Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212810.roa
File: AS212810.roa (raw, json)
Hash identifier: E8g9ZpDY1+D+9VGzoKmbBTbx8YM8aFOrfSVr5RRkirg=
Subject key identifier: B2:ED:18:52:47:D3:8C:BF:F7:BA:28:4C:60:11:15:F5:67:87:35:51
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 40FACA8EE992F6708795140E513DE613E266BD17
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212810.roa
Signing time: Wed 01 Jul 2026 11:17:28 +0000
ROA not before: Wed 01 Jul 2026 11:12:28 +0000
ROA not after: Wed 30 Jun 2027 11:17:28 +0000
asID: 212810
IP address blocks: 181.215.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:fa:ca:8e:e9:92:f6:70:87:95:14:0e:51:3d:e6:13:e2:66:bd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 1 11:12:28 2026 GMT
Not After : Jun 30 11:17:28 2027 GMT
Subject: CN=B2ED185247D38CBFF7BA284C601115F567873551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:de:4a:69:ba:83:53:7a:c5:4b:df:98:11:
d5:27:1e:66:9c:40:d2:5d:4d:29:1e:e6:d4:3a:f5:
b7:8a:72:18:00:f0:bc:59:95:0a:23:33:08:3f:ec:
5d:4a:52:63:9e:30:c2:46:b1:af:95:d5:bd:2c:64:
5e:c2:91:19:8f:94:15:2a:51:74:cb:03:38:22:9f:
63:27:22:a8:f4:bc:22:30:60:c0:fe:4d:a9:3f:52:
d4:47:10:13:1e:86:fb:10:87:3c:59:6d:fa:9f:3a:
0a:4e:6d:80:96:bb:1f:e1:3b:80:c6:b5:26:db:e7:
29:e7:e3:a2:31:72:7e:1f:4f:95:e3:34:52:0a:db:
cf:0a:b0:fb:50:eb:fb:0f:99:39:06:a6:93:74:e9:
8d:91:e9:37:4b:07:f1:3a:e7:9d:ae:01:3d:1e:f8:
c3:d2:d5:99:37:61:88:09:f1:0b:f6:b9:9f:0b:2e:
6a:17:72:ba:f1:36:b5:34:84:90:bd:e1:b4:08:f1:
2b:be:c4:fe:f2:2e:f1:82:06:5d:c0:94:f4:ed:aa:
10:2a:65:db:13:16:fc:5d:19:ee:57:76:ec:c1:df:
43:64:4f:81:95:49:db:b6:56:f2:e7:6d:49:ed:17:
5f:fd:09:47:8f:ca:99:08:11:66:20:4d:85:b5:02:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:18:52:47:D3:8C:BF:F7:BA:28:4C:60:11:15:F5:67:87:35:51
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7d:5c:51:e7:bf:c4:3c:b3:0a:83:59:af:94:64:2d:f1:96:
f5:03:65:77:c1:f6:c5:6f:3c:98:bf:d3:55:f8:05:91:cc:b9:
f2:49:3f:e5:0a:4e:11:dd:91:d4:f2:de:c2:f1:e2:95:f3:02:
ed:09:08:2d:bb:1e:61:ee:c3:a6:b9:1f:0e:ce:8f:bc:e7:a7:
b6:b3:eb:cf:b2:34:ab:b0:d3:a4:14:94:59:1e:75:4d:7c:93:
28:79:95:73:df:79:be:7b:6a:28:fa:68:9e:d3:53:77:95:8b:
c7:d9:af:f8:49:73:b6:ea:78:82:60:41:a6:7b:7c:85:94:ee:
1b:d1:58:82:bf:e3:e4:be:d5:b0:b5:32:6d:d6:3a:1e:ab:eb:
23:4b:45:6b:d3:9d:d2:65:a0:f2:29:3a:1c:2f:ba:f6:60:31:
63:29:ab:a1:13:43:c6:4f:bf:4c:f3:05:e5:ef:68:75:ab:f8:
0d:58:81:00:e1:12:f1:7a:4d:4f:e3:8d:ce:19:ee:3f:d5:49:
6b:5c:87:fc:c3:99:4f:2b:bd:77:81:01:ae:30:a2:88:bb:f1:
17:a3:4f:1e:57:96:56:e2:75:01:d2:b9:06:b3:25:93:a4:a1:
b7:67:fd:24:9a:6e:cf:76:31:9a:37:81:ae:c1:24:d7:aa:a8:
ab:16:97:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:58 2026 by rpki-client