Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212336.roa
File: AS212336.roa (raw, json)
Hash identifier: 6rvOLab9jLWNTrUcMyQhPbFBTqYBmySFkpe2CAPsFfE=
Subject key identifier: 7F:E3:C2:08:15:C7:11:3D:BD:7E:F1:80:36:FF:0C:54:55:EA:CC:69
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 668502EA0947DFC5B8AFBF3F1B7A5864574D347E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212336.roa
Signing time: Wed 04 Nov 2026 10:15:37 +0000
ROA not before: Wed 04 Nov 2026 10:10:37 +0000
ROA not after: Wed 03 Nov 2027 10:15:37 +0000
asID: 212336
IP address blocks: 141.11.138.0/24 maxlen: 24
141.11.139.0/24 maxlen: 24
141.11.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:85:02:ea:09:47:df:c5:b8:af:bf:3f:1b:7a:58:64:57:4d:34:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 4 10:10:37 2026 GMT
Not After : Nov 3 10:15:37 2027 GMT
Subject: CN=7FE3C20815C7113DBD7EF18036FF0C5455EACC69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a2:b8:ff:a1:19:08:bd:1f:1b:a2:c3:ee:7a:
f6:e6:7b:98:95:e1:27:ed:8d:f6:b4:a3:40:2c:39:
c0:78:f2:43:9e:e6:0e:97:04:d5:98:f6:b4:74:26:
68:21:6d:be:ad:85:a5:62:93:5f:bf:66:80:92:d3:
c1:c9:78:da:0d:04:af:8d:7b:9f:6e:2c:a0:85:c6:
2a:f6:e0:d9:95:4a:af:2b:f7:8e:d5:67:b7:e0:3e:
30:64:e5:e8:fc:f8:de:d0:6c:32:29:0c:10:3d:dd:
d1:35:35:4c:8e:e1:00:a2:da:ad:88:cc:83:01:9f:
d0:4e:08:41:78:0e:f8:8a:f3:a7:59:41:ab:64:3e:
0a:70:99:48:26:fa:7f:02:e0:da:56:55:55:84:ba:
95:eb:4a:4a:90:fa:00:69:0b:87:85:81:12:86:e8:
25:66:e9:48:d8:f4:d4:ee:79:58:dc:28:0a:76:1e:
a1:34:97:3b:f0:6c:8c:a9:c7:af:a7:b9:2f:69:1c:
59:ef:f6:cc:b0:fe:cc:de:b9:f1:4a:a8:bc:82:68:
d3:88:89:aa:67:cb:48:d5:46:74:a3:32:ac:1b:82:
cc:2e:6e:d7:97:12:3e:11:db:11:18:e5:32:98:7c:
3b:e7:ce:05:36:bd:65:d3:a6:c4:04:d5:96:d4:fc:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E3:C2:08:15:C7:11:3D:BD:7E:F1:80:36:FF:0C:54:55:EA:CC:69
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.138.0/23
141.11.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a5:46:48:0c:b1:bf:3b:81:a0:4d:20:99:96:a2:56:f7:d7:
10:e9:0a:50:f1:57:73:c9:6c:07:0e:ae:b2:20:ca:a6:87:27:
86:c8:fb:b8:f7:78:68:96:93:14:5e:53:c8:e3:23:61:df:26:
5c:a2:a8:12:62:6d:e9:b0:0d:50:dc:e0:ca:4a:6a:05:c0:14:
92:90:43:f8:7b:93:bf:59:ba:48:fc:5e:c0:8a:83:b0:6c:a4:
8c:b0:d9:39:80:b2:7b:45:b5:3c:25:88:e5:58:11:7b:d3:bb:
b5:17:96:dd:40:ca:40:c7:4e:c5:b0:a1:0f:6b:98:60:da:7e:
ba:91:7c:09:de:05:34:07:a2:7a:04:4b:9b:10:ff:73:0a:e7:
6e:48:44:cb:05:19:07:79:de:02:9a:89:52:41:fa:d7:59:3c:
5d:75:c2:21:90:06:30:ba:dc:a9:82:4d:86:c5:d8:28:dc:15:
4d:71:ad:57:95:05:07:f0:a6:f6:73:78:b0:02:a5:d8:5a:d7:
ba:51:13:ca:d7:47:4e:37:ed:fb:e4:22:a7:a6:1b:4e:42:6a:
ae:57:c6:8e:2e:ec:69:69:a5:84:00:7a:92:3e:c4:6f:e7:b3:
31:9f:86:01:1a:ca:82:46:94:1a:53:49:4c:6d:eb:46:e9:05:
cc:f2:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:22:05 2026 by rpki-client