Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212396.roa
File: AS212396.roa (raw, json)
Hash identifier: kkf0kGnj3FU6OzYR4BnZevUmtIwZshjpuQbwCYS3zVI=
Subject key identifier: 44:79:D1:AA:FF:9C:2F:0F:92:A9:D7:5C:65:83:CB:66:C3:F5:82:BC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 080C464AFA45493F872133A8E28A8782090C7828
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212396.roa
Signing time: Tue 19 May 2026 18:40:24 +0000
ROA not before: Tue 19 May 2026 18:35:24 +0000
ROA not after: Tue 18 May 2027 18:40:24 +0000
asID: 212396
IP address blocks: 84.75.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:0c:46:4a:fa:45:49:3f:87:21:33:a8:e2:8a:87:82:09:0c:78:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 19 18:35:24 2026 GMT
Not After : May 18 18:40:24 2027 GMT
Subject: CN=4479D1AAFF9C2F0F92A9D75C6583CB66C3F582BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:d9:68:8b:4d:8b:10:ec:03:76:f7:71:d2:
a8:98:22:9b:88:b1:03:71:86:40:d7:c8:44:fd:48:
41:e2:e6:d7:fd:18:b7:78:52:da:dc:e5:5b:f5:1d:
93:00:aa:50:a6:e6:33:0d:67:aa:0a:2a:59:da:61:
c6:5b:a1:a8:49:b9:59:e1:2e:8b:2b:19:38:cf:62:
b0:f4:f4:66:64:ca:37:2c:2b:77:35:bd:01:73:2d:
5d:4b:4e:15:58:69:4f:ea:d4:fc:ff:22:2a:7a:38:
3a:8a:5b:6e:1d:cf:6b:6f:7e:2a:a8:36:ef:0a:f3:
23:7f:5b:d4:80:d4:01:f9:c3:c2:67:78:f9:be:17:
34:c7:b4:b1:db:5d:ae:30:1f:af:1e:a1:3c:9b:f7:
28:2e:07:8b:b5:e0:54:6a:a4:ee:ec:b5:e4:16:cf:
f7:2a:35:4b:4d:9b:29:74:85:4e:f3:c8:66:de:d8:
d5:bc:45:6d:05:ea:f1:ff:8b:d1:bb:32:6a:11:22:
ea:a6:38:b0:47:e3:31:9b:73:0e:21:a2:f4:ad:9a:
b5:b9:ec:05:8e:22:b6:41:be:cf:14:41:06:73:7b:
c6:b0:55:5d:e0:15:3f:99:9e:69:3d:b5:10:50:44:
b4:0f:96:75:2e:5d:a1:80:39:3c:12:75:12:15:5c:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:79:D1:AA:FF:9C:2F:0F:92:A9:D7:5C:65:83:CB:66:C3:F5:82:BC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212396.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:42:9e:9a:a6:03:2b:44:cc:42:29:1c:9f:a6:87:f7:33:25:
a5:b8:c0:ac:d9:33:bf:13:2b:fa:f9:5c:76:2f:64:43:7f:70:
91:af:c4:c6:09:bd:50:38:a0:d9:6c:76:b6:26:f3:8d:91:01:
83:79:89:37:97:cf:f9:3c:59:06:9f:f5:68:46:dc:04:b5:9a:
2d:70:5d:f0:bb:42:77:26:5d:6b:38:05:8c:f2:91:bf:0c:19:
41:38:bd:55:72:de:86:2c:a8:60:0f:f2:4c:f0:02:c5:21:c9:
a2:a3:b4:04:d4:ba:a7:65:41:45:4a:e3:1e:c2:66:f0:15:c7:
93:94:b4:98:9c:7f:95:cf:46:40:30:ff:22:e3:db:50:e1:55:
c0:ec:3f:26:0a:3f:bf:6f:d8:a7:3c:2d:19:b4:23:d8:35:2d:
ee:61:9e:f8:73:77:89:e8:e3:fc:90:44:11:1e:e8:e1:51:38:
cb:14:aa:5b:e3:6b:27:53:68:f5:3e:69:62:ea:ae:49:34:e3:
ae:f7:87:1c:c5:7b:c4:03:81:fa:b3:27:90:e2:4b:98:99:08:
cb:67:3b:13:be:f6:df:e0:66:a6:9b:c3:e5:65:16:fc:5a:72:
8b:d7:4d:61:93:da:cb:ed:15:aa:c5:c4:c9:1f:e5:e2:69:86:
f7:e3:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:29 2026 by rpki-client