Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212503.roa
File: AS212503.roa (raw, json)
Hash identifier: UeAvqLREmzZZr5/F9e/gnpw3u2uju0/ZOALwWYl/DOA=
Subject key identifier: 6B:07:15:84:10:6B:12:9C:38:76:0F:5F:52:54:41:05:EB:A3:6E:4F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 422F675AF947CD438872F638428E1502F60F3302
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212503.roa
Signing time: Sat 15 Aug 2026 03:09:02 +0000
ROA not before: Sat 15 Aug 2026 03:04:02 +0000
ROA not after: Sat 14 Aug 2027 03:09:02 +0000
asID: 212503
IP address blocks: 2a0f:85c1:d42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 09:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2f:67:5a:f9:47:cd:43:88:72:f6:38:42:8e:15:02:f6:0f:33:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 15 03:04:02 2026 GMT
Not After : Aug 14 03:09:02 2027 GMT
Subject: CN=6B071584106B129C38760F5F52544105EBA36E4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:57:30:c1:c1:1c:f1:ed:a2:28:75:84:5d:f4:
4f:bd:67:75:b6:c6:b1:01:c4:fd:0e:7f:0c:71:06:
1c:29:f9:ff:2d:2f:6a:7b:b6:2c:4e:b4:b3:46:1b:
ea:96:ed:49:88:38:92:9e:12:bf:e2:b9:5a:c6:06:
70:f8:ae:c8:33:cd:47:9b:bc:35:aa:2c:26:53:63:
a9:76:2e:cb:c1:f4:2c:e8:5f:d9:09:87:f0:75:0c:
c9:11:18:a0:5d:3d:9d:d2:df:35:45:15:6e:4f:ce:
8d:ce:33:16:58:9c:2d:2b:1a:eb:68:32:65:b3:ce:
31:e8:13:e3:f5:83:f6:2c:76:aa:33:69:62:35:b9:
8d:2f:1c:b9:85:85:52:38:97:3e:6f:00:76:55:0d:
55:06:75:19:71:a5:ed:21:73:6e:4d:63:f8:07:83:
96:cf:93:a7:cd:77:7f:67:a3:ce:5e:79:12:02:68:
f1:32:82:d2:84:a5:2f:a0:4c:a7:69:a0:b9:ca:5c:
76:31:0f:05:51:fd:b6:00:67:e5:24:14:ac:02:d2:
b5:ed:82:72:a2:1b:7d:b4:4e:c8:d1:1f:a7:a2:3a:
69:4f:7a:bd:25:00:d2:be:2a:d0:88:d1:9e:76:ec:
be:c1:6e:af:97:a0:e8:af:01:c3:58:83:de:3f:ff:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:07:15:84:10:6B:12:9C:38:76:0F:5F:52:54:41:05:EB:A3:6E:4F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212503.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d42::/48
Signature Algorithm: sha256WithRSAEncryption
4d:9f:95:b8:73:98:0b:e4:07:25:c9:19:7d:43:77:2a:af:8f:
2f:7b:8f:dd:d1:2a:74:60:ed:cb:ac:ef:6b:cd:e6:56:5f:00:
25:3b:59:d4:8f:5d:42:0e:ac:da:d7:8b:4d:9c:b7:b6:5e:fb:
21:9e:cd:cd:bb:eb:13:23:4b:f5:0b:e3:13:23:7e:de:e8:0e:
d5:74:f5:3a:7b:15:de:f7:38:a5:a1:cf:59:39:83:1b:17:84:
35:66:60:3f:d2:b9:d5:d9:30:18:40:b8:5a:e8:dc:25:98:34:
0d:d9:71:d3:bf:22:01:82:b5:17:7f:65:43:c1:8c:b4:e3:89:
bb:66:ed:57:94:37:b2:44:de:af:bf:8d:24:6c:ef:df:5d:88:
3f:67:c2:8a:71:96:60:8c:f3:3e:f2:70:76:a3:06:cd:0b:f5:
7d:80:18:6c:44:47:80:ae:f5:df:88:cf:d5:7d:d8:f0:7b:e1:
7a:16:13:c1:9a:70:74:3c:c5:00:e7:ee:e6:8e:fb:c2:12:fc:
50:0f:e9:7e:bf:c8:d6:76:10:59:30:a1:96:77:1d:9b:c8:ab:
a8:ef:2f:83:e6:9f:79:ee:69:fd:19:64:0a:5a:9e:ec:1f:f8:
62:69:f9:36:c7:e3:95:96:e9:0d:d7:b8:37:bc:65:1b:98:17:
cf:29:2d:a2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUQi9nWvlHzUOIcvY4Qo4VAvYPMwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA4MTUwMzA0MDJaFw0yNzA4MTQwMzA5MDJaMDMxMTAvBgNV
BAMTKDZCMDcxNTg0MTA2QjEyOUMzODc2MEY1RjUyNTQ0MTA1RUJBMzZFNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpVzDBwRzx7aIodYRd9E+9Z3W2
xrEBxP0OfwxxBhwp+f8tL2p7tixOtLNGG+qW7UmIOJKeEr/iuVrGBnD4rsgzzUeb
vDWqLCZTY6l2LsvB9CzoX9kJh/B1DMkRGKBdPZ3S3zVFFW5Pzo3OMxZYnC0rGuto
MmWzzjHoE+P1g/YsdqozaWI1uY0vHLmFhVI4lz5vAHZVDVUGdRlxpe0hc25NY/gH
g5bPk6fNd39no85eeRICaPEygtKEpS+gTKdpoLnKXHYxDwVR/bYAZ+UkFKwC0rXt
gnKiG320TsjRH6eiOmlPer0lANK+KtCI0Z527L7Bbq+XoOivAcNYg94//5QJAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUawcVhBBrEpw4dg9fUlRBBeujbk8wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEyNTAzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQ1CMA0GCSqGSIb3DQEBCwUAA4IBAQBNn5W4c5gL5AclyRl9Q3cqr48ve4/d0Sp0
YO3LrO9rzeZWXwAlO1nUj11CDqza14tNnLe2Xvshns3Nu+sTI0v1C+MTI37e6A7V
dPU6exXe9ziloc9ZOYMbF4Q1ZmA/0rnV2TAYQLha6NwlmDQN2XHTvyIBgrUXf2VD
wYy044m7Zu1XlDeyRN6vv40kbO/fXYg/Z8KKcZZgjPM+8nB2owbNC/V9gBhsREeA
rvXfiM/Vfdjwe+F6FhPBmnB0PMUA5+7mjvvCEvxQD+l+v8jWdhBZMKGWdx2byKuo
7y+D5p957mn9GWQKWp7sH/hiafk2x+OVlukN17g3vGUbmBfPKS2i
-----END CERTIFICATE-----
Generated at Sat Aug 29 13:50:11 2026 by rpki-client