Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212815.roa
File: AS212815.roa (raw, json)
Hash identifier: hFcRfuS6OOaJjm4DJQ+4SRq0Ye2eNTJxyNSUe3GeC6U=
Subject key identifier: FF:B7:29:4E:D6:93:65:35:6C:63:55:77:A2:7F:0A:7E:C3:13:96:AA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 574ADBD453580C470E82C110B20E39626A91F3DA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212815.roa
Signing time: Thu 02 Jul 2026 11:31:08 +0000
ROA not before: Thu 02 Jul 2026 11:26:08 +0000
ROA not after: Thu 01 Jul 2027 11:31:08 +0000
asID: 212815
IP address blocks: 155.117.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:4a:db:d4:53:58:0c:47:0e:82:c1:10:b2:0e:39:62:6a:91:f3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 2 11:26:08 2026 GMT
Not After : Jul 1 11:31:08 2027 GMT
Subject: CN=FFB7294ED69365356C635577A27F0A7EC31396AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:68:92:c4:b8:9d:39:72:ce:01:5e:a0:9c:
d9:bf:79:22:5a:84:23:af:88:9e:f2:5d:24:9a:63:
63:99:68:a7:e9:54:13:1b:37:f2:d7:c0:03:01:73:
8d:2b:a3:0c:46:bc:e2:cc:85:3b:26:a1:e7:3d:f9:
81:de:69:cb:a7:58:37:0a:3a:f0:53:a9:32:19:fe:
77:a6:74:92:5c:a0:96:df:a0:17:c7:2e:16:e7:5e:
6f:b8:81:82:8a:b2:c1:a6:69:95:f8:3f:ca:ec:1f:
1e:1e:5c:c5:54:1b:49:fb:84:bf:f2:10:38:26:0f:
d4:b0:3b:90:e0:90:03:8e:86:51:49:68:27:19:2a:
bf:4f:f4:e0:96:6f:e9:e4:ba:36:06:39:b0:7f:0c:
f8:00:b0:c7:32:0f:a4:35:9f:9c:ea:fc:df:ce:f5:
03:9f:8b:04:fa:1e:55:da:0a:df:c0:b8:af:82:b7:
03:52:3f:c0:50:1d:58:6b:c8:da:69:80:f7:1a:c5:
01:32:a8:9c:9c:73:4c:85:be:50:a7:03:1e:0e:e9:
08:d0:4c:39:2c:1f:0a:db:82:66:b5:05:9c:ea:91:
63:eb:9d:8a:ce:07:84:f0:af:e6:07:39:65:bd:d8:
6c:0c:69:6f:19:af:21:c7:1d:0f:f7:a3:1e:7a:d1:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B7:29:4E:D6:93:65:35:6C:63:55:77:A2:7F:0A:7E:C3:13:96:AA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212815.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9e:9d:d1:df:b4:46:69:fe:5c:ad:3a:b9:5c:49:a2:34:e0:
de:7d:f1:99:13:5f:e6:12:82:a5:2d:07:a9:79:f0:7d:68:c1:
b0:2d:93:1a:d0:55:90:ce:1c:ab:72:67:00:fc:cf:68:25:50:
bd:f6:fd:5f:bd:46:13:4f:da:7a:ca:79:6d:d5:f0:51:71:b9:
54:d5:08:78:6d:fa:bb:86:99:da:8f:34:af:db:05:ef:0e:02:
2e:92:9d:47:dc:2b:f0:e9:76:b1:ce:3c:43:04:fd:90:6e:a8:
6c:f0:f4:64:f7:7e:92:71:4e:22:9a:ce:fe:2e:5d:b4:cd:8f:
7e:fd:33:31:18:2e:e7:c8:2d:0c:97:43:0c:38:98:46:ff:ed:
ca:ba:2f:bb:66:d9:3c:0c:27:95:3a:23:ef:ee:18:e4:d3:d2:
f2:81:37:18:41:ca:68:83:e2:aa:d1:46:82:6a:56:0b:ef:76:
6f:76:a8:0a:be:d8:b6:db:36:a3:d8:f7:85:58:e0:a6:1e:d6:
4c:1d:df:cb:89:8d:fb:31:44:18:65:94:3d:b1:e1:c3:e7:18:
ae:7f:89:d6:e1:3b:34:4a:f2:8f:07:60:4c:f0:8d:a6:fa:a1:
5e:1b:af:98:16:bc:99:b7:a8:a1:79:ee:79:0e:19:db:22:bf:
ee:71:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 20:20:36 2026 by rpki-client