Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212890.roa
File: AS212890.roa (raw, json)
Hash identifier: hBqhPyzjd0AgJYx7OcHd2IOdMUqoHlZyv2TWBj08cj4=
Subject key identifier: 94:32:B5:64:21:9D:40:F3:CB:C5:E1:41:AF:1F:32:6E:73:42:81:FB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1DAB56C1F9D0BACA6E7D39F9EE6D4E8991F9D1E3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212890.roa
Signing time: Tue 19 May 2026 09:49:54 +0000
ROA not before: Tue 19 May 2026 09:44:54 +0000
ROA not after: Tue 18 May 2027 09:49:54 +0000
asID: 212890
IP address blocks: 95.135.222.0/24 maxlen: 24
178.92.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ab:56:c1:f9:d0:ba:ca:6e:7d:39:f9:ee:6d:4e:89:91:f9:d1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 19 09:44:54 2026 GMT
Not After : May 18 09:49:54 2027 GMT
Subject: CN=9432B564219D40F3CBC5E141AF1F326E734281FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:8e:bd:56:59:69:4d:d4:f7:30:5a:ad:ef:
67:b8:a5:6b:97:80:8d:33:5e:a8:ed:67:ed:b8:a5:
54:5f:b5:ea:b1:85:96:b5:45:68:c5:f0:6c:22:b2:
2c:c0:60:36:31:85:17:0a:a4:f9:4a:87:2f:cc:9c:
de:bd:02:ed:48:4d:38:47:50:a5:03:a5:0b:03:8a:
ec:22:c4:4b:2c:d2:81:54:ce:8c:70:b2:58:63:d8:
d3:8b:b9:19:f0:58:47:8d:27:64:8e:d9:e8:d8:2d:
97:e9:7d:c0:d0:b4:7a:01:e2:e5:95:49:c1:db:19:
01:7c:1f:44:d1:c3:d8:c8:e7:46:2a:8a:a4:80:f3:
ae:be:2c:26:24:fc:7e:23:da:16:28:9d:f2:aa:c2:
f7:0d:97:af:e4:dc:fe:81:ad:06:c2:3f:62:5d:7e:
fc:af:f0:ae:de:0f:27:2b:93:60:f0:4f:40:a0:7d:
fc:f3:f1:f5:75:c5:23:df:42:f8:4b:01:a5:b8:8b:
cd:5f:d3:b5:51:d9:34:49:15:be:d2:a6:16:7a:f5:
04:c1:d5:98:21:44:53:10:c9:b1:1a:26:1b:b8:79:
d6:b8:1e:b0:16:61:59:78:03:ca:44:48:ee:cb:d6:
76:da:0a:85:29:d3:8c:26:48:6f:1f:46:02:e4:4f:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:32:B5:64:21:9D:40:F3:CB:C5:E1:41:AF:1F:32:6E:73:42:81:FB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.222.0/24
178.92.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:af:93:62:fb:43:7f:c1:51:60:ad:c9:22:c1:0b:5d:22:d6:
8c:1c:fd:45:17:a2:27:12:d2:bc:90:74:27:fa:6f:5c:3d:4f:
4f:f8:f5:12:6a:51:9b:2b:50:30:56:8f:52:f0:94:e8:34:aa:
64:7a:85:e7:1f:99:d2:fd:83:e2:6b:d5:61:79:fd:95:77:64:
74:68:f1:97:b2:d8:77:4f:18:df:cc:92:61:98:59:2a:1b:17:
dc:3b:aa:8a:39:76:0c:58:21:08:67:b7:16:d1:86:7d:bd:96:
44:63:7b:80:56:c3:bb:7b:9c:4d:eb:7c:84:62:4e:e4:f4:a7:
3e:9a:2c:b0:7c:98:f1:c4:cb:13:5c:bd:5d:d0:93:79:d3:26:
6b:b8:3c:46:b6:36:54:18:52:15:ef:6b:42:8c:33:36:bc:7e:
99:8a:0a:db:ad:db:f8:a7:d6:d1:cd:af:90:2e:ec:f1:14:93:
5d:78:b5:82:2b:f1:2d:ee:9c:8a:82:15:41:f2:9f:82:97:f2:
56:68:a0:45:bf:6c:da:eb:5e:64:53:f5:21:33:ba:28:87:b2:
c7:93:61:2d:b3:64:08:b7:8a:3c:f1:3a:73:8e:56:6a:9d:be:
55:b7:26:c6:40:3c:3d:b4:1c:f0:07:24:24:57:58:9b:7d:a6:
e0:b7:9d:73
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUHatWwfnQuspufTn57m1OiZH50eMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA1MTkwOTQ0NTRaFw0yNzA1MTgwOTQ5NTRaMDMxMTAvBgNV
BAMTKDk0MzJCNTY0MjE5RDQwRjNDQkM1RTE0MUFGMUYzMjZFNzM0MjgxRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIA469VllpTdT3MFqt72e4pWuX
gI0zXqjtZ+24pVRfteqxhZa1RWjF8GwisizAYDYxhRcKpPlKhy/MnN69Au1ITThH
UKUDpQsDiuwixEss0oFUzoxwslhj2NOLuRnwWEeNJ2SO2ejYLZfpfcDQtHoB4uWV
ScHbGQF8H0TRw9jI50YqiqSA866+LCYk/H4j2hYonfKqwvcNl6/k3P6BrQbCP2Jd
fvyv8K7eDycrk2DwT0Cgffzz8fV1xSPfQvhLAaW4i81f07VR2TRJFb7SphZ69QTB
1ZghRFMQybEaJhu4eda4HrAWYVl4A8pESO7L1nbaCoUp04wmSG8fRgLkT113AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUlDK1ZCGdQPPLxeFBrx8ybnNCgfswHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEyODkwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX4fe
AwQAslwHMA0GCSqGSIb3DQEBCwUAA4IBAQCjr5Ni+0N/wVFgrckiwQtdItaMHP1F
F6InEtK8kHQn+m9cPU9P+PUSalGbK1AwVo9S8JToNKpkeoXnH5nS/YPia9Vhef2V
d2R0aPGXsth3TxjfzJJhmFkqGxfcO6qKOXYMWCEIZ7cW0YZ9vZZEY3uAVsO7e5xN
63yEYk7k9Kc+miywfJjxxMsTXL1d0JN50yZruDxGtjZUGFIV72tCjDM2vH6Zigrb
rdv4p9bRza+QLuzxFJNdeLWCK/Et7pyKghVB8p+Cl/JWaKBFv2za615kU/UhM7oo
h7LHk2Ets2QIt4o88TpzjlZqnb5VtybGQDw9tBzwByQkV1ibfabgt51z
-----END CERTIFICATE-----
Generated at Tue May 19 16:27:30 2026 by rpki-client