Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212477.roa
File: AS212477.roa (raw, json)
Hash identifier: ciMAkeTK7o0r8rW5eVip5mAwlvJK9Ey/gzTbL8yPtlY=
Subject key identifier: D5:56:61:ED:84:64:0F:9E:2D:85:A7:6D:C2:20:C2:BF:AA:89:2D:F6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 098C763FD4B08A5108C06A6D913E59D7D6B76DDB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212477.roa
Signing time: Mon 07 Sep 2026 14:08:15 +0000
ROA not before: Mon 07 Sep 2026 14:03:15 +0000
ROA not after: Mon 06 Sep 2027 14:08:15 +0000
asID: 212477
IP address blocks: 188.221.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:8c:76:3f:d4:b0:8a:51:08:c0:6a:6d:91:3e:59:d7:d6:b7:6d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 7 14:03:15 2026 GMT
Not After : Sep 6 14:08:15 2027 GMT
Subject: CN=D55661ED84640F9E2D85A76DC220C2BFAA892DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:a5:76:59:24:0f:ae:aa:72:fe:5f:45:f3:
d0:7e:df:cb:e2:fc:48:c2:6a:20:23:c9:ca:51:f6:
12:d6:70:83:de:ab:2c:83:f5:cc:5a:5c:da:ab:be:
eb:81:9b:45:57:49:f2:bf:b4:fe:85:dc:77:3a:75:
c8:c3:9e:26:97:07:af:b8:bc:c1:a6:09:a5:8f:ac:
f1:f5:39:56:bb:72:fa:e4:42:b3:a8:8e:34:58:f8:
22:6a:b0:c5:90:c6:08:82:2c:b7:99:21:d2:b7:03:
8a:39:a5:c5:c6:f1:dd:3e:5b:fe:11:47:05:df:6e:
92:eb:1a:9e:4b:13:03:3e:3a:b4:65:e9:38:61:e4:
48:79:f6:7a:6c:62:0c:f6:2f:84:f6:4e:d2:05:8c:
91:23:ca:cd:70:73:2b:c5:e4:c0:34:72:19:22:a3:
6a:5b:a3:ee:84:01:a5:08:59:88:41:de:72:c1:55:
e3:3e:d0:bb:92:ea:db:61:e4:77:b6:02:8e:b4:5d:
3b:ae:96:95:a0:06:1a:88:d2:20:59:53:ea:3e:51:
d3:b6:4a:61:db:62:13:bf:41:80:3d:d2:da:aa:2f:
6c:64:71:00:de:d6:5b:0e:c9:6a:bf:14:73:4f:9e:
7b:c5:db:6c:fd:9e:4f:cb:e9:05:4a:b1:3c:2a:a7:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:56:61:ED:84:64:0F:9E:2D:85:A7:6D:C2:20:C2:BF:AA:89:2D:F6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212477.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.170.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:bb:e0:ef:3e:fe:70:f5:d5:be:58:e1:90:64:e3:73:b3:b1:
89:76:4e:0e:e7:da:c0:e1:27:ff:96:3a:08:53:9c:a7:d6:53:
0d:e4:ee:13:9d:5a:b4:27:77:5a:19:8c:5d:f7:8d:a4:75:93:
a7:a0:ef:b0:32:40:67:3d:de:75:06:cd:28:74:7a:ca:1f:74:
ed:28:0b:0c:f0:7d:23:bd:cc:99:cf:6a:bb:b6:76:91:01:f3:
0d:34:ab:3c:11:08:94:86:f8:64:3e:e7:cb:5d:27:eb:5b:34:
a7:25:36:af:6b:43:1b:fb:e1:71:9d:80:3e:e1:c6:20:d1:d0:
5a:86:e3:37:65:42:5a:4e:09:0e:2e:28:96:5f:95:30:c8:b8:
32:c0:88:ef:62:78:93:fd:4a:c4:ad:50:33:45:5b:82:56:fb:
92:86:4d:33:2e:34:25:03:45:76:df:74:de:4b:d1:d5:07:8a:
d3:44:64:21:60:c4:9a:82:98:d9:d1:a3:cb:69:6e:1d:6b:3f:
8c:2e:07:1b:d4:41:ba:fd:cb:65:92:3d:ca:57:d0:e5:aa:73:
44:72:ec:2a:7d:63:4b:83:1c:11:ee:9d:df:bb:ad:0e:86:70:
19:ce:81:75:26:4e:6f:60:8d:41:39:98:f9:9f:56:40:c8:6f:
75:12:87:c1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUCYx2P9SwilEIwGptkT5Z19a3bdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MDcxNDAzMTVaFw0yNzA5MDYxNDA4MTVaMDMxMTAvBgNV
BAMTKEQ1NTY2MUVEODQ2NDBGOUUyRDg1QTc2REMyMjBDMkJGQUE4OTJERjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MaV2WSQPrqpy/l9F89B+38vi
/EjCaiAjycpR9hLWcIPeqyyD9cxaXNqrvuuBm0VXSfK/tP6F3Hc6dcjDniaXB6+4
vMGmCaWPrPH1OVa7cvrkQrOojjRY+CJqsMWQxgiCLLeZIdK3A4o5pcXG8d0+W/4R
RwXfbpLrGp5LEwM+OrRl6Thh5Eh59npsYgz2L4T2TtIFjJEjys1wcyvF5MA0chki
o2pbo+6EAaUIWYhB3nLBVeM+0LuS6tth5He2Ao60XTuulpWgBhqI0iBZU+o+UdO2
SmHbYhO/QYA90tqqL2xkcQDe1lsOyWq/FHNPnnvF22z9nk/L6QVKsTwqp7UnAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU1VZh7YRkD54thadtwiDCv6qJLfYwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjEyNDc3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvN2q
MA0GCSqGSIb3DQEBCwUAA4IBAQCPu+DvPv5w9dW+WOGQZONzs7GJdk4O59rA4Sf/
ljoIU5yn1lMN5O4TnVq0J3daGYxd942kdZOnoO+wMkBnPd51Bs0odHrKH3TtKAsM
8H0jvcyZz2q7tnaRAfMNNKs8EQiUhvhkPufLXSfrWzSnJTava0Mb++FxnYA+4cYg
0dBahuM3ZUJaTgkOLiiWX5UwyLgywIjvYniT/UrErVAzRVuCVvuShk0zLjQlA0V2
33TeS9HVB4rTRGQhYMSagpjZ0aPLaW4daz+MLgcb1EG6/ctlkj3KV9DlqnNEcuwq
fWNLgxwR7p3fu60OhnAZzoF1Jk5vYI1BOZj5n1ZAyG91EofB
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:00 2026 by rpki-client