Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: AyctZRizI/t/5zZdrLbmlQq8LWupMEvzXGnwnjo00l8=
Subject key identifier: 61:53:41:6A:66:4D:48:75:58:67:BE:A2:41:D3:85:3F:0B:08:33:7A
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 5F5E637181E91B30D1D82FC48DE00C4683179467
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212238.roa
Signing time: Fri 19 Sep 2025 09:26:50 +0000
ROA not before: Fri 19 Sep 2025 09:21:50 +0000
ROA not after: Fri 18 Sep 2026 09:26:50 +0000
asID: 212238
IP address blocks: 193.187.108.0/24 maxlen: 24
193.187.109.0/24 maxlen: 24
193.187.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:5e:63:71:81:e9:1b:30:d1:d8:2f:c4:8d:e0:0c:46:83:17:94:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Sep 19 09:21:50 2025 GMT
Not After : Sep 18 09:26:50 2026 GMT
Subject: CN=6153416A664D48755867BEA241D3853F0B08337A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:05:f7:7c:0c:c3:af:a5:9c:de:d6:54:37:
b2:c9:e2:18:42:b9:a5:95:e4:d8:8c:d1:1e:90:d0:
df:15:ea:69:2e:af:c8:6b:31:a6:cd:51:f6:5d:0f:
54:d7:a6:0b:cf:d8:a7:ed:76:fb:e9:75:26:b6:4c:
26:2f:f5:68:47:24:df:ef:fe:3e:6a:b0:a1:7b:2c:
14:0e:7f:9b:1f:23:1d:b7:4e:4d:81:fc:65:de:19:
de:33:71:03:0a:0b:6f:41:e5:7e:fd:b8:ec:df:c9:
7e:32:93:81:81:cf:4f:1d:72:50:57:51:01:8f:39:
3b:ec:38:26:06:97:49:83:04:80:91:0e:b9:19:fb:
e1:93:9f:c5:90:0d:4c:4f:0e:ba:14:b4:5d:0b:dc:
1f:ad:7f:fa:0f:96:8e:f2:3a:a6:5c:c5:9f:62:17:
c1:01:d3:34:dc:a5:b7:b6:dd:cc:5a:65:2c:b8:24:
a1:46:a8:8d:42:f5:f7:62:d0:03:64:df:6f:a9:0d:
c8:92:37:2c:fc:43:0c:f8:43:85:f7:93:0e:62:b5:
e4:e1:a8:99:32:f8:b1:cf:f5:bf:15:e8:00:08:20:
91:8a:6d:64:42:b8:46:1b:2d:05:85:76:41:3a:84:
52:e8:fc:d2:97:6d:45:f1:17:eb:73:5a:72:9c:9f:
c8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:41:6A:66:4D:48:75:58:67:BE:A2:41:D3:85:3F:0B:08:33:7A
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.108.0/23
193.187.132.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:6d:38:3d:15:4d:f0:dd:3c:f3:62:cf:48:25:22:76:ad:d0:
f9:bf:95:8e:f2:e2:df:b1:bf:6c:dc:25:c4:23:b5:bc:39:1e:
2f:82:c9:41:f2:cc:76:e1:c7:b4:ed:de:eb:fe:4e:e0:99:0f:
9e:32:da:c9:bd:f1:9e:6c:16:68:6e:15:4a:a5:3d:2d:e1:14:
a9:21:02:1c:b2:e4:e0:83:96:43:9b:f6:ca:c1:fd:0e:2b:30:
b1:ab:56:1d:12:15:5c:7d:3a:8a:40:fb:c0:63:f7:7d:71:a6:
6d:3d:48:e1:6a:fd:3a:e0:57:30:3b:9a:66:f9:88:57:f2:cf:
0d:bd:74:fe:d3:c2:17:20:fe:e6:20:03:05:b1:c1:af:8a:59:
08:85:ff:5e:fd:5b:47:ba:a6:28:e5:49:bb:dc:2e:1d:fc:1b:
bc:49:26:70:6b:d8:48:83:59:94:3b:4b:0e:09:67:dc:49:9c:
c3:e9:47:c2:f9:37:f0:20:34:c0:48:9a:d6:b8:aa:a8:b1:5b:
da:1b:3c:7e:78:ca:5c:de:9d:c9:2f:2f:14:1a:10:69:8b:99:
83:57:c5:ec:a6:00:3e:63:e4:ee:bf:0a:02:f4:70:f6:11:9d:
6c:d0:84:b4:95:e6:0e:ef:94:92:df:d9:57:30:13:d2:62:51:
8a:29:51:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:20:39 2025 by rpki-client