Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212720.roa
File: AS212720.roa (raw, json)
Hash identifier: H0pYEpWr0IdKDc6vbWJTskvikHpBtALxE/AHxFqT5cw=
Subject key identifier: 2A:26:2C:AA:1F:EE:24:60:80:0C:DF:87:6A:F8:3B:74:C7:A9:A1:79
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 514EA0ADC6023DA4BAE59B0049987A6065E81643
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212720.roa
Signing time: Sat 03 Oct 2026 16:02:56 +0000
ROA not before: Sat 03 Oct 2026 15:57:56 +0000
ROA not after: Sat 02 Oct 2027 16:02:56 +0000
asID: 212720
IP address blocks: 188.220.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4e:a0:ad:c6:02:3d:a4:ba:e5:9b:00:49:98:7a:60:65:e8:16:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 3 15:57:56 2026 GMT
Not After : Oct 2 16:02:56 2027 GMT
Subject: CN=2A262CAA1FEE2460800CDF876AF83B74C7A9A179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:63:fe:af:c1:ef:d5:d8:e2:e2:ab:8c:11:
96:23:3b:a3:dc:69:48:d3:05:55:aa:d9:a3:54:1b:
c8:b0:d4:f5:96:67:bc:ab:56:6d:8a:9e:0e:da:ac:
7f:12:0c:6a:cc:8a:31:7d:71:4f:f9:9a:2c:8b:b7:
6b:7c:6e:75:6f:b7:2e:56:a8:0f:9c:1e:cf:33:b1:
37:cd:e2:a7:bc:69:5a:5d:9c:fb:56:f6:5f:2c:45:
80:1c:c6:87:c5:f2:19:a3:bb:97:32:24:0a:3f:df:
14:ff:43:f5:f3:0f:7a:41:1f:db:f3:1a:b7:ec:8c:
b9:9d:fe:90:28:90:76:dc:b3:34:44:46:a1:3d:c3:
97:c3:21:b1:27:7f:29:88:35:8f:14:f2:21:1a:8b:
2c:c6:1f:3c:32:a7:98:b9:ec:c7:ba:3f:0f:10:13:
8c:0a:d4:b9:5e:1c:1f:f1:df:4a:6d:35:30:74:c9:
4b:95:4b:2c:49:c7:7c:98:3f:6c:21:a8:b7:26:aa:
79:60:52:fc:8f:e8:75:6f:32:13:df:10:87:1c:7a:
67:f4:e1:bd:4f:c6:f5:e0:ba:ea:c2:78:0d:f6:12:
f2:9a:a6:31:fc:b8:dd:33:df:5c:8d:d7:59:c6:89:
ed:24:4a:81:97:5d:38:c1:09:c2:5c:ad:dc:a1:93:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:2C:AA:1F:EE:24:60:80:0C:DF:87:6A:F8:3B:74:C7:A9:A1:79
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a9:0b:3a:26:5d:ae:18:94:c7:72:db:6f:29:a0:f4:06:8b:
b7:e5:42:10:98:16:36:73:11:63:14:92:fe:54:9b:67:fa:a0:
2e:23:5a:4c:ee:92:ab:60:b8:32:e7:16:f1:e3:81:fa:56:25:
ff:b2:1c:f5:af:2f:d6:ea:04:ff:82:68:2b:35:46:8c:20:f7:
70:db:2d:6e:f5:22:bc:a4:cd:0d:6a:d8:0f:65:81:95:45:59:
93:1f:99:06:47:32:54:61:c9:c8:29:25:9b:ce:79:e6:2b:a6:
85:f3:ed:e1:56:31:96:61:b9:c8:fb:7d:11:a6:79:14:ed:c6:
65:f5:73:d5:68:74:76:00:53:64:f7:c2:4c:35:2d:69:16:bb:
e4:36:0f:50:16:cf:94:00:1a:9c:de:01:b8:55:95:61:0f:cb:
31:e6:66:be:29:63:a2:e4:ca:fc:70:4c:7a:c7:8c:60:5d:79:
33:63:ff:dd:1d:96:a9:ee:ea:aa:f3:b7:54:3b:05:b5:a5:7c:
9d:9f:98:16:04:64:62:ce:e3:19:29:76:3c:39:c8:40:c8:2e:
ee:b4:76:44:75:65:6b:eb:33:ad:b8:84:97:ba:b6:6e:1c:a5:
6b:63:73:21:02:d5:2d:e6:97:92:00:cc:f8:94:85:9f:41:dd:
91:91:b7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:49:17 2026 by rpki-client