Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212948.roa
File: AS212948.roa (raw, json)
Hash identifier: L66MITDrNwKQLf164rZw6uTb5IXTkKYXp9eGMH+30sc=
Subject key identifier: 8F:90:0D:B4:C8:B6:E7:E5:85:5F:83:51:29:98:C5:2D:28:15:BA:27
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 68E33BBACDE34A0F96C36A42B5AB7ADC9D52619E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212948.roa
Signing time: Fri 28 Aug 2026 07:29:44 +0000
ROA not before: Fri 28 Aug 2026 07:24:44 +0000
ROA not after: Fri 27 Aug 2027 07:29:44 +0000
asID: 212948
IP address blocks: 2a13:9500:1c9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 09:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e3:3b:ba:cd:e3:4a:0f:96:c3:6a:42:b5:ab:7a:dc:9d:52:61:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 28 07:24:44 2026 GMT
Not After : Aug 27 07:29:44 2027 GMT
Subject: CN=8F900DB4C8B6E7E5855F83512998C52D2815BA27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:c4:d5:ad:33:12:04:5a:a1:52:69:e2:4b:
9c:4a:af:7f:03:1c:06:db:03:60:39:dc:33:59:0b:
68:b0:b0:74:d3:2a:72:24:ed:bb:5d:0c:a3:f0:2e:
26:33:d9:12:19:0e:9d:bc:02:61:60:7f:b8:c8:41:
b5:27:45:dd:fd:e8:2f:05:61:ea:14:b1:45:89:8d:
64:03:0a:b5:d8:9b:f8:40:99:84:a9:92:55:44:f0:
1f:20:3f:51:75:0d:ff:43:58:81:cd:ca:96:5b:bf:
f3:9a:81:af:4e:ac:85:22:f9:35:d4:9d:c0:24:de:
d6:fa:aa:a7:dd:09:0a:89:80:51:0f:74:47:c7:d8:
6d:f7:e0:37:3e:11:7e:7c:a8:99:cc:da:dd:2c:d6:
f5:8d:34:73:d2:b4:8b:9f:6b:a9:46:7d:c8:df:3b:
73:f2:13:95:61:aa:82:6b:30:27:59:5c:50:6c:54:
96:da:4a:cb:6b:e5:45:bd:f5:9c:bb:e4:5e:b8:e5:
12:b1:f1:b5:06:50:c7:dc:59:22:6d:67:0f:98:42:
e3:94:b4:17:b4:ac:a4:8f:d4:a1:1f:4e:cf:db:66:
c1:00:89:b3:47:c1:90:e1:38:eb:71:f6:e7:f8:d0:
22:f2:5e:ba:c5:cc:b9:07:1d:b3:a4:35:7a:9c:c3:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:90:0D:B4:C8:B6:E7:E5:85:5F:83:51:29:98:C5:2D:28:15:BA:27
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1c9::/48
Signature Algorithm: sha256WithRSAEncryption
43:eb:2d:28:e2:01:9e:66:f7:e4:3b:b3:37:f6:96:64:41:ba:
e4:af:cb:a2:1a:9f:c7:a8:8a:b5:55:69:6a:3c:d0:f2:c5:f4:
da:10:be:3b:32:22:2b:2f:a3:5e:9c:aa:3a:ef:9c:ad:48:a3:
84:ae:1c:b7:29:b4:a9:07:b0:8b:ad:41:90:41:45:54:5d:4e:
a1:46:a7:53:f9:11:83:a8:ff:69:f8:8f:d8:10:0a:65:83:e4:
89:eb:76:b7:a5:1d:28:b4:f1:4a:d6:f6:66:55:ee:f0:5b:c6:
45:f3:ca:fb:08:80:55:7f:8b:e5:12:a5:44:d2:97:da:f4:87:
de:ec:5a:82:e1:80:00:01:10:a4:3c:d0:7b:e6:da:60:25:aa:
e5:c5:27:4c:21:33:e9:42:22:15:70:6b:e5:30:83:d8:0a:2c:
62:53:80:95:60:4b:5f:ab:18:6e:45:40:7c:2d:a3:1f:23:d2:
11:99:15:22:aa:06:63:92:e9:25:2d:6e:85:c8:c5:4e:c3:b5:
3b:cf:b8:3c:4f:23:6b:5e:a1:6b:50:69:37:1c:31:5d:6c:6e:
f4:6a:c8:e9:ac:90:cc:69:02:42:f0:ae:24:7f:cf:d7:e1:67:
e9:b6:d8:32:95:e8:fd:bd:97:b2:91:db:01:6e:34:d5:6d:ed:
34:4f:74:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUaOM7us3jSg+Ww2pCtat63J1SYZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MjgwNzI0NDRaFw0yNzA4MjcwNzI5NDRaMDMxMTAvBgNV
BAMTKDhGOTAwREI0QzhCNkU3RTU4NTVGODM1MTI5OThDNTJEMjgxNUJBMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZsTVrTMSBFqhUmniS5xKr38D
HAbbA2A53DNZC2iwsHTTKnIk7btdDKPwLiYz2RIZDp28AmFgf7jIQbUnRd396C8F
YeoUsUWJjWQDCrXYm/hAmYSpklVE8B8gP1F1Df9DWIHNypZbv/Oaga9OrIUi+TXU
ncAk3tb6qqfdCQqJgFEPdEfH2G334Dc+EX58qJnM2t0s1vWNNHPStIufa6lGfcjf
O3PyE5VhqoJrMCdZXFBsVJbaSstr5UW99Zy75F645RKx8bUGUMfcWSJtZw+YQuOU
tBe0rKSP1KEfTs/bZsEAibNHwZDhOOtx9uf40CLyXrrFzLkHHbOkNXqcw9U3AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUj5ANtMi25+WFX4NRKZjFLSgVuicwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEyOTQ4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAHJMA0GCSqGSIb3DQEBCwUAA4IBAQBD6y0o4gGeZvfkO7M39pZkQbrkr8uiGp/H
qIq1VWlqPNDyxfTaEL47MiIrL6NenKo675ytSKOErhy3KbSpB7CLrUGQQUVUXU6h
RqdT+RGDqP9p+I/YEAplg+SJ63a3pR0otPFK1vZmVe7wW8ZF88r7CIBVf4vlEqVE
0pfa9Ife7FqC4YAAARCkPNB75tpgJarlxSdMITPpQiIVcGvlMIPYCixiU4CVYEtf
qxhuRUB8LaMfI9IRmRUiqgZjkuklLW6FyMVOw7U7z7g8TyNrXqFrUGk3HDFdbG70
asjprJDMaQJC8K4kf8/X4Wfpttgylej9vZeykdsBbjTVbe00T3RW
-----END CERTIFICATE-----
Generated at Sat Aug 29 13:50:11 2026 by rpki-client