Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212336.roa
File: AS212336.roa (raw, json)
Hash identifier: FTV2HBAFkd4V3V2b9fINf+k7OoGRykoYVDrzszHIKRo=
Subject key identifier: 47:CF:63:29:C7:BA:33:33:4C:B5:D3:BA:D0:60:E8:AF:F5:16:44:CD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 44638A4E6FE160E78752FE1E3819E8BC30BA73DC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212336.roa
Signing time: Fri 13 Mar 2026 00:05:50 +0000
ROA not before: Fri 13 Mar 2026 00:00:50 +0000
ROA not after: Fri 12 Mar 2027 00:05:50 +0000
asID: 212336
IP address blocks: 141.11.138.0/24 maxlen: 24
141.11.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 19:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:63:8a:4e:6f:e1:60:e7:87:52:fe:1e:38:19:e8:bc:30:ba:73:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 13 00:00:50 2026 GMT
Not After : Mar 12 00:05:50 2027 GMT
Subject: CN=47CF6329C7BA33334CB5D3BAD060E8AFF51644CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:ea:49:e3:65:62:6a:be:b5:7d:f1:45:9d:
1c:f3:6a:8d:f6:61:e4:84:29:86:23:2c:fc:ec:c2:
03:96:5e:44:9c:2a:fb:b2:b7:2e:b8:ed:e9:7b:0e:
c1:59:7f:7c:10:41:47:91:1c:8a:62:5e:f3:84:ec:
bf:b0:de:aa:1f:7b:d4:23:5f:65:6a:17:32:97:82:
f6:2f:fd:2b:15:29:d8:9d:4b:6c:39:88:5e:97:94:
3e:85:e5:f9:99:8a:3b:1f:46:61:fb:36:48:f1:d6:
5a:35:0e:3e:1b:88:b4:01:d9:93:2a:ec:e9:68:d8:
05:a2:4d:2c:9e:f2:16:24:44:b2:b0:47:9c:b2:e5:
72:c3:b3:69:93:27:ab:c7:af:be:8e:67:63:27:46:
6e:32:36:ba:78:5a:83:ae:c1:f1:7f:7a:4b:ec:99:
8b:7e:a8:9e:65:3e:c4:09:89:e8:f6:fc:53:bc:30:
db:f1:66:ed:22:6d:8c:d5:99:9f:e4:97:86:22:37:
9c:6e:44:9f:ca:78:e9:46:68:f0:24:a2:f4:8b:0d:
c6:0f:13:b2:23:5c:b6:8f:0d:f0:c4:ee:c3:ca:35:
50:e8:84:8f:e5:e6:7d:df:0c:f1:90:4a:70:e8:f3:
f7:67:e6:63:30:e7:c3:d6:9e:a0:fc:a2:a9:c9:1a:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CF:63:29:C7:BA:33:33:4C:B5:D3:BA:D0:60:E8:AF:F5:16:44:CD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:30:07:75:ca:fe:84:9b:a3:75:83:a7:0b:21:50:75:4e:c4:
6c:ed:31:79:88:ba:f3:ce:a9:ae:67:5b:1f:93:9b:c1:11:ab:
5a:65:bf:32:a3:33:d4:9c:95:47:58:76:b5:ae:f8:fd:9e:c7:
9d:b7:ee:26:2f:c5:29:fe:cc:3a:fa:f9:f2:59:81:13:12:25:
c7:ea:7a:3b:bb:74:62:48:1a:ce:a1:5c:6c:78:68:66:61:e6:
50:b8:09:be:1a:41:38:d3:74:57:98:62:c5:41:86:3e:24:27:
79:9a:75:b8:96:18:92:59:98:25:4c:03:61:2d:60:b6:bf:f9:
93:75:a8:53:0d:58:85:4c:27:5c:f9:68:02:17:5a:1a:b1:ad:
2c:be:a4:83:a3:1d:26:0b:53:4b:b4:3f:22:e6:33:1a:a5:12:
9d:fa:6c:40:3d:a9:75:9a:9d:3c:6b:34:df:76:d4:d9:0f:34:
0d:07:31:cd:4e:c0:8e:16:6d:67:f6:48:f1:29:34:40:ab:bb:
f4:a9:31:c4:7e:6d:71:d5:47:da:50:b1:64:20:ed:d0:d7:92:
f2:47:99:c6:97:63:cd:b0:bd:b1:7f:5a:dd:1f:99:b5:9b:9d:
68:0f:2f:8f:57:d4:fe:22:23:b0:12:6b:11:11:96:06:ba:e5:
4a:56:99:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 04:40:28 2026 by rpki-client