Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212384.roa
File: AS212384.roa (raw, json)
Hash identifier: AhmDCaFX/iIWfCzwiVhEyqWPbTfMSA4dlFlvQKJYYaM=
Subject key identifier: E2:58:4C:E0:BC:CA:BA:22:2A:CF:FD:0D:3C:32:D5:23:0C:BD:53:2A
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 10ACCDA9A512025B8A1992901E22C33BA09CAF5F
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212384.roa
Signing time: Tue 11 Aug 2026 01:49:21 +0000
ROA not before: Tue 11 Aug 2026 01:44:21 +0000
ROA not after: Tue 10 Aug 2027 01:49:21 +0000
asID: 212384
IP address blocks: 45.142.238.0/23 maxlen: 24
45.146.83.0/24 maxlen: 24
45.154.107.0/24 maxlen: 24
152.89.248.0/24 maxlen: 24
176.105.224.0/24 maxlen: 24
176.105.225.0/24 maxlen: 24
193.29.96.0/24 maxlen: 24
194.5.149.0/24 maxlen: 24
194.113.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ac:cd:a9:a5:12:02:5b:8a:19:92:90:1e:22:c3:3b:a0:9c:af:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 11 01:44:21 2026 GMT
Not After : Aug 10 01:49:21 2027 GMT
Subject: CN=E2584CE0BCCABA222ACFFD0D3C32D5230CBD532A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:e0:46:be:47:f0:68:28:5a:99:08:9f:80:
07:af:62:2c:16:14:e0:7d:8d:9a:81:70:85:26:44:
19:09:27:48:4d:ed:06:93:8b:5f:4a:3e:e7:4c:e0:
4f:41:88:38:15:1a:5e:4f:39:f3:a9:ae:7b:fe:9d:
8d:f4:99:11:70:b5:a0:a9:7d:ff:18:0d:04:e8:a8:
8f:9b:47:c5:c0:2d:69:b0:11:8f:3c:03:03:d9:37:
8d:3f:55:1f:7d:7c:2f:18:81:e8:03:4f:d7:a1:ca:
73:79:28:e8:7f:a7:9f:14:e9:da:af:31:42:54:2a:
6f:e0:94:d4:36:41:06:69:46:54:16:16:81:6f:6d:
d6:3e:7f:84:b5:b2:65:ec:ac:49:06:4c:ee:1a:4e:
2f:cd:14:5e:2e:b1:58:a2:f5:80:28:a4:2c:66:4b:
87:90:6f:bd:55:d9:4b:60:22:3b:cf:50:30:4b:89:
c5:cc:30:9a:9c:f8:69:6f:51:d0:47:c8:a2:54:07:
69:0d:41:24:4c:44:84:88:cb:e8:8e:b6:01:32:2c:
5b:23:32:44:3c:ef:10:76:03:3f:59:ae:8e:ac:5a:
dd:0d:86:10:b8:c9:4e:ff:aa:24:cd:2b:0d:ea:70:
12:c6:98:2d:27:d0:1d:38:bd:48:ec:52:ec:1e:34:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:58:4C:E0:BC:CA:BA:22:2A:CF:FD:0D:3C:32:D5:23:0C:BD:53:2A
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
45.146.83.0/24
45.154.107.0/24
152.89.248.0/24
176.105.224.0/23
193.29.96.0/24
194.5.149.0/24
194.113.227.0/24
Signature Algorithm: sha256WithRSAEncryption
07:dd:70:7a:3f:c0:41:31:47:81:9f:7f:35:c2:47:bf:6a:2e:
2e:de:bc:01:88:41:cb:49:95:87:e1:70:cb:70:71:26:2e:67:
ad:bf:ca:c4:72:ea:5a:19:85:ee:1d:65:2b:4d:c3:d2:42:57:
bb:ae:43:32:15:0a:03:fe:2c:18:c3:bd:9c:9a:39:23:ae:5f:
b7:61:e3:4d:eb:32:67:ea:75:26:94:9d:47:1a:bd:c0:21:cd:
0c:e5:f2:9a:7b:70:c0:ba:d1:d0:1c:68:1c:cc:47:a8:a5:84:
bd:fd:8d:74:84:da:53:67:9a:c2:f3:c8:25:92:f3:38:ed:08:
db:38:98:c0:07:2a:21:6a:eb:9b:fe:34:b2:b3:f4:e6:17:7d:
d7:a0:0d:d9:90:0f:d1:5f:22:7a:3d:bf:15:27:b3:b3:63:45:
1a:d4:c8:e4:7c:89:88:c2:5a:43:06:79:f0:cd:e6:a8:87:15:
7b:a6:8a:5d:7a:aa:e7:63:da:fe:d4:9b:41:1b:c3:ba:63:4a:
f4:53:a5:4c:cf:00:76:fd:08:08:7f:58:4a:3d:3b:42:97:6a:
b6:ce:f9:d7:8c:91:cd:3a:3e:d0:e2:14:59:d9:f8:41:c6:39:
2c:ee:b9:ec:ed:69:fa:1d:5a:16:ee:5c:78:8f:bd:09:c8:2d:
77:82:88:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:21:33 2026 by rpki-client