Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212598.roa
File: AS212598.roa (raw, json)
Hash identifier: PmCtr2L+nws6Oc1jYSCIiILL1T9wuVCto2JNqOuwwbE=
Subject key identifier: 61:5D:08:3C:A8:70:47:59:2D:BB:5F:5D:EC:39:D5:0E:6C:7C:A6:38
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 39068587CEB56A0A561A1296E50D452FED05D661
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212598.roa
Signing time: Thu 28 Aug 2025 10:18:12 +0000
ROA not before: Thu 28 Aug 2025 10:13:12 +0000
ROA not after: Thu 27 Aug 2026 10:18:12 +0000
asID: 212598
IP address blocks: 193.17.6.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:06:85:87:ce:b5:6a:0a:56:1a:12:96:e5:0d:45:2f:ed:05:d6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Aug 28 10:13:12 2025 GMT
Not After : Aug 27 10:18:12 2026 GMT
Subject: CN=615D083CA87047592DBB5F5DEC39D50E6C7CA638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:47:bd:90:6f:63:0a:35:f3:f3:e1:f8:73:
b4:75:8c:46:4d:38:2e:6b:7e:41:2c:5a:d4:77:4a:
e0:45:8f:21:e3:1c:00:c4:12:99:74:69:5c:f7:be:
99:82:07:88:be:0b:9d:19:a8:1f:dc:d1:b3:73:de:
60:f9:d7:5c:e8:a7:9f:3f:c5:36:93:4c:59:ce:49:
ea:92:67:65:48:1d:c1:71:39:3a:2f:6d:e0:fb:56:
9b:f0:d3:a7:5d:1f:58:e7:19:30:c7:a2:88:be:1b:
2c:6f:22:1b:6b:f2:bb:47:d4:03:be:03:54:b5:73:
8b:08:7b:f4:bf:8e:6f:6f:0e:c4:09:b1:50:6f:be:
40:54:fd:20:7a:48:8e:6c:d3:13:a7:0d:f8:58:ea:
be:7d:12:8e:86:ea:23:07:0c:de:11:09:b8:c1:5f:
8e:77:51:8a:84:a4:0b:37:9a:a7:01:c7:f6:5e:20:
15:11:b3:bb:b5:7b:54:fa:99:1a:5b:52:9f:3c:e3:
38:13:96:be:00:60:de:5a:0d:0c:9e:dc:f3:0f:6d:
14:e1:6f:60:7e:d6:9e:67:19:f6:bd:b6:0d:6d:ee:
76:98:dc:0b:18:23:13:4f:55:77:2a:4d:8d:7e:05:
03:33:a1:21:f3:78:ce:8a:e3:5b:ee:90:a5:aa:f7:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:08:3C:A8:70:47:59:2D:BB:5F:5D:EC:39:D5:0E:6C:7C:A6:38
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212598.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.6.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6f:ff:26:df:b0:75:a7:a8:a2:1f:32:91:af:8f:fd:e0:b2:
d4:ab:22:b4:02:ad:cc:d4:e0:96:ac:4d:22:3a:ff:2a:e2:58:
c7:3f:40:04:a3:1d:9e:ca:a6:cd:e7:64:f5:a9:4c:f4:22:64:
18:9d:06:f1:c0:33:5d:02:50:e8:bd:27:af:84:6a:f0:c6:a6:
9b:e3:1a:19:27:d6:00:f9:44:03:ac:1a:60:33:0f:ea:e1:34:
51:f2:39:25:8f:bb:40:62:b7:9c:38:79:67:76:27:49:f8:5f:
16:4b:d5:20:40:c9:77:90:b3:2a:5d:b5:8c:fa:86:d1:36:24:
3c:2d:38:8e:b0:6a:b6:a0:1b:f9:18:f3:c5:e5:ca:8f:03:35:
43:78:35:54:79:c1:48:e8:48:a5:3c:ef:5f:55:ff:7e:63:21:
ce:52:51:dc:09:a5:35:1b:c7:bf:93:55:5d:70:b2:52:9e:6f:
58:f3:19:7e:30:b8:2d:10:3a:28:9e:01:64:e6:4b:22:81:fa:
27:3f:ee:7a:c7:ec:24:e1:6f:04:5b:1b:43:2d:9c:6e:0d:0a:
95:b2:c3:02:02:23:66:44:f8:98:ba:c9:bf:d3:e3:b3:13:5c:
fd:1a:35:97:23:1b:ae:92:cc:7e:98:99:46:29:10:b2:63:84:
6c:db:3a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:59:08 2025 by rpki-client