Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212871.roa
File: AS212871.roa (raw, json)
Hash identifier: Hz5OB5hVOKz1zpstQH/O3pWKqg6SmV5aDKJLqssc/tg=
Subject key identifier: 68:96:86:9D:F6:CA:0C:F0:D7:47:33:AB:8B:A7:3D:97:DC:A0:FF:F0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 417FF05091BD241A4EAE3AC3F727286609B28686
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212871.roa
Signing time: Sun 23 Aug 2026 13:49:30 +0000
ROA not before: Sun 23 Aug 2026 13:44:30 +0000
ROA not after: Sun 22 Aug 2027 13:49:30 +0000
asID: 212871
IP address blocks: 2a13:9500:e6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7f:f0:50:91:bd:24:1a:4e:ae:3a:c3:f7:27:28:66:09:b2:86:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 23 13:44:30 2026 GMT
Not After : Aug 22 13:49:30 2027 GMT
Subject: CN=6896869DF6CA0CF0D74733AB8BA73D97DCA0FFF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:6a:a2:41:00:0e:27:b8:2e:64:f5:c7:ef:
9d:79:d3:99:cd:f2:ba:c2:66:f0:0b:c2:ec:23:00:
75:7e:f9:91:e3:b2:9d:78:84:8a:4d:ce:e2:8c:52:
ac:d1:84:45:35:d9:15:70:a9:70:28:0f:3d:05:23:
70:94:48:5e:08:30:3b:43:27:bc:2a:5a:27:21:d2:
f6:62:99:8d:de:40:a1:98:5f:ae:0b:84:ba:73:19:
24:70:a3:3b:74:57:94:73:88:08:5a:c6:30:7c:7b:
76:d6:cd:e1:cc:29:3a:1b:b5:3c:a2:8b:ad:4d:71:
09:2e:d5:10:cd:38:d7:53:86:1d:aa:76:b7:1e:5a:
90:ed:44:e2:51:54:2b:03:e9:40:c9:8a:50:8f:85:
81:84:a9:c4:7c:c8:8b:07:9c:4b:36:f4:97:ca:21:
36:5b:c7:62:42:0e:a3:2e:ca:af:38:2f:32:81:b0:
9e:9f:ef:4a:f9:7a:eb:95:ec:e6:05:81:70:83:57:
19:19:d3:06:76:37:cf:71:30:33:b8:43:8a:7e:c8:
0d:df:24:96:26:41:86:04:63:10:a3:53:ab:9e:9e:
59:67:3d:c5:c9:5b:9c:6a:62:38:98:4b:d9:4c:ff:
7a:4d:02:d4:f4:90:5e:88:cb:12:31:60:41:9e:cb:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:96:86:9D:F6:CA:0C:F0:D7:47:33:AB:8B:A7:3D:97:DC:A0:FF:F0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212871.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:e6::/48
Signature Algorithm: sha256WithRSAEncryption
37:6f:a8:d4:b3:c7:6d:e8:06:f4:eb:f2:7e:15:27:dd:cd:a6:
20:51:3a:9f:4c:62:e0:45:35:ff:b0:50:2d:ce:44:90:33:75:
bb:62:80:df:c0:27:79:4d:83:7b:10:2e:6f:41:77:84:96:e7:
72:cc:95:db:3a:1c:c0:dc:b7:d7:e4:4d:ad:71:fc:68:45:49:
93:a3:c0:ce:01:a7:2a:14:f3:9f:6e:27:67:87:6b:76:75:6c:
9c:b4:62:28:53:a8:98:f6:56:16:4d:15:49:67:1e:7e:75:09:
ef:8c:08:2c:a8:e1:80:cc:b4:cc:af:c1:e0:e3:a0:f7:b8:3e:
19:a9:e3:49:36:67:e1:56:fd:38:07:0b:51:b0:09:e0:d5:cb:
75:fd:37:a4:29:f0:9c:a5:42:8e:a0:75:52:6b:e9:12:a2:8f:
0d:df:6f:95:9d:e1:7d:04:1c:50:08:b9:5c:4e:ed:88:35:44:
37:31:58:21:fc:60:ba:8d:99:4d:2b:2e:67:a5:cf:72:c8:8c:
26:14:7e:7f:14:93:87:0e:41:20:cb:81:b0:fb:5d:d1:ff:95:
6f:6b:48:c4:87:8a:1f:1f:19:6e:74:54:35:da:80:71:7c:c3:
b2:85:f9:e2:c3:bb:00:3c:56:b7:94:2d:cc:19:85:87:ac:2f:
dc:da:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:18 2026 by rpki-client