Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212935.roa
File: AS212935.roa (raw, json)
Hash identifier: 40ELhLfKQWGKiR0V8rlt0QIG1y+sG9Bo4IV92pwM4mg=
Subject key identifier: C7:32:11:A3:B1:F1:16:24:1E:7E:46:8A:5D:3E:50:7A:1A:71:A3:10
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 62436FE3E2AECA233DF2276C62E8457EED590A42
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212935.roa
Signing time: Sat 03 Oct 2026 16:03:09 +0000
ROA not before: Sat 03 Oct 2026 15:58:09 +0000
ROA not after: Sat 02 Oct 2027 16:03:09 +0000
asID: 212935
IP address blocks: 141.11.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 03:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:43:6f:e3:e2:ae:ca:23:3d:f2:27:6c:62:e8:45:7e:ed:59:0a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 3 15:58:09 2026 GMT
Not After : Oct 2 16:03:09 2027 GMT
Subject: CN=C73211A3B1F116241E7E468A5D3E507A1A71A310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:6d:71:c0:67:42:ea:a3:e0:a6:d5:56:12:
04:51:c0:2c:81:08:03:7e:fa:a5:cf:82:58:2a:23:
e8:e4:9e:00:a4:9f:43:ac:1b:fc:eb:67:ad:54:7f:
dc:b0:6b:d8:37:7f:06:b2:cd:cb:94:ba:45:11:4f:
1a:c9:fd:a1:50:30:8d:33:cc:6a:da:ec:46:da:82:
58:9d:82:0c:b9:c8:64:bd:3a:cc:75:73:1e:94:1d:
48:81:18:ab:67:44:80:58:23:b4:e2:ca:8f:98:01:
5e:0c:a3:7d:b9:29:8f:f8:79:27:56:ff:20:83:1d:
74:c5:eb:97:c9:4f:c2:45:8a:14:d9:e3:12:7d:5c:
a2:36:8b:b2:63:10:32:9a:16:8e:fa:c9:35:55:e2:
ea:77:ab:ce:a3:bd:2e:98:db:64:b9:11:68:b0:ae:
8c:25:8f:06:f2:68:91:ba:17:29:82:34:f2:76:11:
81:a6:12:a6:36:72:9c:82:30:44:e7:28:29:85:0c:
a4:57:f9:9b:44:75:5d:aa:10:02:06:a7:35:94:2d:
22:96:a4:74:fa:41:a2:8a:3d:5c:8c:7c:f7:6f:63:
67:a1:df:27:e1:68:d9:7e:24:a9:1c:59:b7:05:c8:
bf:75:01:b6:00:42:15:6b:4a:8f:a2:81:aa:30:c5:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:32:11:A3:B1:F1:16:24:1E:7E:46:8A:5D:3E:50:7A:1A:71:A3:10
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:37:3c:21:df:04:db:f8:bd:16:7a:a7:6c:6c:ee:fa:76:29:
f9:0f:49:ee:57:f8:e2:e2:b4:5d:8a:84:b6:5c:30:61:0c:7a:
06:b2:9c:f6:c6:4b:43:05:8d:b0:c8:12:6c:36:c9:70:df:a1:
dd:90:6f:de:17:07:81:93:0b:ae:a9:43:00:a0:8d:5a:d7:7a:
18:7c:4c:e6:ac:6f:a8:9e:6b:d0:78:3a:f8:69:d2:b7:1c:60:
cc:cd:aa:68:6a:38:62:0f:24:51:6c:34:f8:2e:99:17:f8:b4:
5b:7b:b0:93:e9:7d:7c:d4:dc:80:43:4e:a2:e7:27:4b:02:55:
13:84:bc:1e:39:fd:1b:84:de:d0:77:e4:1e:1e:d0:09:0a:f0:
86:02:8d:71:c6:bb:1b:79:bf:6e:40:39:dd:38:18:d9:c3:81:
4f:3b:06:38:d0:89:12:ba:28:cb:e3:2c:66:59:43:fe:f1:ef:
48:e4:26:5d:41:be:8a:cc:76:7c:f7:85:9d:ff:f4:09:eb:22:
f1:2a:b4:dd:28:4e:ce:1b:2f:4e:b9:86:16:e2:7f:f0:c4:ea:
6c:bb:d2:ee:e3:19:a7:73:cf:a8:9a:43:c7:e0:44:f7:2c:e7:
7b:e4:84:e1:10:8f:31:19:ef:17:db:b0:c6:8b:5a:fc:de:88:
2a:70:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 14:46:21 2026 by rpki-client