Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212173.roa
File: AS212173.roa (raw, json)
Hash identifier: kdvLAosdJTrfEQbFITOoS+GtPzFd8wkShHpQjHd7dQY=
Subject key identifier: 8E:71:D3:08:1F:49:49:BA:6A:73:D7:49:B8:49:69:19:32:1B:E9:16
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3D9F2FA705176D02A501D562CC2FB2EC2954EFD6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212173.roa
Signing time: Tue 18 Aug 2026 16:09:03 +0000
ROA not before: Tue 18 Aug 2026 16:04:03 +0000
ROA not after: Tue 17 Aug 2027 16:09:03 +0000
asID: 212173
IP address blocks: 2a0f:85c1:d4a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9f:2f:a7:05:17:6d:02:a5:01:d5:62:cc:2f:b2:ec:29:54:ef:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 16:04:03 2026 GMT
Not After : Aug 17 16:09:03 2027 GMT
Subject: CN=8E71D3081F4949BA6A73D749B8496919321BE916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d1:6d:6c:42:2e:c3:ee:8a:5f:c6:cd:d9:19:
bc:b2:9c:ac:6d:62:59:28:9e:be:f6:97:71:c1:b6:
90:f8:ed:97:33:d8:15:a6:5a:aa:99:f8:a9:0a:10:
d3:e6:f7:80:9d:46:8d:7e:5e:ec:9a:97:9f:17:7b:
f0:4d:89:f1:06:cd:61:ea:68:56:ee:56:07:31:c3:
f9:bf:4f:03:34:a1:3b:b5:2e:ce:4d:48:57:41:92:
aa:00:5d:c3:80:d8:f5:cd:f2:20:f6:5a:97:98:f5:
f0:47:33:2b:1d:6c:b5:8d:18:a4:49:7b:54:24:05:
91:0b:5d:57:d3:3e:aa:03:9f:df:03:8c:72:14:e7:
b3:a4:33:11:20:de:e2:87:bf:02:39:5d:be:73:4c:
1d:6c:25:59:99:8b:4a:34:e5:5b:e6:34:53:4a:a3:
2d:43:3f:04:ed:12:8c:84:aa:49:a3:bf:22:2e:c7:
4b:3c:db:e9:c6:7a:93:8a:fe:fd:f9:41:b9:e4:a2:
b9:48:e9:11:17:34:4a:ae:33:66:4a:8b:96:6d:04:
d1:5d:2b:84:e2:01:4c:70:f9:b6:32:b3:84:45:4f:
90:5c:d5:d4:13:a7:51:a3:82:41:af:37:40:8d:27:
c2:1d:20:f4:41:ed:0f:0c:78:b4:a0:c2:8b:65:43:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:71:D3:08:1F:49:49:BA:6A:73:D7:49:B8:49:69:19:32:1B:E9:16
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d4a::/48
Signature Algorithm: sha256WithRSAEncryption
81:37:e3:78:a9:87:d9:fa:7f:90:fc:42:88:18:54:ee:f4:53:
f3:96:e4:48:3f:6c:3a:02:65:9c:02:d4:b8:7e:e7:de:a6:69:
12:76:b5:99:93:34:87:5c:2b:eb:b4:3d:5b:89:f9:17:1d:91:
b1:bb:a9:36:0a:da:45:7a:75:da:46:0d:fa:4c:9c:b9:31:3b:
31:7c:e9:fc:32:02:e9:6c:6f:09:e1:50:f1:de:32:c0:13:63:
63:70:8e:b4:43:ef:56:3b:85:8f:d4:e8:71:f1:3f:19:6b:5c:
0f:10:48:0b:55:b0:6c:63:bb:67:e1:ae:9a:98:9d:12:9f:82:
70:04:52:c9:96:c5:80:6c:21:23:e6:76:f8:65:11:96:a4:d1:
7e:64:bc:bc:67:c7:66:78:b7:b5:b7:e1:29:e3:27:60:a3:71:
3d:74:63:b7:bf:35:86:0c:21:65:db:3c:ca:c2:11:9e:cf:1d:
3c:80:2e:bd:01:5f:eb:68:79:1a:9f:a6:d4:4b:24:86:90:80:
e4:08:2d:9c:bb:f1:70:3d:e2:37:ed:3d:75:18:58:04:6d:bc:
4c:a8:2d:53:e8:cd:9b:4c:ca:7a:a6:aa:f4:a5:25:9b:32:47:
2d:30:1b:c9:a3:64:74:4b:a5:d8:47:5c:bb:69:1c:a1:6c:dc:
27:2d:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:04:32 2026 by rpki-client