Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212810.roa
File: AS212810.roa (raw, json)
Hash identifier: ULbS6bWDNFf+q84/6I/6XldwnxmeBleR3rm+MPi7fNw=
Subject key identifier: 01:0A:1C:1A:0C:72:74:67:C0:63:29:DD:8B:82:77:1B:C6:68:78:49
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7C4CC9A3706A04CE9EE2F49A3A2F50CF8EAA443F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212810.roa
Signing time: Thu 20 Aug 2026 15:04:22 +0000
ROA not before: Thu 20 Aug 2026 14:59:22 +0000
ROA not after: Thu 19 Aug 2027 15:04:22 +0000
asID: 212810
IP address blocks: 2a13:9500:1c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4c:c9:a3:70:6a:04:ce:9e:e2:f4:9a:3a:2f:50:cf:8e:aa:44:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 20 14:59:22 2026 GMT
Not After : Aug 19 15:04:22 2027 GMT
Subject: CN=010A1C1A0C727467C06329DD8B82771BC6687849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:64:ef:25:1a:8e:be:5e:14:ed:5b:ba:0c:
1c:91:ac:99:ca:26:22:56:df:f9:a0:8f:1f:b2:c1:
1c:e6:fc:3a:1c:c8:05:b0:de:e1:b8:fc:79:6d:4a:
19:6d:7e:90:d4:26:d0:2b:ae:7d:11:6a:a4:b4:04:
0a:ef:24:6c:91:a5:28:92:63:cb:96:84:20:d0:a0:
0a:7c:99:81:6c:d4:9d:af:d7:f9:19:4c:98:77:c0:
0d:87:9f:b4:3b:60:fd:a5:0a:3a:d6:9d:de:41:45:
9b:c6:82:9e:c6:d2:af:f6:e8:7d:60:ff:5c:65:c9:
84:da:12:74:bf:d9:61:bc:4c:86:ad:30:4c:bd:86:
ac:a2:03:48:30:c6:9c:dc:b0:41:90:03:4a:d6:3b:
b6:85:b9:34:c9:ed:a9:3a:2e:88:e9:a0:09:0a:07:
8e:65:0f:45:a8:a0:9c:01:45:1e:7d:52:b7:43:b2:
56:2c:05:8b:7d:f1:4f:e2:94:4f:24:df:a4:fb:a7:
ec:bf:ff:a3:11:80:f3:4c:3a:de:d1:ec:09:61:f8:
83:0c:c6:a4:07:d2:b6:7b:16:92:5b:72:f1:6d:0e:
56:e4:86:1d:60:fc:e8:00:20:3c:56:15:c5:21:f7:
6e:21:d5:22:6b:7c:5f:1d:fe:23:67:5f:fd:b1:18:
92:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0A:1C:1A:0C:72:74:67:C0:63:29:DD:8B:82:77:1B:C6:68:78:49
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1c4::/48
Signature Algorithm: sha256WithRSAEncryption
90:74:57:92:31:de:69:53:25:fe:30:58:e3:b0:28:5f:14:62:
5f:66:e2:99:c8:95:47:35:4d:8a:66:76:e4:70:92:4c:85:c9:
02:a0:1c:82:6c:ea:7f:09:54:4c:a6:38:2c:46:8d:f6:0a:bf:
c9:23:aa:f2:d8:61:60:ec:03:e2:54:86:86:0d:4c:44:8c:1a:
1a:04:93:8a:8c:06:aa:2e:08:f8:0d:83:73:2f:d6:93:51:7d:
3b:21:42:b5:01:b0:2f:2f:38:38:78:b7:7d:f1:64:e7:24:8e:
76:91:e4:af:a0:e6:8d:71:13:bb:44:f0:64:21:71:5b:4f:0a:
fc:f6:61:33:1b:13:94:73:4e:1b:19:47:54:f5:47:42:b4:96:
92:02:07:1d:10:b8:9e:21:cb:09:59:0f:8e:3b:3c:2d:42:a4:
81:6a:ad:09:f6:65:ee:ec:c5:ca:44:ba:e6:a5:6d:fd:62:22:
0e:9a:b0:86:7a:59:9b:a4:17:6d:f5:ff:25:0f:0e:1f:cf:07:
95:39:87:b7:01:36:8f:27:6d:3d:9e:69:80:ec:18:53:dd:65:
0d:86:73:72:12:f6:26:72:7c:db:2e:b0:3e:91:78:59:4b:90:
de:09:4c:74:b7:3c:ba:29:46:c5:69:21:e6:1d:66:bf:15:a1:
1e:d8:04:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:11 2026 by rpki-client