Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212591.roa
File: AS212591.roa (raw, json)
Hash identifier: r1BXBDI9uy10dxQmWIZ9Tv36dkoN4v1LZA6P7u+Xmw8=
Subject key identifier: 60:1A:96:98:21:DC:67:09:67:60:32:B7:F2:49:E9:9B:ED:71:B9:16
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 65CD1AA236A748CDEEEF74BB194966671DAEC923
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212591.roa
Signing time: Tue 13 Oct 2026 14:49:36 +0000
ROA not before: Tue 13 Oct 2026 14:44:36 +0000
ROA not after: Tue 12 Oct 2027 14:49:36 +0000
asID: 212591
IP address blocks: 2a13:9500:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:cd:1a:a2:36:a7:48:cd:ee:ef:74:bb:19:49:66:67:1d:ae:c9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 13 14:44:36 2026 GMT
Not After : Oct 12 14:49:36 2027 GMT
Subject: CN=601A969821DC6709676032B7F249E99BED71B916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:7c:a3:54:c3:0e:6a:d7:8d:c1:8d:07:d2:
77:3c:9f:76:09:f3:65:76:5e:34:3b:6a:84:91:e7:
6c:84:2f:df:61:6d:6b:de:ba:8c:6c:35:e9:d2:1a:
d5:c5:95:61:8b:cb:82:cf:da:03:9b:02:df:cc:38:
f6:05:bd:12:45:32:18:6c:ab:fa:ca:fb:7d:ae:65:
13:06:b9:02:66:b4:99:9e:12:2c:89:56:84:7b:c7:
b1:fd:cb:71:9a:cb:9e:a9:be:7d:5f:58:12:ab:17:
28:6a:7d:34:01:e5:cc:e8:4d:0c:ce:68:4c:08:af:
4c:db:fa:e6:db:ab:14:69:55:de:f1:70:40:df:8f:
b2:a9:78:c4:d0:e7:bf:c3:be:1e:13:86:44:ff:6e:
79:1d:33:3f:65:06:d2:ad:c1:d7:e9:93:5b:59:d8:
6f:a1:79:df:5a:17:bf:17:e9:d4:97:18:c5:8a:c5:
c3:f0:9f:88:4b:2c:e6:3c:af:b7:16:8e:6a:02:5b:
de:24:8f:93:7c:84:9c:2b:11:b8:cb:fa:0e:7f:4a:
09:6c:98:26:db:f2:66:7b:58:4a:3b:a1:61:21:5b:
24:31:44:7c:40:37:2a:41:7a:e9:55:41:5a:ab:fd:
66:c9:9f:6f:97:7a:6a:9a:3a:39:f9:1a:7b:bd:d0:
bd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1A:96:98:21:DC:67:09:67:60:32:B7:F2:49:E9:9B:ED:71:B9:16
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212591.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:106::/48
Signature Algorithm: sha256WithRSAEncryption
8a:d3:51:cd:f3:8c:a3:5d:28:82:f5:01:1f:c0:46:be:2b:06:
6a:6b:41:fd:cd:4f:e1:a6:5b:37:a2:cf:e1:1e:d4:4b:41:35:
ed:a2:17:1e:97:94:f1:7a:0a:d5:3c:91:68:f9:18:ae:50:25:
3d:13:f0:d3:9d:0c:83:a3:17:f6:86:6a:19:49:c5:0f:83:02:
bd:55:7f:9b:5f:aa:c0:42:c1:d1:d0:49:3c:87:44:ab:b4:4e:
60:bb:10:9e:71:8e:f4:b6:cd:00:dd:c8:f1:2e:57:bd:c3:c1:
23:7c:30:53:99:30:a8:3a:9b:ff:7e:be:7e:9d:b4:4c:1a:98:
22:7e:f4:28:c4:f4:b6:cb:bd:cb:ce:83:7b:a7:09:bd:ca:74:
0b:7b:e1:a4:c9:ed:e4:cf:b6:c8:db:d7:5a:97:86:a1:40:7d:
bd:e6:b6:ca:b6:93:26:4d:57:bb:87:16:1a:7b:e5:65:a9:01:
f0:a0:a6:8b:fe:42:ec:17:5b:88:fa:ac:20:a8:9d:bc:f9:10:
f6:ff:9c:37:77:cd:06:d5:c6:65:b2:7c:bb:2e:8d:2a:ee:48:
37:a1:d0:2c:f1:0f:9c:40:87:bd:4a:de:06:40:c4:da:19:95:
7a:ca:57:15:19:b8:76:93:cb:58:ff:f6:d8:f0:1e:8f:7c:6a:
c1:72:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:41:12 2026 by rpki-client