Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212844.roa
File: AS212844.roa (raw, json)
Hash identifier: Zcl38xWp/PvrTNmn1PHiaWgaxIxGYjs1FOWCJ1vHcMM=
Subject key identifier: 2D:52:20:E8:5B:BE:6E:F0:A5:41:6D:C9:69:CA:66:7C:C4:55:49:98
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 15898D5A12C51DBA90435F2B120FBF4462430D5D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212844.roa
Signing time: Fri 26 Jun 2026 08:08:47 +0000
ROA not before: Fri 26 Jun 2026 08:03:47 +0000
ROA not after: Fri 25 Jun 2027 08:08:47 +0000
asID: 212844
IP address blocks: 2a0f:85c1:810::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:89:8d:5a:12:c5:1d:ba:90:43:5f:2b:12:0f:bf:44:62:43:0d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:47 2026 GMT
Not After : Jun 25 08:08:47 2027 GMT
Subject: CN=2D5220E85BBE6EF0A5416DC969CA667CC4554998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:dd:e5:6e:23:6d:dd:dc:de:6d:9f:0c:65:
21:2b:58:ed:27:4d:86:9c:a7:b1:bc:db:3c:d4:08:
22:66:26:43:27:13:0b:4d:bc:eb:bf:30:c8:4f:93:
ea:1a:92:99:dc:27:4d:35:56:8e:44:36:39:b4:95:
c1:49:54:6b:56:5c:17:f6:1f:f9:c2:67:ad:79:7f:
16:03:e1:27:af:d3:86:bb:67:31:52:5c:9c:f8:b7:
fe:db:a4:05:4e:46:91:0e:b4:3c:97:b7:10:cd:27:
cd:37:3d:1e:35:73:21:2b:63:9b:6f:a9:e2:ed:25:
b6:c4:1a:28:d8:a8:64:da:25:39:dd:e0:f2:68:42:
90:84:55:7c:99:4a:24:63:d0:9a:41:49:a0:a7:87:
48:5b:51:e9:c6:46:85:0a:a3:69:70:d5:30:64:b3:
9d:31:22:62:15:35:0a:0f:b3:93:c2:26:99:16:38:
74:77:61:f8:af:13:05:fd:5d:d6:7b:a2:04:a5:bc:
c7:b6:71:94:80:38:81:c1:72:77:08:2b:df:b9:02:
ea:31:c7:42:39:1a:1f:cd:68:40:d1:dc:39:37:75:
dd:90:23:83:70:ac:28:ff:aa:79:be:a1:69:9c:2c:
35:69:17:4d:ba:18:72:f8:f8:bf:84:29:06:10:82:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:52:20:E8:5B:BE:6E:F0:A5:41:6D:C9:69:CA:66:7C:C4:55:49:98
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:810::/48
Signature Algorithm: sha256WithRSAEncryption
b7:a5:fe:c1:1b:bb:a6:94:ae:a4:ba:0e:af:f4:65:ec:a7:7f:
37:ee:33:81:33:52:ca:84:4c:88:bb:55:28:d4:17:bc:bb:b0:
51:2a:06:a9:9c:f8:1b:36:e4:b4:d7:74:e0:3d:8b:df:8a:93:
c3:ab:05:9f:1d:8c:73:e9:3d:14:e3:aa:d8:d8:02:7d:8e:77:
07:40:59:c4:da:6f:61:1b:50:9d:52:af:f0:0f:95:05:2a:e9:
76:5e:77:c5:6f:c2:62:54:ae:71:b6:99:60:28:fd:a4:a8:09:
c2:d8:32:ba:6e:f3:34:da:31:16:76:c5:3b:4a:cd:5a:8e:d6:
26:0d:6d:19:32:8f:f2:2c:73:93:d4:db:81:13:8b:22:4b:bc:
42:0d:b6:76:b3:97:72:66:ca:3c:da:c2:f2:95:7e:bc:7c:7a:
b4:be:4b:85:d8:99:3f:01:ae:8a:88:1a:30:10:6c:cc:5b:92:
53:52:aa:90:98:c4:cc:c2:6f:98:65:c2:50:0a:26:15:da:93:
82:33:90:52:d3:21:91:44:de:9b:10:3e:5d:70:4b:92:46:81:
9c:06:b8:4e:d6:99:80:b7:c1:a1:94:38:c9:fe:9a:d6:91:7b:
7a:d2:b9:91:ac:2b:03:64:d6:9e:f5:45:eb:4c:4d:fd:b0:7d:
51:24:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:44 2026 by rpki-client