Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212337.roa
File: AS212337.roa (raw, json)
Hash identifier: gEXAwjBTNOLnJofOO9dX4niF5KdExNkcYpHWlk9NrBs=
Subject key identifier: EE:69:A1:5E:0C:D1:9F:69:B7:63:BE:DE:CF:12:65:8A:49:37:66:EA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4A6758B9BE78BF676AF2C31AF169184961AD2CDD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212337.roa
Signing time: Wed 10 Jun 2026 09:22:52 +0000
ROA not before: Wed 10 Jun 2026 09:17:52 +0000
ROA not after: Wed 09 Jun 2027 09:22:52 +0000
asID: 212337
IP address blocks: 155.117.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:67:58:b9:be:78:bf:67:6a:f2:c3:1a:f1:69:18:49:61:ad:2c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 10 09:17:52 2026 GMT
Not After : Jun 9 09:22:52 2027 GMT
Subject: CN=EE69A15E0CD19F69B763BEDECF12658A493766EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:c4:19:e3:6f:04:4c:38:6c:80:a6:ca:22:
5b:a4:e1:ef:d9:cf:83:c0:e9:e8:44:47:79:df:5f:
b8:04:2f:91:f5:be:54:7b:3a:86:10:f1:4f:69:91:
ad:b7:cc:72:c9:e9:90:76:5d:38:cb:0f:1f:87:fe:
2c:9f:68:a2:fc:0c:e5:0f:89:8a:bc:80:7f:06:fd:
d1:d1:83:c7:db:23:5d:38:02:fe:52:76:07:7e:7a:
31:cb:bc:d9:d2:e8:b1:9d:0c:7d:43:8e:94:42:03:
c3:27:3e:85:99:ea:95:dc:58:eb:20:20:9f:43:67:
51:99:bd:75:2d:1b:a5:98:24:c2:d7:66:65:ff:ac:
84:9c:23:0a:7d:10:5c:71:ee:c3:d4:f4:93:2c:b0:
b8:18:17:1b:05:b9:3b:97:99:1e:5e:f0:a6:34:c9:
23:49:41:7d:02:51:8a:3b:2a:78:93:d8:76:f3:bf:
6b:57:04:16:a0:d5:65:b8:a6:3f:35:11:f7:de:a6:
5c:b3:65:10:f5:bf:5d:01:5a:56:2c:ee:c3:43:2a:
d3:72:be:02:0f:49:b9:b2:6e:46:06:db:ba:03:b2:
ef:ac:59:c7:5a:ba:4d:2c:99:78:ac:5f:1b:7f:8b:
92:81:a0:60:bd:03:8d:61:40:1e:a1:58:b6:64:f4:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:A1:5E:0C:D1:9F:69:B7:63:BE:DE:CF:12:65:8A:49:37:66:EA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.36.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f5:d2:39:2a:4e:12:d1:9e:4b:be:d5:b1:d3:f3:e1:73:ad:
d2:55:6c:31:36:15:2e:75:30:19:65:a7:05:05:4a:01:49:06:
69:5b:e6:68:4c:59:63:39:c4:f1:d6:3d:17:ac:a3:dd:31:ca:
e9:29:66:33:82:72:8d:8f:52:de:a6:90:33:74:c2:ea:1a:eb:
c7:8a:09:aa:df:29:fc:c1:09:d2:5b:a8:b0:50:51:20:e9:d1:
a7:85:ff:4e:29:53:03:11:e1:fc:ec:80:23:84:b5:d9:b7:8a:
7f:a2:2a:be:94:e2:8e:11:d4:19:63:ad:44:c6:a0:0c:04:38:
7a:e3:55:4f:97:a3:62:37:e4:c8:02:0f:c7:55:64:ca:ee:b4:
1c:3a:d8:93:fd:3d:43:79:d6:70:57:b2:3b:38:b1:51:20:5c:
40:26:4e:8f:9e:a5:d6:20:9d:2d:b5:fc:9d:3e:1b:e1:79:f0:
52:34:59:36:61:7e:c7:94:a4:f0:68:fd:52:09:19:b0:54:98:
52:44:ad:f0:ae:53:ee:52:8f:23:c1:08:9a:65:f3:82:12:42:
70:a7:4c:7a:1d:f1:aa:e7:77:c2:db:c4:29:d8:7f:51:ae:bf:
53:f4:66:be:f2:86:6f:4e:12:fe:8d:af:74:2e:cc:4a:31:f5:
2a:55:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:41:54 2026 by rpki-client