Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: R6hyqvjKp/l77m2UmLOx4wxq/eKyW3mrqKT40xNUhYw=
Subject key identifier: DA:E1:50:E3:DE:A6:58:9D:6A:7A:58:5A:87:CA:39:E2:7B:1F:94:42
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 49262F86BA0FB82E562DBB183AF9A9B49D3518CE
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212238.roa
Signing time: Fri 19 Jun 2026 09:19:49 +0000
ROA not before: Fri 19 Jun 2026 09:14:49 +0000
ROA not after: Fri 18 Jun 2027 09:19:49 +0000
asID: 212238
IP address blocks: 193.187.132.0/24 maxlen: 24
212.115.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 07:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:26:2f:86:ba:0f:b8:2e:56:2d:bb:18:3a:f9:a9:b4:9d:35:18:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jun 19 09:14:49 2026 GMT
Not After : Jun 18 09:19:49 2027 GMT
Subject: CN=DAE150E3DEA6589D6A7A585A87CA39E27B1F9442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:b9:77:77:e6:1f:4c:d3:57:9d:29:37:94:
56:46:32:de:31:5f:f5:8b:bc:09:84:41:99:44:02:
e4:ca:e8:aa:dd:56:95:5e:f6:fa:5a:12:4c:e8:15:
96:ba:e4:df:eb:07:48:2c:ea:6d:d2:db:db:2d:ee:
0a:fd:12:57:ef:6e:c0:e1:fd:bd:ac:86:c6:93:61:
a6:eb:5f:d4:30:cd:57:10:fa:42:9b:e8:33:85:93:
67:c9:b1:9f:ed:3f:42:a0:49:70:47:4c:1c:fc:1d:
85:eb:13:96:46:87:cb:ef:a7:c4:85:86:ef:10:88:
55:48:9c:b3:72:08:79:f4:3c:51:64:34:5c:47:45:
3a:94:bf:53:40:ab:70:dc:2c:19:e4:4c:06:1e:66:
a7:65:32:2b:56:9f:0f:7f:4c:81:86:38:33:8d:c2:
a9:c9:64:6f:f9:e5:06:fa:a4:31:3f:95:93:c9:c4:
ff:00:d0:2c:27:89:40:1e:5c:3d:79:89:77:17:12:
93:a2:2d:95:4a:92:80:db:d8:c4:56:fc:bd:0b:76:
6a:d9:d5:a8:ba:52:d4:67:98:a2:91:ec:19:33:93:
e8:67:fb:49:b4:5c:17:38:e4:fa:0d:a5:7b:72:91:
73:f5:00:a4:30:de:12:4c:d5:fa:48:7c:bf:8b:22:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E1:50:E3:DE:A6:58:9D:6A:7A:58:5A:87:CA:39:E2:7B:1F:94:42
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.132.0/24
212.115.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4e:bc:bd:fb:e3:02:fe:b3:ac:fa:26:3d:4f:6d:9e:45:7f:
60:04:4d:26:1f:49:b7:43:77:ca:c3:bd:ef:68:38:d7:72:c8:
55:b3:f7:99:03:6f:5d:95:1c:5b:6f:1e:40:7c:a0:db:ff:ce:
3f:47:09:32:4f:9a:1b:2e:14:05:01:c0:40:5f:7e:51:83:02:
db:f3:59:79:ec:78:2a:b4:41:03:6e:88:aa:fd:48:41:4b:38:
79:08:37:77:7a:6b:67:27:09:d5:82:9e:b7:68:87:db:9b:0f:
7f:7a:8b:18:45:e5:90:13:5c:c6:8b:27:6c:3e:c9:e9:da:ba:
7d:83:11:d9:be:91:56:75:ce:ea:0f:0b:a1:14:cb:50:80:45:
46:62:c8:98:3a:f3:bc:4a:34:d3:75:d2:14:4e:5f:38:5c:57:
5f:58:35:bb:ad:8c:c7:b5:06:80:d2:7f:2b:3b:04:81:b4:98:
2b:91:3c:6a:bb:ca:d7:8b:3d:42:20:b0:ba:70:90:ac:cc:a4:
f2:48:05:0c:59:6a:bf:0c:9e:8e:9b:ce:d3:3e:b0:d1:36:34:
1a:e3:66:13:1e:3f:42:bb:4f:50:ef:d2:ea:06:8f:ce:8a:93:
d3:00:22:b8:15:6e:d0:c2:0f:4d:8f:30:62:a4:11:25:56:f9:
69:46:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 20:35:28 2026 by rpki-client