Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212802.roa
File: AS212802.roa (raw, json)
Hash identifier: cNZoHpYjIYpm2wjoVOQNW8qrvY8LN9wIHf2kpy7S4h4=
Subject key identifier: 61:00:0D:B4:C3:4A:85:77:7F:CA:E1:06:6C:EF:24:DF:27:75:53:F3
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 44F5149AA161D7DFDB150E3E3B8A764374A1D4A9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212802.roa
Signing time: Thu 20 Aug 2026 02:09:07 +0000
ROA not before: Thu 20 Aug 2026 02:04:07 +0000
ROA not after: Thu 19 Aug 2027 02:09:07 +0000
asID: 212802
IP address blocks: 2a0f:85c1:d4d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f5:14:9a:a1:61:d7:df:db:15:0e:3e:3b:8a:76:43:74:a1:d4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 20 02:04:07 2026 GMT
Not After : Aug 19 02:09:07 2027 GMT
Subject: CN=61000DB4C34A85777FCAE1066CEF24DF277553F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:42:fc:c6:89:94:bf:9d:b3:3c:12:f4:e8:
b2:38:3d:ae:ae:38:77:2b:2a:f1:76:34:b7:c9:71:
6d:1c:46:dd:ff:c0:55:3b:44:b5:0f:bb:13:3a:12:
64:dd:59:3f:47:91:ca:c1:60:32:95:df:f8:cc:ec:
ed:62:39:a5:3e:54:af:35:10:e1:6c:b1:33:e4:96:
85:49:5c:e0:d3:3c:79:f6:e2:8b:3c:87:12:1b:a5:
1b:8d:c4:85:90:46:91:c5:9c:23:80:f1:8e:cb:50:
4e:f0:d9:d0:e1:7b:8d:e6:87:a5:5c:71:56:ac:c2:
a5:c0:ca:65:a2:67:02:12:27:b5:cd:b4:80:b1:fb:
67:de:a5:ed:89:59:26:24:9f:78:e2:98:f3:71:aa:
d3:6d:d0:99:06:7a:7b:83:d4:21:be:3c:4a:f2:da:
64:e8:97:6b:08:e7:be:f9:97:06:ac:e9:47:ba:38:
66:94:84:3d:ea:9a:37:65:37:6c:57:de:12:c1:a3:
70:64:81:d0:4d:8c:6a:d5:d9:ec:f4:e7:e6:95:c4:
91:b5:58:72:81:ae:e1:f4:01:b3:c3:a8:a3:c6:55:
b8:92:81:a8:8a:5f:34:47:cc:96:30:69:34:41:4c:
88:12:1c:44:fa:80:bf:82:cf:95:b8:e7:8b:80:0d:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:00:0D:B4:C3:4A:85:77:7F:CA:E1:06:6C:EF:24:DF:27:75:53:F3
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d4d::/48
Signature Algorithm: sha256WithRSAEncryption
83:45:5f:ba:7b:8a:79:23:27:2f:b3:44:4d:60:2b:46:65:3a:
a4:d5:52:95:4f:0f:a7:6c:6b:5d:d2:ff:54:8d:9d:e9:a0:23:
12:df:8a:d2:c7:80:56:f5:3f:4f:46:96:0b:52:e8:4a:f5:28:
78:b4:07:fb:5c:b6:f4:02:52:1b:cf:f4:64:b7:f6:ce:ed:42:
79:c3:15:00:04:90:0c:cb:a3:42:65:25:7d:4b:c0:25:f2:bc:
f3:f2:8f:ac:12:6d:ea:60:41:a6:0e:9f:d9:0b:4c:26:18:70:
4e:3b:ef:46:f2:22:d8:1f:57:f7:50:12:c1:6e:b2:8f:af:ee:
e8:f5:e7:92:63:8f:11:7d:56:55:30:ee:51:c2:05:9e:11:1c:
e1:39:28:c9:cc:ff:ca:44:6f:5d:75:6b:43:e8:31:46:93:89:
11:8d:90:f7:3c:6c:c3:d2:3c:63:59:8e:cc:a2:24:4b:b5:77:
44:54:c2:84:eb:2b:f4:1d:0c:db:bb:e7:5b:b8:fe:da:87:1b:
15:ee:c5:01:2a:c4:d4:26:11:24:21:0a:07:84:1d:e7:7e:1a:
ab:f6:13:ec:76:bc:13:11:b0:77:e1:7f:ee:ba:c5:68:94:d9:
8b:7a:c7:1a:16:7e:93:42:ac:c9:c4:d6:86:3f:2e:54:98:ba:
f9:13:f3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:13:38 2026 by rpki-client