Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212810.roa
File: AS212810.roa (raw, json)
Hash identifier: Qq8Ie2toE1DmsLjLK3pACBPX6lXWN6T9wzrNvt1o58E=
Subject key identifier: C6:B4:38:AC:7C:E7:AC:65:B0:D2:77:0B:A1:2B:F2:DF:05:6B:C9:25
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 572E200892325756F2E65B45DEA88C88D8650740
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212810.roa
Signing time: Tue 06 Oct 2026 10:55:27 +0000
ROA not before: Tue 06 Oct 2026 10:50:27 +0000
ROA not after: Tue 05 Oct 2027 10:55:27 +0000
asID: 212810
IP address blocks: 181.215.40.0/24 maxlen: 24
181.215.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:2e:20:08:92:32:57:56:f2:e6:5b:45:de:a8:8c:88:d8:65:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 6 10:50:27 2026 GMT
Not After : Oct 5 10:55:27 2027 GMT
Subject: CN=C6B438AC7CE7AC65B0D2770BA12BF2DF056BC925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:fe:d0:97:0b:36:c4:56:46:66:85:8d:b4:
3d:46:d2:7a:2c:4c:52:d4:50:84:6b:11:30:5a:32:
2c:1d:72:7f:9f:3d:26:c7:6b:b8:0a:d9:25:69:be:
8a:be:f7:e8:5b:8a:0f:be:db:a2:36:a2:aa:d1:05:
85:7b:4c:92:e8:5a:bb:a3:32:94:43:29:41:a6:6a:
d8:81:65:28:0c:35:a7:f8:b4:01:89:dc:81:6f:47:
83:f4:e0:94:b2:53:09:c6:4d:7d:35:25:85:11:f9:
33:ad:d9:1e:ed:a0:fa:41:c7:53:c2:f0:ec:28:fd:
48:10:bf:62:5f:f0:cb:44:80:a4:e5:a9:25:4e:0a:
d0:52:1c:01:99:67:02:09:9e:c4:73:dd:b8:78:4a:
b0:78:d6:21:5e:8a:fe:dd:23:04:ab:15:c6:a7:bc:
6a:f0:3b:ac:e9:97:b0:64:63:72:dd:fe:75:82:c5:
c7:01:53:cf:a6:39:95:71:0d:ef:33:da:3b:6e:6a:
c8:7d:76:11:36:4e:a0:b2:69:6d:2b:8b:6b:f5:7f:
e4:a3:42:b9:ef:db:57:71:de:97:bd:81:bf:9d:a9:
06:f1:af:45:ae:06:81:52:dd:00:a6:24:db:df:98:
e5:89:4b:02:d9:c2:d4:87:40:85:7c:cf:be:fa:5b:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B4:38:AC:7C:E7:AC:65:B0:D2:77:0B:A1:2B:F2:DF:05:6B:C9:25
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.40.0/24
181.215.115.0/24
Signature Algorithm: sha256WithRSAEncryption
12:84:46:e8:f5:f6:3c:c7:45:c1:45:73:34:ea:a9:28:a4:3d:
54:34:64:ed:27:40:50:18:9f:af:79:5d:5d:48:5a:84:1f:34:
f0:28:0d:5b:07:d9:ae:16:4c:4b:92:34:0a:96:3d:bf:77:c8:
03:36:8f:d9:12:b7:5d:a7:ab:5f:ed:f1:9b:59:96:28:8f:63:
45:6e:a0:87:98:12:54:ba:0d:1e:47:4d:8a:87:07:26:18:15:
6b:2b:13:f9:f0:c6:42:d9:ea:49:72:b5:98:ce:e3:5b:13:b6:
92:85:e6:59:92:23:2e:59:24:d1:c9:08:be:79:9b:ea:4c:8b:
d7:bc:3b:e0:b1:32:75:43:94:9d:8f:dc:88:b5:04:4b:f7:00:
0d:29:fa:b6:23:b0:4d:95:5f:36:cf:7f:12:40:e5:d9:cd:80:
ee:07:83:cf:c3:1b:74:ab:74:fd:93:fe:95:93:d3:aa:05:a5:
82:3b:27:0c:cd:b7:38:49:b9:dc:71:bb:f9:1a:31:1a:1a:86:
b2:9c:46:ed:2a:4f:c2:11:4a:94:7c:41:e0:7a:5a:4b:0c:bc:
34:bf:38:51:4d:e5:2b:76:00:21:2b:e9:cd:1b:f3:53:21:e3:
aa:d6:3a:38:13:29:3c:1b:ba:6c:04:e2:1f:96:6d:18:8b:48:
13:63:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:28:11 2026 by rpki-client