Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212396.roa
File: AS212396.roa (raw, json)
Hash identifier: Q9UoqGyDnQOUmoRbZhWWMdRhZzZ4t2MAjKIxsWvMYZo=
Subject key identifier: 23:B7:36:79:42:B9:D3:20:14:85:2E:32:41:6B:39:D3:6A:F1:CC:D7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0E1CE890634A5DFE03CCF213539F10FA6085B423
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212396.roa
Signing time: Wed 04 Nov 2026 09:49:39 +0000
ROA not before: Wed 04 Nov 2026 09:44:39 +0000
ROA not after: Wed 03 Nov 2027 09:49:39 +0000
asID: 212396
IP address blocks: 109.106.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1c:e8:90:63:4a:5d:fe:03:cc:f2:13:53:9f:10:fa:60:85:b4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:39 2026 GMT
Not After : Nov 3 09:49:39 2027 GMT
Subject: CN=23B7367942B9D32014852E32416B39D36AF1CCD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:50:91:07:e6:44:1e:03:fa:b6:17:92:12:
a0:e7:65:3a:b0:88:9a:bb:c8:61:f0:01:04:d1:b8:
41:56:3f:4e:6c:b7:de:3f:f8:fa:2a:ff:aa:bc:16:
8f:81:f1:c9:0c:fd:e7:83:b1:df:c3:8c:00:dd:b2:
03:6f:c4:2d:d6:cc:f5:4c:ca:e9:73:a0:09:3e:f0:
94:9f:f7:80:33:05:c4:2a:9f:35:a2:71:8a:cc:60:
f8:89:11:51:2d:a0:5b:74:7e:be:9c:4f:06:1e:68:
5d:6b:9f:65:02:1f:3f:55:ee:c0:d1:71:5c:41:5e:
97:f9:51:c1:93:fd:ed:a8:54:b7:3b:1a:b3:5c:4d:
19:56:e0:f4:b1:b4:26:d2:50:3f:f9:b9:21:53:55:
46:c5:93:a4:39:83:3b:5f:e1:20:a2:3a:78:5d:c4:
5c:ef:11:d0:62:e7:64:39:72:f6:93:04:3c:47:a0:
a1:8e:2a:9a:89:52:c4:c9:3b:22:00:b8:93:3e:e5:
36:21:60:0f:06:ab:bb:fc:df:ac:8e:a7:8a:ba:8b:
0e:81:eb:e2:42:c3:64:51:e9:80:2e:25:39:b0:95:
39:8f:a7:66:14:33:2f:60:cf:82:18:db:ef:40:c3:
9a:d4:c9:06:73:fc:86:42:69:5d:3c:e5:6d:43:b4:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B7:36:79:42:B9:D3:20:14:85:2E:32:41:6B:39:D3:6A:F1:CC:D7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212396.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.1.0/24
Signature Algorithm: sha256WithRSAEncryption
80:14:b7:ac:fc:10:41:76:ad:65:d8:81:b1:ab:32:0f:8f:34:
ef:7c:02:c6:b9:b9:2d:ca:00:1c:4d:62:cf:da:94:56:2c:0a:
7e:9d:0e:e8:b3:9f:af:b7:73:dd:60:5f:86:fe:98:4f:01:4f:
02:e5:60:3d:85:4e:8a:ed:a5:b9:96:aa:c8:77:68:23:c0:d0:
ad:c6:24:bf:9c:a1:2e:8a:99:2b:fb:5e:34:de:7a:e1:0c:1b:
72:53:01:a5:9f:dc:d7:46:7e:e6:1a:5d:ce:71:1a:6a:0a:8d:
53:43:a6:75:3c:5a:e0:ba:06:e7:a6:06:85:9e:21:e5:d5:58:
20:5c:99:ee:c1:79:87:41:36:9d:09:a9:32:9d:19:29:e5:e6:
8b:68:5d:8c:db:a8:37:be:45:56:fb:7a:e9:92:f2:7e:40:7b:
86:a3:f5:68:0a:ae:8d:8b:68:ee:30:e7:6a:10:ce:02:90:9c:
f2:e1:ac:ed:07:1c:38:97:05:63:43:b0:16:f1:d7:de:ce:cd:
8f:93:e6:51:a9:91:73:13:2f:ea:62:b1:af:a6:a1:82:96:3b:
ad:a1:10:2c:d6:ff:dc:cc:76:0e:48:01:d8:4f:47:ec:02:02:
5a:ac:68:e9:04:1b:f4:17:0c:3d:4f:bd:ab:ad:50:27:cf:74:
69:2e:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:55:14 2026 by rpki-client