2a:85:56:35:92:03:f5:91:4f:
10:72:da:21:07:5c:3f:4e:f1:f6:85:a1:5f:69:0c:95:d6:84:
b1:05:10:95:9b:bc:54:81:01:98:50:49:93:cd:1a:12:f9:09:
c6:3d:e2:1c:4c:96:fc:21:6b:80:20:1f:b2:86:9d:fe:67:69:
e8:26:c2:e3:b3:c6:24:b2:be:b4:6f:2a:5a:c4:2c:a2:7b:29:
b0:29:a5:de:18:02:e7:28:38:3e:3b:eb:bb:2b:a8:b5:70:76:
18:fe:9f:88:00:ba:de:84:7b:16:1e:22:95:25:9d:bc:e8:6d:
8c:98:41:a5:1d:23:df:8e:54:ea:e2:f2:8a:91:aa:7a:78:be:
b7:95:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:51 2026 by rpki-client