Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212609.roa
File: AS212609.roa (raw, json)
Hash identifier: cZUpLSMElIb6uG6RutX313RyYpFH2a+J0rp4eFuIFuQ=
Subject key identifier: D8:83:02:53:A0:A1:1E:37:67:66:8E:0F:1D:C6:8F:E0:D2:D2:C2:F6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 061A859114D5D3AC8DBD08CB66ABD22D692C8374
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212609.roa
Signing time: Wed 04 Mar 2026 13:33:43 +0000
ROA not before: Wed 04 Mar 2026 13:28:43 +0000
ROA not after: Wed 03 Mar 2027 13:33:43 +0000
asID: 212609
IP address blocks: 146.103.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 07:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1a:85:91:14:d5:d3:ac:8d:bd:08:cb:66:ab:d2:2d:69:2c:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 4 13:28:43 2026 GMT
Not After : Mar 3 13:33:43 2027 GMT
Subject: CN=D8830253A0A11E3767668E0F1DC68FE0D2D2C2F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:2e:a2:ac:7c:6c:16:0e:d6:3d:b8:5a:72:
b9:78:b7:29:15:7a:dc:f5:93:c9:4a:2c:6d:30:7d:
2b:a0:1b:6b:a3:18:2f:1e:01:bf:8a:8a:62:ff:c1:
e8:39:69:50:c2:04:59:8b:cf:7d:fc:5c:01:c3:8a:
87:ba:8e:c3:64:48:87:cd:4f:0a:de:00:2d:69:44:
2d:42:65:c0:ef:38:f2:ac:1a:7b:b7:54:c3:a6:f8:
fd:f3:ef:83:bd:f0:e5:70:e3:e4:ed:31:02:31:ee:
65:2f:b8:52:b3:96:d7:49:fb:e0:f1:27:f5:27:1b:
2d:a4:78:88:55:ad:87:92:4f:14:eb:17:b3:96:8a:
70:9e:41:7a:5f:3f:24:98:9c:2c:ef:5d:e0:35:51:
49:92:10:6b:a3:08:1d:fc:89:21:7e:52:e8:10:ca:
0f:81:ac:03:b4:75:4e:4b:56:d6:76:79:89:61:84:
51:d9:b9:18:93:e1:92:9a:0c:f5:3a:ff:79:9e:a8:
7a:bd:4e:5b:1e:f2:25:96:f0:9b:4c:2f:2c:86:15:
eb:b6:c7:83:64:bf:fd:f1:f8:e7:44:1a:27:ff:ad:
75:ed:7d:e4:75:b1:42:66:05:44:79:88:69:0d:91:
34:5b:aa:6c:27:1a:7e:98:24:3c:1c:8d:ea:56:37:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:83:02:53:A0:A1:1E:37:67:66:8E:0F:1D:C6:8F:E0:D2:D2:C2:F6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212609.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.61.0/24
Signature Algorithm: sha256WithRSAEncryption
17:56:bc:d8:c8:70:f7:38:59:ec:b4:2b:92:be:79:75:1e:cd:
cd:29:95:49:7e:10:77:56:3c:bc:d3:29:e9:8d:e2:52:fd:2b:
cd:51:d1:5f:92:17:c4:6e:a4:88:3c:86:51:65:74:87:49:46:
fd:2e:d7:ef:f2:a7:48:86:fc:e2:fe:7d:bd:e8:b9:d7:21:ae:
bf:57:4c:59:ab:e3:f6:a9:32:7e:08:1a:85:b2:a5:57:86:af:
b8:49:fc:b0:5b:a5:0a:75:21:cf:83:33:4c:36:1c:c6:90:c7:
e6:92:f6:b0:0a:84:2c:cf:47:9f:04:d9:00:31:f4:37:45:16:
bd:39:b2:e5:5e:d9:a4:62:aa:8f:be:f0:d9:86:10:f5:a1:46:
37:b0:c7:41:6f:a7:39:f2:9b:15:55:63:d8:c1:3e:6f:e6:48:
23:76:23:2e:94:2e:58:8c:5c:e8:02:12:42:2e:3a:b1:de:70:
8e:93:30:c3:c6:5c:8f:ab:0e:9b:64:02:82:91:e5:3d:a2:b3:
81:c0:d8:9b:e2:aa:0a:a9:91:c1:36:f4:3b:83:c1:4e:12:fc:
a0:f9:20:65:0b:27:41:48:88:64:e8:5e:df:6a:16:a4:7f:56:
1b:97:25:11:e3:2c:3e:be:fc:87:d4:4b:34:6a:b1:9a:b2:50:
2a:65:9b:d4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUBhqFkRTV06yNvQjLZqvSLWksg3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAzMDQxMzI4NDNaFw0yNzAzMDMxMzMzNDNaMDMxMTAvBgNV
BAMTKEQ4ODMwMjUzQTBBMTFFMzc2NzY2OEUwRjFEQzY4RkUwRDJEMkMyRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ci6irHxsFg7WPbhacrl4tykV
etz1k8lKLG0wfSugG2ujGC8eAb+KimL/weg5aVDCBFmLz338XAHDioe6jsNkSIfN
TwreAC1pRC1CZcDvOPKsGnu3VMOm+P3z74O98OVw4+TtMQIx7mUvuFKzltdJ++Dx
J/UnGy2keIhVrYeSTxTrF7OWinCeQXpfPySYnCzvXeA1UUmSEGujCB38iSF+UugQ
yg+BrAO0dU5LVtZ2eYlhhFHZuRiT4ZKaDPU6/3meqHq9Tlse8iWW8JtMLyyGFeu2
x4Nkv/3x+OdEGif/rXXtfeR1sUJmBUR5iGkNkTRbqmwnGn6YJDwcjepWN2WpAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU2IMCU6ChHjdnZo4PHcaP4NLSwvYwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEyNjA5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkmc9
MA0GCSqGSIb3DQEBCwUAA4IBAQAXVrzYyHD3OFnstCuSvnl1Hs3NKZVJfhB3Vjy8
0ynpjeJS/SvNUdFfkhfEbqSIPIZRZXSHSUb9Ltfv8qdIhvzi/n296LnXIa6/V0xZ
q+P2qTJ+CBqFsqVXhq+4SfywW6UKdSHPgzNMNhzGkMfmkvawCoQsz0efBNkAMfQ3
RRa9ObLlXtmkYqqPvvDZhhD1oUY3sMdBb6c58psVVWPYwT5v5kgjdiMulC5YjFzo
AhJCLjqx3nCOkzDDxlyPqw6bZAKCkeU9orOBwNib4qoKqZHBNvQ7g8FOEvyg+SBl
CydBSIhk6F7fahakf1YblyUR4yw+vvyH1Es0arGaslAqZZvU
-----END CERTIFICATE-----
Generated at Thu Mar 5 10:41:15 2026 by rpki-client