Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212133.roa
File: AS212133.roa (raw, json)
Hash identifier: jed6LeDw4rH/xfPcltIFxV5pCEb1xFqFw8tz1YAVIvA=
Subject key identifier: 83:5D:87:86:FF:90:B1:6E:A0:CF:98:D7:12:57:58:E6:26:65:CC:B5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5BA21C7D9B5E010E51CDCB03B5807BBDA6BE9457
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212133.roa
Signing time: Mon 10 Aug 2026 21:21:52 +0000
ROA not before: Mon 10 Aug 2026 21:16:52 +0000
ROA not after: Mon 09 Aug 2027 21:21:52 +0000
asID: 212133
IP address blocks: 178.94.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a2:1c:7d:9b:5e:01:0e:51:cd:cb:03:b5:80:7b:bd:a6:be:94:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 10 21:16:52 2026 GMT
Not After : Aug 9 21:21:52 2027 GMT
Subject: CN=835D8786FF90B16EA0CF98D7125758E62665CCB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:ec:8e:2f:7e:dc:2d:2c:c6:01:53:ce:03:
20:ec:64:7c:bf:76:e5:35:27:7b:b8:e8:3c:bc:f5:
91:87:fe:96:7c:c9:3c:c7:9c:0e:11:e5:26:6e:c0:
be:8b:8c:12:57:7e:42:45:d3:37:bd:d5:0a:c4:71:
35:98:b4:8f:a9:9a:94:6f:77:d6:75:41:7f:88:f1:
85:39:b0:3d:28:1d:d3:36:e4:31:b0:5a:79:2c:f7:
4b:da:eb:7b:34:c7:c3:4e:c1:60:5d:a0:dc:b8:96:
cf:08:66:df:54:f4:77:4a:a2:3c:85:7b:1a:f5:c6:
d8:9a:3a:fa:f0:80:a1:ce:89:82:59:14:a2:17:6e:
45:22:da:de:c4:60:00:b1:8f:d1:1c:a5:14:e3:14:
88:b5:cb:2c:2a:c8:6b:60:dd:7c:74:1c:e2:31:e6:
2d:92:18:b9:bd:93:8c:7f:1a:9d:bb:1b:5c:33:5d:
e5:6b:25:fa:ef:be:07:61:e7:40:20:2d:ba:95:45:
2d:7f:a3:c3:e3:a1:30:50:5b:15:8d:7b:cd:fc:c6:
3a:95:34:04:d1:a3:4b:4f:3e:9a:79:c8:07:d5:5d:
7f:82:12:93:17:e4:ff:b2:0e:62:3d:a5:20:9f:9e:
3c:61:bc:a1:a7:77:cc:50:ad:ba:4b:22:1b:db:c7:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5D:87:86:FF:90:B1:6E:A0:CF:98:D7:12:57:58:E6:26:65:CC:B5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.236.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a9:1b:ec:67:e1:20:22:3e:97:02:00:47:5a:bf:a6:fc:4c:
56:54:cd:fc:f4:fd:66:a4:1d:57:68:b4:21:af:47:24:85:da:
23:42:2a:ed:d4:8b:f2:4b:99:01:5a:b0:3c:a3:7d:a6:f6:46:
a0:cf:9b:01:ee:64:e8:3a:a3:fd:fe:3c:c2:4b:de:11:75:d9:
94:d9:38:e9:8f:88:85:09:9f:ce:33:3f:38:1b:a4:5d:be:f4:
98:8b:d8:47:c0:05:16:61:44:82:10:28:de:50:17:fb:a0:2f:
60:df:62:13:80:58:77:28:08:e8:15:bd:33:d2:13:3f:d3:41:
90:45:2e:75:97:33:3a:22:51:87:f8:8b:08:07:aa:76:db:5f:
85:cd:b1:6e:98:78:40:12:e7:56:ad:98:e4:a5:d5:80:c6:89:
be:68:dc:aa:b1:3e:05:c6:61:86:61:46:a5:06:ba:a5:aa:64:
8b:48:79:d7:f2:51:48:f0:c3:9b:5d:64:65:8b:8f:6e:eb:3e:
8b:a3:c6:c7:2e:04:83:21:cb:d9:14:f1:43:92:1f:f7:5b:4e:
a9:39:ee:a5:ea:b4:d4:cd:2f:a7:20:02:d4:46:5e:a4:cd:e8:
25:5f:34:bc:33:08:e2:55:00:19:81:69:73:fe:6c:6f:72:1f:
1e:57:8c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 07:50:04 2026 by rpki-client