Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212683.roa
File: AS212683.roa (raw, json)
Hash identifier: XNtDX6WF3ClKt8Y38x0wqOck1miNDIBdfkcNW3C/NO0=
Subject key identifier: 1F:03:E9:BA:7B:A8:20:C8:D8:C6:04:53:86:30:41:26:95:F8:FE:E2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 37EC0CA91E468430409F79260EE2CF8725288F9B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212683.roa
Signing time: Tue 14 Jul 2026 14:49:11 +0000
ROA not before: Tue 14 Jul 2026 14:44:11 +0000
ROA not after: Tue 13 Jul 2027 14:49:11 +0000
asID: 212683
IP address blocks: 143.14.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ec:0c:a9:1e:46:84:30:40:9f:79:26:0e:e2:cf:87:25:28:8f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 14 14:44:11 2026 GMT
Not After : Jul 13 14:49:11 2027 GMT
Subject: CN=1F03E9BA7BA820C8D8C604538630412695F8FEE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:5d:df:a5:64:27:e4:02:fc:8e:86:74:19:
f6:d2:bc:0d:cc:20:d4:fd:b6:c8:8f:b4:99:9c:ce:
52:28:a9:47:74:8f:56:3c:c7:00:20:d9:67:6f:5a:
c1:73:aa:30:64:e1:a2:b1:c8:24:2e:75:ba:e4:cb:
20:06:7f:29:fc:4e:55:6a:9f:4e:d1:c6:f3:54:e4:
c1:f8:85:78:78:96:3b:9e:b6:f4:1e:be:02:92:17:
0c:21:15:86:d2:11:a5:5c:7f:08:6a:d1:aa:c0:64:
98:64:cc:93:73:65:d8:b8:13:91:93:dc:ca:25:1a:
bc:65:ac:b8:95:12:64:14:70:03:4b:d9:82:8d:55:
7f:7b:80:48:bd:6b:58:4c:f9:01:dd:b5:53:c2:07:
c1:e5:c8:63:32:12:bc:7e:b7:cf:d0:ae:38:d1:14:
1f:4e:b0:22:26:7c:13:70:69:6c:a7:8b:71:4e:21:
7e:b5:5f:50:ea:fb:de:f7:03:72:dd:99:7c:bc:91:
62:35:f8:0e:7a:ea:3f:a6:75:47:f6:e3:54:9f:ab:
30:2d:66:9b:13:42:d6:5d:0b:fb:cb:5e:55:f3:29:
3f:df:d2:03:d2:3c:8a:20:f1:36:07:8b:3b:c2:b3:
64:a5:a5:31:0b:09:0c:3f:cf:62:93:84:1f:3c:2e:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:03:E9:BA:7B:A8:20:C8:D8:C6:04:53:86:30:41:26:95:F8:FE:E2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.242.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:91:1b:56:36:b4:2f:5d:69:23:35:10:ca:55:19:c0:e5:da:
eb:c9:a6:05:43:4f:12:8b:18:f2:dc:ad:d1:31:d0:d2:c8:91:
45:fe:32:a6:71:d2:fe:7b:d8:d0:30:ef:a6:cc:14:06:c8:0e:
48:c7:7a:69:cf:79:8d:19:04:57:a0:e7:f3:8d:9d:8c:46:c1:
d6:4b:2d:ec:22:d1:d0:a3:9b:95:25:4f:eb:b4:4f:87:e4:fb:
80:b9:d4:48:51:32:d8:f0:53:8f:b1:75:b9:09:de:db:85:27:
71:a3:2c:ac:60:99:93:da:f9:a7:80:9a:5e:46:a3:d8:5e:68:
52:28:ef:ab:df:41:5e:51:c7:6b:72:c7:84:b1:fe:ae:8e:25:
3e:0a:8f:5b:bb:ac:64:6a:b5:73:1b:ec:0a:11:45:5d:4c:6c:
91:83:45:38:ab:d0:7f:64:8a:2d:b4:6e:fe:9e:97:0d:20:52:
de:d5:7a:37:3d:fb:21:df:00:d5:e2:40:b4:04:39:88:38:d9:
0a:5f:d3:2e:e4:80:e5:00:90:9f:98:f0:c7:b6:14:74:df:8d:
dd:31:28:5a:aa:3e:c7:2a:f2:e0:5c:c1:26:b1:82:1b:e7:b5:
e9:f5:76:54:25:36:e9:81:1f:40:6d:44:da:84:f0:aa:da:46:
d4:67:7b:0b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUN+wMqR5GhDBAn3kmDuLPhyUoj5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MTQxNDQ0MTFaFw0yNzA3MTMxNDQ5MTFaMDMxMTAvBgNV
BAMTKDFGMDNFOUJBN0JBODIwQzhEOEM2MDQ1Mzg2MzA0MTI2OTVGOEZFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTVl3fpWQn5AL8joZ0GfbSvA3M
INT9tsiPtJmczlIoqUd0j1Y8xwAg2WdvWsFzqjBk4aKxyCQudbrkyyAGfyn8TlVq
n07RxvNU5MH4hXh4ljuetvQevgKSFwwhFYbSEaVcfwhq0arAZJhkzJNzZdi4E5GT
3MolGrxlrLiVEmQUcANL2YKNVX97gEi9a1hM+QHdtVPCB8HlyGMyErx+t8/QrjjR
FB9OsCImfBNwaWyni3FOIX61X1Dq+973A3LdmXy8kWI1+A566j+mdUf241SfqzAt
ZpsTQtZdC/vLXlXzKT/f0gPSPIog8TYHizvCs2SlpTELCQw/z2KThB88Lg/zAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUHwPpunuoIMjYxgRThjBBJpX4/uIwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEyNjgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjw7y
MA0GCSqGSIb3DQEBCwUAA4IBAQCMkRtWNrQvXWkjNRDKVRnA5drryaYFQ08Sixjy
3K3RMdDSyJFF/jKmcdL+e9jQMO+mzBQGyA5Ix3ppz3mNGQRXoOfzjZ2MRsHWSy3s
ItHQo5uVJU/rtE+H5PuAudRIUTLY8FOPsXW5Cd7bhSdxoyysYJmT2vmngJpeRqPY
XmhSKO+r30FeUcdrcseEsf6ujiU+Co9bu6xkarVzG+wKEUVdTGyRg0U4q9B/ZIot
tG7+npcNIFLe1Xo3Pfsh3wDV4kC0BDmIONkKX9Mu5IDlAJCfmPDHthR0343dMSha
qj7HKvLgXMEmsYIb57Xp9XZUJTbpgR9AbUTahPCq2kbUZ3sL
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:15:24 2026 by rpki-client