
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: O8haXAEtFEMnE7lpzB4CY+aA79xOxTB8/n3Pwk/ujBQ=
Subject key identifier: 81:A2:2D:AF:61:FE:20:1F:18:79:4B:9B:9C:A6:72:61:BE:83:44:13
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 714B92C67E2CDE107D4AC75DE86E7D41BBA68C53
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212238.roa
Signing time: Tue 28 Jul 2026 06:47:00 +0000
ROA not before: Tue 28 Jul 2026 06:42:00 +0000
ROA not after: Tue 27 Jul 2027 06:47:00 +0000
asID: 212238
IP address blocks: 45.151.46.0/24 maxlen: 24
193.5.11.0/24 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:4b:92:c6:7e:2c:de:10:7d:4a:c7:5d:e8:6e:7d:41:bb:a6:8c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 28 06:42:00 2026 GMT
Not After : Jul 27 06:47:00 2027 GMT
Subject: CN=81A22DAF61FE201F18794B9B9CA67261BE834413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:df:76:1e:af:09:25:f2:de:18:e9:59:a7:
5d:e5:d9:7b:84:ff:06:c4:38:40:10:9e:34:de:1c:
fe:d2:e8:23:6f:11:11:16:1d:f2:cc:6c:cc:3e:9b:
25:82:73:32:20:53:1c:26:0a:da:88:b0:0f:76:de:
17:73:83:f4:2b:84:fd:51:a7:8e:43:7d:6f:1c:f4:
e9:5c:c2:2c:43:a7:d6:c9:5b:53:46:1d:ea:88:77:
87:a2:db:cf:6e:12:69:13:c6:82:d8:cb:1b:16:b3:
8b:36:d5:58:4c:ae:84:d7:e6:15:c4:af:b5:89:2a:
41:ab:79:1a:ea:b7:d5:2b:d6:8d:14:60:7e:0b:18:
a3:6d:a3:2b:55:88:a1:a6:fe:41:da:2f:ac:9c:dc:
69:e9:0b:92:cc:e2:ab:d6:b4:dc:f4:70:3b:54:b5:
4c:c7:c4:d5:b2:9e:b8:0a:7f:c0:ff:35:17:e3:9e:
4a:84:72:a2:eb:02:62:3e:8a:7a:79:b0:c4:51:e3:
0b:e8:bc:c9:4e:4f:ca:a1:1b:ac:95:52:24:4d:b7:
4d:11:7f:81:ae:ab:a8:08:07:01:aa:16:28:0b:83:
22:5b:4d:58:07:95:25:fa:d7:7f:85:2f:5e:e0:c6:
25:cb:f7:a8:9b:e0:c2:fa:27:42:cc:60:51:fc:76:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A2:2D:AF:61:FE:20:1F:18:79:4B:9B:9C:A6:72:61:BE:83:44:13
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.46.0/24
193.5.11.0/24
193.142.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:90:12:1b:44:10:62:40:9a:d5:fe:ab:57:6f:65:28:1a:87:
2c:78:54:4a:5f:90:f4:1e:70:71:37:4d:1d:5e:90:2a:dc:f2:
20:60:8c:2e:bb:31:ba:1b:2a:1a:03:28:b7:75:4c:93:b1:60:
22:c4:41:48:11:a8:b5:85:57:30:a5:4a:6f:ab:5d:d9:0b:4b:
f1:a9:40:94:f1:a0:a0:6a:23:03:d6:25:bd:a5:06:97:f9:0f:
7d:3e:02:91:30:9a:3a:8c:a1:a2:88:cc:b6:1d:11:6d:24:7b:
01:6c:c3:4d:4a:f1:e4:b5:aa:5f:70:57:75:77:1d:f4:ba:be:
94:b9:78:fa:65:24:76:36:74:cf:62:ed:4c:e5:e8:01:2a:35:
5d:83:68:e4:a4:0f:9a:fd:80:84:bf:d2:13:ca:df:f6:bb:06:
93:37:17:88:07:dc:bd:10:61:c6:48:3b:f3:5d:40:87:24:93:
88:0a:ac:59:b0:ca:48:4c:84:f6:d1:57:f5:a9:eb:bb:9b:d2:
53:d6:c1:ce:bd:49:04:61:f7:97:0f:35:22:01:41:4e:2c:b6:
2b:fd:fd:36:60:ff:82:cf:17:c9:89:59:97:48:02:0d:71:7c:
f2:1b:5c:b4:cd:b7:4d:78:4e:59:82:6f:18:39:80:9e:e2:86:
2c:c4:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:01:13 2026 by rpki-client