Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212980.roa
File: AS212980.roa (raw, json)
Hash identifier: DRHWYAad1JJVRK1nrGJBK+VfvHGSW1a37MeMHrhLaCc=
Subject key identifier: 46:32:13:FF:6F:10:23:CC:1C:C0:C3:19:C2:6D:2C:53:53:0A:48:21
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 734CF3B15D5E977D6D9FE2EA4BA3AB2A70EAEEDF
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212980.roa
Signing time: Fri 05 Jun 2026 09:47:29 +0000
ROA not before: Fri 05 Jun 2026 09:42:29 +0000
ROA not after: Fri 04 Jun 2027 09:47:29 +0000
asID: 212980
IP address blocks: 45.135.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:4c:f3:b1:5d:5e:97:7d:6d:9f:e2:ea:4b:a3:ab:2a:70:ea:ee:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 5 09:42:29 2026 GMT
Not After : Jun 4 09:47:29 2027 GMT
Subject: CN=463213FF6F1023CC1CC0C319C26D2C53530A4821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e6:3a:44:ce:8e:33:af:4e:15:60:13:72:c5:
7f:bb:52:44:01:05:c2:5c:c4:89:15:33:3f:77:83:
20:28:03:dc:ff:98:81:65:ec:e4:66:ec:fc:e1:9e:
53:9b:46:6a:d7:ac:4d:3a:de:e6:49:bb:b5:99:dd:
7c:aa:b9:b3:df:82:5f:aa:ce:f6:51:3e:f4:06:99:
c0:d3:da:b5:76:73:6e:09:08:f2:05:2a:7b:59:2a:
16:79:ba:66:aa:56:34:46:09:ac:dd:21:f7:d5:eb:
5a:6b:82:fe:00:d0:f6:15:1b:c6:2d:13:b8:a9:cf:
68:99:bf:1a:ce:31:03:ed:d7:f8:4a:dd:55:ad:2c:
38:75:a9:ca:81:38:50:d4:af:df:40:eb:21:ae:45:
6e:7a:b9:ad:0f:85:54:31:d7:d0:c6:c0:00:e3:93:
85:d8:94:de:49:9a:d2:e6:a1:07:53:2c:03:e0:f2:
77:bb:56:d9:27:b0:75:e3:af:8a:79:53:55:11:5f:
fe:72:6c:34:0f:c3:6a:63:cc:62:33:03:90:3c:10:
20:73:94:82:0c:26:f9:4f:7a:e8:4a:ba:ab:b9:70:
73:0f:f6:eb:10:e6:4b:42:2c:34:40:b5:ef:51:c5:
30:f5:4a:ba:45:af:42:9c:7a:01:aa:33:16:d1:af:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:32:13:FF:6F:10:23:CC:1C:C0:C3:19:C2:6D:2C:53:53:0A:48:21
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212980.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:84:9f:e5:0f:bc:a4:33:40:0e:4d:43:06:7c:b5:ab:9d:29:
b3:38:d1:57:da:68:51:6a:41:36:91:c5:75:7c:37:f1:d3:36:
43:37:4b:59:2f:8b:1c:e0:7c:2d:86:10:b2:0c:e9:be:b5:2c:
dc:6b:8d:04:86:b1:16:c3:f2:a1:42:80:5d:fa:32:bf:f1:e7:
3c:c5:f5:f4:8a:49:19:8b:9a:05:43:52:2f:7d:2c:21:33:82:
c6:ba:03:a3:fc:a8:46:91:6e:a0:45:7c:79:89:0d:99:bc:dc:
60:e8:0f:40:65:fd:5b:1a:3b:31:bb:dc:5c:7c:62:ee:12:c3:
76:6c:5f:91:4b:c5:1b:ff:02:1f:99:63:03:14:81:88:3f:46:
00:aa:df:1d:c7:f8:54:b1:98:fd:01:db:4d:f3:d0:27:2a:c3:
91:ca:e4:9f:4e:a4:b6:1d:f9:7f:36:24:25:0d:91:bc:67:3a:
2b:d3:ed:da:60:31:38:a0:3b:d7:95:42:a6:f8:40:e4:3e:b4:
e1:b5:1f:4e:ea:3f:e5:50:3f:03:93:4f:60:a9:86:ee:90:be:
d7:43:04:f7:80:87:d8:00:0b:16:ea:c4:37:20:6b:52:6d:4f:
08:2d:a1:de:ca:19:12:09:15:25:7c:df:10:08:3e:22:bd:7b:
3e:5b:1d:02
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUc0zzsV1el31tn+LqS6OrKnDq7t8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA2MDUwOTQyMjlaFw0yNzA2MDQwOTQ3MjlaMDMxMTAvBgNV
BAMTKDQ2MzIxM0ZGNkYxMDIzQ0MxQ0MwQzMxOUMyNkQyQzUzNTMwQTQ4MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu5jpEzo4zr04VYBNyxX+7UkQB
BcJcxIkVMz93gyAoA9z/mIFl7ORm7PzhnlObRmrXrE063uZJu7WZ3XyqubPfgl+q
zvZRPvQGmcDT2rV2c24JCPIFKntZKhZ5umaqVjRGCazdIffV61prgv4A0PYVG8Yt
E7ipz2iZvxrOMQPt1/hK3VWtLDh1qcqBOFDUr99A6yGuRW56ua0PhVQx19DGwADj
k4XYlN5JmtLmoQdTLAPg8ne7VtknsHXjr4p5U1URX/5ybDQPw2pjzGIzA5A8ECBz
lIIMJvlPeuhKuqu5cHMP9usQ5ktCLDRAte9RxTD1SrpFr0KcegGqMxbRrx81AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQURjIT/28QI8wcwMMZwm0sU1MKSCEwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjEyOTgwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYf6
MA0GCSqGSIb3DQEBCwUAA4IBAQAchJ/lD7ykM0AOTUMGfLWrnSmzONFX2mhRakE2
kcV1fDfx0zZDN0tZL4sc4HwthhCyDOm+tSzca40EhrEWw/KhQoBd+jK/8ec8xfX0
ikkZi5oFQ1IvfSwhM4LGugOj/KhGkW6gRXx5iQ2ZvNxg6A9AZf1bGjsxu9xcfGLu
EsN2bF+RS8Ub/wIfmWMDFIGIP0YAqt8dx/hUsZj9AdtN89AnKsORyuSfTqS2Hfl/
NiQlDZG8Zzor0+3aYDE4oDvXlUKm+EDkPrThtR9O6j/lUD8Dk09gqYbukL7XQwT3
gIfYAAsW6sQ3IGtSbU8ILaHeyhkSCRUlfN8QCD4ivXs+Wx0C
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:23 2026 by rpki-client