Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
File: AS212683.roa (raw, json)
Hash identifier: YNYjILyykeyT+FEoYacF3nrEnF/J+hk12RqHw5EcQVQ=
Subject key identifier: 5B:0D:2D:12:D9:1F:2F:DD:B2:1E:7C:6E:5D:B4:F9:D8:22:A2:EA:54
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 65AD1CDFDBFBC74B3BE55A8C86AF1CC3EA2236FF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
Signing time: Tue 08 Sep 2026 00:07:24 +0000
ROA not before: Tue 08 Sep 2026 00:02:24 +0000
ROA not after: Tue 07 Sep 2027 00:07:24 +0000
asID: 212683
IP address blocks: 51.146.19.0/24 maxlen: 24
51.194.132.0/23 maxlen: 24
51.241.64.0/24 maxlen: 24
51.241.76.0/24 maxlen: 24
51.241.192.0/23 maxlen: 24
51.241.195.0/24 maxlen: 24
51.241.196.0/23 maxlen: 23
51.241.232.0/23 maxlen: 23
51.241.253.0/24 maxlen: 24
94.193.32.0/20 maxlen: 20
188.220.87.0/24 maxlen: 24
188.221.17.0/24 maxlen: 24
188.221.52.0/24 maxlen: 24
188.221.106.0/24 maxlen: 24
188.221.111.0/24 maxlen: 24
188.221.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ad:1c:df:db:fb:c7:4b:3b:e5:5a:8c:86:af:1c:c3:ea:22:36:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 8 00:02:24 2026 GMT
Not After : Sep 7 00:07:24 2027 GMT
Subject: CN=5B0D2D12D91F2FDDB21E7C6E5DB4F9D822A2EA54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:0a:21:b9:34:ac:04:fe:22:f2:9f:97:ee:
16:01:59:0e:8b:b9:b5:85:a8:c5:5c:86:e4:9a:e0:
99:a7:01:49:d5:eb:80:a7:0e:fd:7a:0e:e1:6b:f1:
20:8c:77:4b:b2:e8:e4:53:6c:90:90:eb:79:17:dc:
15:e7:38:7a:78:e2:f0:a6:d8:27:71:a3:16:33:c1:
d1:ee:46:e8:fe:8a:9b:84:a1:c4:3e:03:22:66:2e:
57:1c:8b:6c:af:16:3c:9b:a4:f4:ad:01:2b:69:be:
48:d9:c8:6b:ef:95:9c:d0:31:5b:8a:56:6a:ce:60:
51:6d:51:26:d6:a0:0d:4e:38:24:48:eb:9e:93:63:
e3:ab:18:09:71:2c:f7:f8:d9:df:a2:48:28:1d:c8:
dd:0f:19:b9:f9:f9:78:a8:58:ff:10:47:7f:2d:14:
ff:d0:1b:d3:f8:9a:c2:78:b6:ef:51:57:80:c0:91:
7a:fc:a8:54:4f:a4:d2:6d:c6:0a:2d:bb:85:4f:b6:
1e:7c:0f:03:77:0f:06:ec:6b:65:e0:a6:e6:6d:9d:
a7:ef:d4:fb:48:79:94:7d:9f:f5:90:54:fb:4c:d7:
28:98:33:83:9c:f5:a3:a7:ac:df:52:b0:de:87:93:
b9:30:46:8a:b2:f6:c0:1a:9c:62:b2:69:97:84:f9:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0D:2D:12:D9:1F:2F:DD:B2:1E:7C:6E:5D:B4:F9:D8:22:A2:EA:54
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.19.0/24
51.194.132.0/23
51.241.64.0/24
51.241.76.0/24
51.241.192.0/23
51.241.195.0-51.241.197.255
51.241.232.0/23
51.241.253.0/24
94.193.32.0/20
188.220.87.0/24
188.221.17.0/24
188.221.52.0/24
188.221.106.0/24
188.221.111.0/24
188.221.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9e:17:dc:ca:08:98:8f:9a:9e:57:e7:0c:3b:f5:c5:3e:5b:
45:d2:6e:1d:04:fd:f3:90:f4:7c:a3:7e:9a:60:04:d3:da:75:
b4:98:89:68:80:a1:49:64:4a:68:5f:d1:a1:65:ce:f4:66:a9:
8e:c2:56:35:31:82:fe:90:3b:12:13:ba:d7:86:d0:53:0e:d6:
36:32:f5:4c:81:95:4c:06:ad:55:af:2c:bb:a6:a3:f6:ab:00:
6a:d4:d3:85:2d:8d:99:98:12:2f:41:cb:8a:37:05:7d:f1:ce:
14:df:51:05:3e:c2:0e:8a:c1:95:a6:73:0a:2c:67:21:64:c1:
a5:31:39:34:6e:04:61:17:40:c1:c0:81:61:2b:a8:bc:7d:8a:
e0:bc:5a:cb:03:12:0a:f5:de:ff:e8:72:46:c4:58:bb:74:00:
3b:48:d0:5b:22:0b:ae:34:e4:a7:55:de:21:21:f6:45:b2:eb:
89:c5:75:01:9a:a3:f3:1e:13:a3:fd:15:15:89:3a:98:4e:08:
4b:ce:d4:0b:98:55:8b:97:10:0b:68:3c:8c:1f:d7:b7:6b:99:
46:a2:2e:5d:d3:39:3c:76:ec:6e:a9:ef:45:01:e9:63:34:6b:
17:07:5b:f8:a3:cc:3d:dd:86:03:53:3c:8d:68:cd:87:ca:75:
b0:f6:36:18
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUZa0c39v7x0s75VqMhq8cw+oiNv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MDgwMDAyMjRaFw0yNzA5MDcwMDA3MjRaMDMxMTAvBgNV
BAMTKDVCMEQyRDEyRDkxRjJGRERCMjFFN0M2RTVEQjRGOUQ4MjJBMkVBNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTwohuTSsBP4i8p+X7hYBWQ6L
ubWFqMVchuSa4JmnAUnV64CnDv16DuFr8SCMd0uy6ORTbJCQ63kX3BXnOHp44vCm
2CdxoxYzwdHuRuj+ipuEocQ+AyJmLlcci2yvFjybpPStAStpvkjZyGvvlZzQMVuK
VmrOYFFtUSbWoA1OOCRI656TY+OrGAlxLPf42d+iSCgdyN0PGbn5+XioWP8QR38t
FP/QG9P4msJ4tu9RV4DAkXr8qFRPpNJtxgotu4VPth58DwN3Dwbsa2XgpuZtnafv
1PtIeZR9n/WQVPtM1yiYM4Oc9aOnrN9SsN6Hk7kwRoqy9sAanGKyaZeE+UZ7AgMB
AAGjggJmMIICYjAdBgNVHQ4EFgQUWw0tEtkfL92yHnxuXbT52CKi6lQwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjEyNjgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQAM5IT
AwQBM8KEAwQAM/FAAwQAM/FMAwQBM/HAMAwDBAAz8cMDBAEz8cQDBAEz8egDBAAz
8f0DBARewSADBAC83FcDBAC83REDBAC83TQDBAC83WoDBAC83W8DBAC83bowDQYJ
KoZIhvcNAQELBQADggEBAKaeF9zKCJiPmp5X5ww79cU+W0XSbh0E/fOQ9Hyjfppg
BNPadbSYiWiAoUlkSmhf0aFlzvRmqY7CVjUxgv6QOxITuteG0FMO1jYy9UyBlUwG
rVWvLLumo/arAGrU04UtjZmYEi9By4o3BX3xzhTfUQU+wg6KwZWmcwosZyFkwaUx
OTRuBGEXQMHAgWErqLx9iuC8WssDEgr13v/ockbEWLt0ADtI0FsiC6405KdV3iEh
9kWy64nFdQGao/MeE6P9FRWJOphOCEvO1AuYVYuXEAtoPIwf17drmUaiLl3TOTx2
7G6p70UB6WM0axcHW/ijzD3dhgNTPI1ozYfKdbD2Nhg=
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:45:50 2026 by rpki-client