Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212513.roa
File: AS212513.roa (raw, json)
Hash identifier: +lfpcNmBfVzpG9/DV9Nkik4HItEJMwdmwL2xvdUNFcc=
Subject key identifier: 60:CD:0A:1B:84:0A:5E:16:A2:F2:33:17:4B:D2:48:EA:F6:19:D4:F4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3BC58BAC3908401BAD43DB6A111A79ABDBD319FF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212513.roa
Signing time: Fri 03 Oct 2025 19:45:31 +0000
ROA not before: Fri 03 Oct 2025 19:40:31 +0000
ROA not after: Fri 02 Oct 2026 19:45:31 +0000
asID: 212513
IP address blocks: 82.26.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c5:8b:ac:39:08:40:1b:ad:43:db:6a:11:1a:79:ab:db:d3:19:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 3 19:40:31 2025 GMT
Not After : Oct 2 19:45:31 2026 GMT
Subject: CN=60CD0A1B840A5E16A2F233174BD248EAF619D4F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:6a:f9:46:0e:a4:ee:68:bc:43:a7:08:d1:
18:ac:62:2b:f2:76:7b:42:9c:87:f0:b5:16:00:f7:
79:98:53:a7:39:c2:81:48:aa:c9:2f:a6:e9:50:45:
d6:f3:0a:44:01:a9:86:c4:c1:dd:60:76:68:23:46:
a4:86:76:76:16:34:f3:92:c3:cb:e0:5d:20:68:8b:
b0:61:4b:93:18:4c:e4:5b:bf:cc:32:26:f1:5b:5e:
ad:06:62:4a:fa:13:34:19:1a:d3:84:26:a8:05:68:
11:23:7b:6e:bf:89:ab:d1:0f:a7:92:e3:ab:85:d3:
32:16:9f:e1:88:b4:cc:67:e8:6f:4b:b4:76:29:27:
a0:c2:5c:da:9d:40:75:1f:c8:b3:4c:ac:0e:52:29:
91:9f:30:6c:c1:d7:9a:f5:85:dd:9e:ee:a0:ef:71:
cd:b6:47:be:f2:fd:15:cb:67:08:47:21:d9:95:e0:
a6:97:c0:83:e4:b8:1d:83:fa:34:80:16:59:77:28:
5d:66:c3:5a:7c:e4:c9:18:47:75:04:17:8d:6d:9c:
fa:83:e7:b8:f0:59:c5:30:e2:21:4c:75:fc:a9:fa:
88:87:6f:9f:03:dc:e2:36:c7:81:63:1a:11:1d:49:
c6:b6:ec:93:3a:f4:65:0d:2a:31:d0:8d:48:a1:0f:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CD:0A:1B:84:0A:5E:16:A2:F2:33:17:4B:D2:48:EA:F6:19:D4:F4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212513.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.132.0/24
Signature Algorithm: sha256WithRSAEncryption
81:63:d1:a6:8d:9a:d1:8e:c9:e7:d3:a7:c7:93:a2:6d:71:8e:
ba:03:4c:e5:0c:b4:8f:50:b5:ed:d4:b5:65:d0:00:6c:d4:0c:
2f:98:46:1e:ac:17:08:c8:7a:46:b2:8c:30:4b:35:bf:10:6a:
ca:8c:86:c1:dd:6d:c0:8a:de:2c:c3:59:33:b9:70:20:22:28:
6b:88:ec:a4:5a:98:0a:99:67:f7:be:2b:f1:29:51:88:2a:9c:
ea:25:62:1a:7e:3b:fa:a2:25:de:8d:cd:d5:ee:6a:10:68:47:
51:da:62:12:80:2b:ec:6d:a5:0c:76:38:f1:c6:39:f5:65:4b:
61:e3:3b:d3:40:19:57:93:30:15:cd:6c:7c:4e:2e:eb:50:c5:
d9:33:7e:b6:35:51:c1:35:cd:c7:bf:3f:ed:86:78:93:ce:31:
e0:22:01:79:96:a8:54:c7:60:af:fe:fa:86:70:32:9f:49:97:
5d:63:3f:70:ce:66:ba:be:dd:2a:dc:65:0c:c9:a2:ab:9f:5f:
00:5b:b2:a8:89:94:fe:d0:7a:a5:5f:ee:48:e9:f6:40:7f:bb:
45:99:29:1d:90:5a:c4:dd:96:c7:16:3f:d2:af:38:6f:f0:fa:
c0:69:4b:90:4c:7a:b8:45:14:6e:ed:ff:dd:09:ab:83:87:1f:
f6:82:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:27:42 2025 by rpki-client