Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212306.roa
File: AS212306.roa (raw, json)
Hash identifier: q20wBuFC2sgEvulRyML2U1nWJhlEzmkee637NlpZHHg=
Subject key identifier: 9A:32:08:ED:4B:8B:C8:27:16:58:9A:3C:F6:6E:CF:06:4C:2B:2F:F4
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 66E13A14D218CBB270E8AD9A910810A4E754790B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212306.roa
Signing time: Thu 08 Oct 2026 15:09:16 +0000
ROA not before: Thu 08 Oct 2026 15:04:16 +0000
ROA not after: Thu 07 Oct 2027 15:09:16 +0000
asID: 212306
IP address blocks: 2a0f:85c1:d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e1:3a:14:d2:18:cb:b2:70:e8:ad:9a:91:08:10:a4:e7:54:79:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 8 15:04:16 2026 GMT
Not After : Oct 7 15:09:16 2027 GMT
Subject: CN=9A3208ED4B8BC82716589A3CF66ECF064C2B2FF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:cd:0b:fe:17:3e:e9:f3:eb:a1:45:3b:a8:
d1:0f:9f:d4:a1:fb:85:2e:cd:23:b9:eb:c5:59:4f:
10:c8:e8:2e:0d:d7:86:dd:f2:de:28:14:0d:b2:58:
b5:2f:28:b8:08:28:27:7e:8f:4a:e5:2d:99:92:53:
cb:59:0c:3c:ff:96:75:80:fd:bb:2b:7c:7d:bb:f5:
c9:e8:1d:f1:e3:87:5b:09:c4:8e:70:e5:ac:ad:85:
b8:53:6b:1a:e0:c9:c6:75:b5:47:81:f1:5b:ad:80:
27:4e:93:f4:08:33:66:55:9d:0e:27:74:f1:4c:4a:
2d:30:c5:c9:12:4e:a0:c0:d8:5c:28:68:4c:e4:0f:
05:53:d3:e1:7f:19:00:ba:fe:87:6d:4c:21:8e:a9:
b0:a1:4e:ba:59:e5:90:4a:43:e2:85:52:11:d0:c9:
24:3b:dd:75:7d:d5:e7:dd:80:8b:ee:e6:6a:db:96:
11:62:5b:4d:20:80:76:b7:9f:5e:dd:a4:bf:9e:d4:
08:94:d7:fc:95:2e:a1:75:21:05:c4:e3:4c:13:e3:
78:43:52:be:eb:3e:a6:e0:d0:aa:32:9c:ec:b7:92:
95:11:4d:5d:33:c3:13:1d:73:77:a0:8f:dc:fc:74:
c8:9e:b7:54:80:11:13:c8:09:50:7e:df:e7:22:d7:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:08:ED:4B:8B:C8:27:16:58:9A:3C:F6:6E:CF:06:4C:2B:2F:F4
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212306.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d40::/48
Signature Algorithm: sha256WithRSAEncryption
b0:cc:58:41:b9:1f:9e:a4:3d:ef:4b:fb:c7:a3:82:3e:f8:a5:
3a:28:88:6a:3a:db:10:dd:e1:df:59:7f:c8:83:fa:c5:39:6d:
d3:5b:f9:6e:91:f7:07:96:a1:68:dd:c9:cb:9b:8b:09:3e:4e:
34:fb:4a:69:53:4a:78:04:55:99:ae:6a:dc:eb:fa:0a:e4:c6:
37:a8:66:03:25:08:4f:33:0f:f3:f9:4f:de:b0:8a:e0:20:4f:
12:ff:13:b8:5a:f7:42:01:5a:d0:60:97:f6:34:1f:e5:e6:99:
c2:11:92:40:c0:af:7e:0a:32:f7:c2:c7:f7:ea:a5:96:c2:91:
ee:e9:5a:a5:4b:c0:11:24:6d:46:5d:c9:9e:8d:6d:36:37:b8:
97:59:31:8d:7e:f4:2d:bd:1e:d6:0d:57:6b:7d:92:27:59:4e:
6e:07:86:10:12:c2:ed:16:a6:9c:4c:98:ba:30:f0:6a:53:ee:
8c:d2:b2:66:7b:4d:5a:bf:c3:e4:2d:de:ec:a4:fb:e8:ad:01:
13:44:e8:0e:ef:48:81:c8:32:5d:b6:c2:75:5b:74:2d:2e:2f:
4e:40:b5:02:9b:58:4e:ec:6f:83:c2:dd:f3:51:d5:f2:a2:6e:
6e:81:31:ac:15:60:8d:1f:d1:55:ee:a6:5d:7f:15:83:ea:33:
f6:d5:9e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 00:40:56 2026 by rpki-client