Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212895.roa
File: AS212895.roa (raw, json)
Hash identifier: ufMvQ96a1aflK2HqfE1IhqNgJ3Qqb6d3Duem1uYX0/s=
Subject key identifier: A9:91:9A:5C:68:BC:25:29:B7:4F:81:71:56:9D:8C:63:AD:36:0F:E8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 10196BD110880F760AE89C00E962F34ADE62BB9F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212895.roa
Signing time: Mon 05 Oct 2026 07:55:53 +0000
ROA not before: Mon 05 Oct 2026 07:50:53 +0000
ROA not after: Mon 04 Oct 2027 07:55:53 +0000
asID: 212895
IP address blocks: 82.39.162.0/24 maxlen: 24
82.39.163.0/24 maxlen: 24
2a13:9500:101::/48 maxlen: 48
2a13:9500:1eb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:19:6b:d1:10:88:0f:76:0a:e8:9c:00:e9:62:f3:4a:de:62:bb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 5 07:50:53 2026 GMT
Not After : Oct 4 07:55:53 2027 GMT
Subject: CN=A9919A5C68BC2529B74F8171569D8C63AD360FE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:ec:21:44:a6:79:a9:a2:2e:22:0e:eb:51:
6d:2d:96:27:75:9f:b1:30:4e:c8:c5:bb:fb:f0:1d:
36:fe:43:04:a7:09:e8:f2:38:1a:f4:a8:71:98:64:
7b:22:e8:44:aa:fa:b1:a4:05:90:ea:b4:ad:66:55:
9c:50:c4:b4:02:b8:10:21:90:a2:f0:7d:27:bf:9d:
78:76:c4:6a:93:3d:1a:14:5e:3f:cc:14:de:db:ec:
0d:3e:eb:67:4e:d3:d2:c6:56:77:26:f8:3e:5e:c9:
1a:2a:04:ef:1d:22:ec:0c:39:20:fa:47:d3:79:c9:
0e:d0:a3:e9:2f:9d:cd:b2:0a:21:97:5f:d7:fb:d6:
e5:1c:a1:7f:8e:67:62:60:d3:60:fa:26:4e:35:4d:
76:aa:a4:65:42:d7:22:44:e8:03:7c:f0:ba:cf:49:
fd:84:46:66:62:bf:49:e3:b5:b6:ad:66:e5:3b:83:
b9:01:a0:76:7f:79:6d:ca:6b:c8:56:f6:bd:77:74:
13:14:08:73:a8:f9:f6:15:05:94:84:dd:69:d7:ad:
d7:a0:ab:e1:ea:8c:54:19:9f:1d:6d:01:4b:16:79:
8b:f6:b4:6f:17:79:0f:2a:99:8d:13:64:98:c7:b2:
10:91:6a:ec:09:5b:7a:8a:8f:5c:45:62:95:08:1c:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:91:9A:5C:68:BC:25:29:B7:4F:81:71:56:9D:8C:63:AD:36:0F:E8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.162.0/23
IPv6:
2a13:9500:101::/48
2a13:9500:1eb::/48
Signature Algorithm: sha256WithRSAEncryption
1a:9b:1f:31:02:f4:ed:c6:6f:cd:10:a6:e3:66:0b:3e:57:b3:
26:89:ca:db:6d:0f:17:25:59:8e:8e:e6:70:de:31:05:b4:ee:
50:e0:cf:c2:5b:a4:b1:40:1f:cc:e4:bb:b7:13:ee:e4:6d:6a:
a9:60:7a:ef:e9:99:51:3a:2d:03:17:fd:12:1f:a2:d3:04:6b:
ed:e3:75:40:10:5d:84:38:2c:8a:9f:88:2b:88:a8:16:0c:74:
b6:c8:1b:5a:f7:14:03:5c:9c:a4:fc:0d:b6:b4:9e:f7:25:54:
e2:e9:c3:2a:88:15:cd:79:87:52:3d:f2:7c:ce:c5:cc:0e:98:
be:e5:57:a7:6c:b2:14:cd:5a:1b:d8:fa:61:a4:ea:ee:72:87:
54:26:8b:b7:7e:b4:da:4b:5b:7a:6f:bb:7e:48:de:99:31:7e:
2b:57:20:4b:92:35:d5:77:3e:b5:cf:59:0e:61:49:a0:2a:f1:
0d:fb:6b:86:1f:68:a2:34:24:6e:b6:1b:44:e7:60:66:24:54:
30:97:60:83:a1:e2:ae:0a:2f:1b:ac:16:7d:c3:7a:57:1d:e4:
25:76:91:db:25:c1:7a:ee:f6:c0:ab:ed:51:e5:fe:37:5c:49:
23:e2:bb:47:91:b1:86:9a:80:de:32:bd:5a:2c:8a:60:d3:34:
b3:e7:0a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:54:51 2026 by rpki-client