Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212669.roa
File: AS212669.roa (raw, json)
Hash identifier: 0fFKhdnuiecGiv0P0AmcdXTGuUH3vhWY5wFb9KGKB7g=
Subject key identifier: 25:FF:F6:3B:1C:F5:0C:D4:70:12:F7:53:EE:3C:89:C4:66:D0:C4:46
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 255A5080C0F6CB4BA6E640DD3AAF6042C053E67E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212669.roa
Signing time: Mon 05 Oct 2026 10:11:06 +0000
ROA not before: Mon 05 Oct 2026 10:06:06 +0000
ROA not after: Mon 04 Oct 2027 10:11:06 +0000
asID: 212669
IP address blocks: 45.142.238.0/23 maxlen: 24
45.158.170.0/24 maxlen: 24
152.89.249.0/24 maxlen: 24
193.29.96.0/24 maxlen: 24
193.151.182.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
195.206.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5a:50:80:c0:f6:cb:4b:a6:e6:40:dd:3a:af:60:42:c0:53:e6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 5 10:06:06 2026 GMT
Not After : Oct 4 10:11:06 2027 GMT
Subject: CN=25FFF63B1CF50CD47012F753EE3C89C466D0C446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:00:d1:44:0d:5f:80:e9:83:b1:2d:76:8e:
a6:40:c8:2a:60:b9:00:06:07:46:00:e2:df:94:93:
bc:6b:f4:e1:90:83:2d:7a:31:3a:2d:41:2c:fd:9d:
ad:93:72:08:73:fc:bf:ad:a5:c2:d7:14:fe:a3:77:
e2:7b:02:1c:2b:54:5f:d6:60:84:d8:89:ba:cf:d1:
e9:4f:a6:68:38:14:c6:70:ae:d4:74:e0:31:99:15:
f3:b4:89:8b:c6:1a:11:0f:51:c1:e5:2a:67:9e:e1:
87:cc:ee:e9:f7:c6:14:f4:a4:53:23:68:d9:86:c1:
e2:d8:a2:90:50:c3:13:3e:81:a8:11:fd:86:30:c8:
67:66:74:ff:92:ca:31:1f:12:9c:14:3d:30:66:e2:
b9:ba:98:df:ae:8c:2f:f2:15:1f:b1:01:35:19:cf:
9f:e9:83:73:a6:c9:cf:86:ef:62:fd:bd:2d:a9:da:
7c:a5:ac:a4:1b:19:19:16:f6:d6:91:40:01:6c:f9:
15:f6:16:b0:09:89:b7:78:4a:bf:75:f5:aa:44:36:
f2:ef:64:22:98:95:eb:f1:ae:51:f2:da:88:6f:5c:
c3:93:bf:88:63:d3:88:ab:c3:ff:ef:79:14:09:eb:
8f:6b:e6:48:b7:8f:12:02:08:32:cb:cf:1d:28:03:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FF:F6:3B:1C:F5:0C:D4:70:12:F7:53:EE:3C:89:C4:66:D0:C4:46
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
45.158.170.0/24
152.89.249.0/24
193.29.96.0/24
193.151.182.0/24
194.113.222.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:93:28:e5:db:fe:6c:24:83:71:8c:b6:82:e0:3b:22:56:a4:
ac:d2:6a:bd:97:a0:83:c6:6f:2b:05:d6:2a:1d:b1:cc:2c:45:
8c:e3:46:f8:23:7e:0f:15:dd:9b:c0:55:8f:c8:4f:0d:d3:e2:
16:bd:39:3c:db:14:4c:d4:a7:90:5b:66:48:39:8b:e1:b9:b6:
4a:e2:15:ef:29:dc:94:c4:cd:43:ff:47:19:66:c3:f4:ac:06:
be:2a:87:7f:c1:4a:4b:fa:6b:0c:e0:d3:7d:74:58:dd:5f:9b:
06:5b:14:66:d2:9b:93:26:b8:00:12:15:f4:de:a2:d6:8a:7f:
13:14:c1:5f:f6:ad:ed:e7:15:c8:34:87:f4:17:b0:ac:5b:81:
44:a7:41:60:51:2a:a6:2d:37:17:b3:bd:75:fe:0a:69:4c:39:
30:4c:e2:b7:bc:ca:c6:76:12:e0:81:fc:4e:3f:7c:ff:81:ff:
18:de:3b:1a:c1:c5:37:25:fd:87:28:f5:b1:73:c6:99:22:59:
83:2c:e0:37:50:a0:cd:6d:d6:0c:70:14:ac:d3:2e:fd:9a:ef:
9d:09:96:d3:42:8b:4c:7e:08:02:fe:a7:5a:77:a6:6e:8f:12:
ee:8e:91:0a:29:69:37:ff:dd:11:92:c8:7d:13:7c:a7:af:f2:
5c:9b:bf:a0
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUJVpQgMD2y0um5kDdOq9gQsBT5n4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjEwMDUxMDA2MDZaFw0yNzEwMDQxMDExMDZaMDMxMTAvBgNV
BAMTKDI1RkZGNjNCMUNGNTBDRDQ3MDEyRjc1M0VFM0M4OUM0NjZEMEM0NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lwDRRA1fgOmDsS12jqZAyCpg
uQAGB0YA4t+Uk7xr9OGQgy16MTotQSz9na2Tcghz/L+tpcLXFP6jd+J7AhwrVF/W
YITYibrP0elPpmg4FMZwrtR04DGZFfO0iYvGGhEPUcHlKmee4YfM7un3xhT0pFMj
aNmGweLYopBQwxM+gagR/YYwyGdmdP+SyjEfEpwUPTBm4rm6mN+ujC/yFR+xATUZ
z5/pg3Omyc+G72L9vS2p2nylrKQbGRkW9taRQAFs+RX2FrAJibd4Sr919apENvLv
ZCKYlevxrlHy2ohvXMOTv4hj04irw//veRQJ649r5ki3jxICCDLLzx0oA45LAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUJf/2Oxz1DNRwEvdT7jyJxGbQxEYwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjEyNjY5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBLY7u
AwQALZ6qAwQAmFn5AwQAwR1gAwQAwZe2AwQAwnHeAwQAw87mMA0GCSqGSIb3DQEB
CwUAA4IBAQBKkyjl2/5sJINxjLaC4DsiVqSs0mq9l6CDxm8rBdYqHbHMLEWM40b4
I34PFd2bwFWPyE8N0+IWvTk82xRM1KeQW2ZIOYvhubZK4hXvKdyUxM1D/0cZZsP0
rAa+Kod/wUpL+msM4NN9dFjdX5sGWxRm0puTJrgAEhX03qLWin8TFMFf9q3t5xXI
NIf0F7CsW4FEp0FgUSqmLTcXs711/gppTDkwTOK3vMrGdhLggfxOP3z/gf8Y3jsa
wcU3Jf2HKPWxc8aZIlmDLOA3UKDNbdYMcBSs0y79mu+dCZbTQotMfggC/qdad6Zu
jxLujpEKKWk3/90Rksh9E3ynr/Jcm7+g
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:41:58 2026 by rpki-client