Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212980.roa
File: AS212980.roa (raw, json)
Hash identifier: D+TxHCQS+G58Eayqqes4nu87VMreerojBFf+bKXiDOY=
Subject key identifier: C6:11:9B:C2:6D:1F:62:A8:44:E6:CF:6F:A4:DB:11:46:9F:A1:4C:05
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6AD1B9C404E5590BC1FBF2A55C296440B73B2B8B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212980.roa
Signing time: Wed 01 Jul 2026 00:11:21 +0000
ROA not before: Wed 01 Jul 2026 00:06:21 +0000
ROA not after: Wed 30 Jun 2027 00:11:21 +0000
asID: 212980
IP address blocks: 82.29.76.0/24 maxlen: 24
2a13:9500:16e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d1:b9:c4:04:e5:59:0b:c1:fb:f2:a5:5c:29:64:40:b7:3b:2b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 1 00:06:21 2026 GMT
Not After : Jun 30 00:11:21 2027 GMT
Subject: CN=C6119BC26D1F62A844E6CF6FA4DB11469FA14C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:38:3b:6d:9e:b6:2c:ee:a6:ca:63:66:4d:
d6:16:fe:74:ac:f2:f6:ff:ba:06:7b:17:2b:34:9c:
bf:da:39:67:17:c8:b8:a2:fd:f1:eb:d8:00:c9:0d:
6d:21:07:1c:a9:c7:1f:8d:b5:9f:44:40:db:10:82:
68:07:a3:3f:6b:19:ca:ea:a9:58:06:d0:89:28:e8:
b5:d0:cb:93:8d:80:90:f4:ea:76:cc:20:82:92:67:
cc:26:a6:1a:83:65:cd:be:e1:d5:f0:bf:67:37:13:
a5:01:98:44:56:f2:c5:ee:bb:c4:1b:34:10:e6:04:
02:cc:48:96:52:3e:dd:c3:c5:00:c2:27:a6:df:f3:
08:fd:87:50:8a:b9:6f:eb:6e:78:ed:9e:7e:2d:7b:
98:6d:c7:0a:63:b4:5f:4f:42:2d:dc:ba:c0:4e:23:
b6:c0:3b:12:e4:bc:48:4f:0f:a9:44:95:0a:7b:a1:
85:d3:f2:cb:44:f5:41:e1:e7:21:db:f2:d1:0b:70:
72:98:37:02:c3:e9:5e:44:5b:8d:06:ee:c7:76:cb:
ae:eb:5b:41:85:25:cd:f4:68:51:16:dc:b1:f4:13:
d0:6f:be:2b:a4:c4:73:71:c3:c0:90:db:29:9f:5f:
4d:68:ce:9d:51:98:68:7b:ab:51:9b:6e:ba:5f:db:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:11:9B:C2:6D:1F:62:A8:44:E6:CF:6F:A4:DB:11:46:9F:A1:4C:05
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212980.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.76.0/24
IPv6:
2a13:9500:16e::/48
Signature Algorithm: sha256WithRSAEncryption
56:3d:49:7a:e8:72:c5:96:ce:5f:b6:6c:a5:fd:7f:2d:5b:8d:
d0:2f:c4:61:ee:f0:75:36:c7:4e:7c:56:91:d6:81:94:bc:de:
f8:29:17:31:52:34:91:5f:60:ad:e9:0b:b7:98:03:be:42:fe:
10:e8:91:00:82:b9:85:f3:00:5a:a8:b5:c4:12:5c:1f:1f:18:
73:0a:24:00:08:fb:52:a7:0a:c2:9c:93:9f:45:32:33:3d:f0:
04:4e:1a:c7:47:a1:1f:78:80:26:ff:8f:53:49:0a:c7:e5:c9:
c5:a3:e6:f1:17:01:48:bf:0c:5d:d6:13:e1:7a:29:7e:f5:b8:
d5:02:52:89:f2:a6:ed:2b:c0:1d:50:b4:43:eb:c2:bd:41:a3:
7f:65:f6:19:77:ee:4b:0b:58:a1:79:20:e2:05:c1:3d:4b:56:
12:b8:9f:8f:5f:51:b5:4e:e7:3d:97:13:92:de:09:5c:6b:1e:
cb:0a:0c:ef:d5:8e:fc:76:02:2b:c5:94:44:44:91:47:71:c2:
5a:9b:68:d2:90:a1:ea:b6:9c:04:1e:a5:8e:a8:c5:f0:60:e6:
f0:46:fa:ef:40:2c:d0:cb:92:f9:43:9b:dc:1a:d6:20:de:fb:
22:f1:68:1d:82:f7:be:4e:db:9d:9c:eb:cd:00:2d:8a:c5:a8:
99:16:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:47:13 2026 by rpki-client