Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
File: AS212683.roa (raw, json)
Hash identifier: NrArqwT4hlOd0AhabKFuoVj6z+OiDjlnK9Qvf6b/VgM=
Subject key identifier: 32:B0:98:40:36:9E:3B:B1:5A:38:BE:41:6D:F6:24:2F:66:A3:85:59
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 15C000310BD544DB592CB7EADBF0685A131E7E20
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
Signing time: Thu 16 Jul 2026 06:54:46 +0000
ROA not before: Thu 16 Jul 2026 06:49:46 +0000
ROA not after: Thu 15 Jul 2027 06:54:46 +0000
asID: 212683
IP address blocks: 51.146.19.0/24 maxlen: 24
51.194.132.0/23 maxlen: 24
51.241.64.0/24 maxlen: 24
51.241.76.0/24 maxlen: 24
51.241.192.0/23 maxlen: 24
51.241.195.0/24 maxlen: 24
51.241.196.0/23 maxlen: 23
51.241.232.0/23 maxlen: 23
51.241.253.0/24 maxlen: 24
188.220.50.0/23 maxlen: 23
188.220.87.0/24 maxlen: 24
188.221.17.0/24 maxlen: 24
188.221.52.0/24 maxlen: 24
188.221.106.0/24 maxlen: 24
188.221.111.0/24 maxlen: 24
188.221.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 13:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c0:00:31:0b:d5:44:db:59:2c:b7:ea:db:f0:68:5a:13:1e:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 16 06:49:46 2026 GMT
Not After : Jul 15 06:54:46 2027 GMT
Subject: CN=32B09840369E3BB15A38BE416DF6242F66A38559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:d3:cb:10:c6:ab:2c:e2:e7:fd:68:08:d0:
80:3f:2f:b7:5f:47:f8:0c:d5:1b:44:e3:fb:c4:90:
0a:26:c1:cc:89:9a:f8:64:1d:c4:55:1b:bc:cc:48:
c3:9e:23:8f:ac:d7:b0:a2:80:c7:9f:c4:c6:85:d5:
b3:ea:d8:1c:fd:1f:85:1d:3b:d3:bf:da:1c:a8:cc:
6b:d6:2c:e9:e8:12:6e:22:b6:23:6a:c7:c9:cd:85:
f0:bf:7b:57:5d:eb:fe:51:65:36:46:b0:33:92:4a:
47:8e:4e:e5:19:f1:2f:bd:2d:b5:ae:b2:ea:43:0e:
7a:3c:58:e7:a5:24:30:ce:66:8e:a0:19:91:10:e6:
c7:a6:ee:4f:78:e4:9e:23:9d:d8:2c:e3:71:5e:86:
71:d9:cd:b6:5c:b1:c7:18:9e:d1:33:6d:e4:82:7d:
e7:c9:df:07:1f:02:45:91:2b:f4:91:f7:8b:a0:d4:
b9:4e:24:87:9d:c3:84:eb:ea:9d:b5:26:4c:de:69:
84:11:21:53:06:a7:6a:5f:18:a1:2f:5f:af:4a:22:
ba:7f:3b:d8:d3:26:18:fe:84:68:12:a1:90:19:8a:
54:b1:5e:6f:a3:6b:fc:c1:ad:3f:e4:22:70:c8:59:
69:21:ab:e8:ff:8c:c3:44:3e:6e:c0:d9:e4:c7:b9:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B0:98:40:36:9E:3B:B1:5A:38:BE:41:6D:F6:24:2F:66:A3:85:59
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.19.0/24
51.194.132.0/23
51.241.64.0/24
51.241.76.0/24
51.241.192.0/23
51.241.195.0-51.241.197.255
51.241.232.0/23
51.241.253.0/24
188.220.50.0/23
188.220.87.0/24
188.221.17.0/24
188.221.52.0/24
188.221.106.0/24
188.221.111.0/24
188.221.186.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0c:af:31:6e:a4:0c:1c:66:90:13:54:51:5d:76:d7:da:26:
7f:72:f5:7c:5d:19:54:19:e1:d5:6a:ff:e5:fc:06:17:8a:50:
3a:15:6a:67:05:1a:96:19:fc:e7:cf:07:8a:65:a4:b0:cf:fb:
ea:fa:03:d9:46:dc:ff:7c:ce:88:20:e6:45:ea:00:73:ae:a7:
66:49:86:73:b2:88:86:3b:da:41:19:2a:e2:13:3a:ad:c5:ec:
b8:1a:85:a1:63:d8:df:3d:17:13:d0:4a:e5:48:e2:9b:3d:60:
2d:80:f7:4c:4b:4b:c6:db:63:73:86:c7:e6:97:11:b4:cf:69:
92:fb:11:ff:b9:6f:14:04:72:cc:64:66:f0:d7:03:f8:1a:7b:
da:e2:05:6d:71:54:ae:52:20:aa:8d:ca:bc:b0:2c:12:33:ce:
35:7e:05:4c:be:55:a5:3f:f9:26:2e:db:41:08:cd:ee:b9:6a:
da:04:33:f4:cd:69:d5:ba:42:06:2d:ce:ed:c4:de:8a:c7:97:
96:ca:8e:cf:4c:04:5a:17:a3:d7:fd:ed:9b:e8:6c:c4:a1:7c:
91:63:15:16:6c:da:d5:d3:71:c5:f2:ff:68:04:cf:e2:e5:fd:
6d:e5:ea:4e:4e:89:78:59:5a:6e:e0:15:1e:0b:bf:b5:3f:b7:
3e:75:4d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:15:23 2026 by rpki-client