Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212353.roa
File: AS212353.roa (raw, json)
Hash identifier: J3m83jWKkZAocOXeQvKYCLOOnVclCblBxv+5eN12lkY=
Subject key identifier: 9C:34:75:17:0C:5F:72:FE:A2:FF:D3:B8:A2:43:89:47:5C:59:4D:EF
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2C4E4CA2BC88FC78F7F7EB60DEAADC853D4197BD
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212353.roa
Signing time: Fri 25 Sep 2026 15:42:44 +0000
ROA not before: Fri 25 Sep 2026 15:37:44 +0000
ROA not after: Fri 24 Sep 2027 15:42:44 +0000
asID: 212353
IP address blocks: 2a14:7580:fff6::/48 maxlen: 128
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4e:4c:a2:bc:88:fc:78:f7:f7:eb:60:de:aa:dc:85:3d:41:97:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 25 15:37:44 2026 GMT
Not After : Sep 24 15:42:44 2027 GMT
Subject: CN=9C3475170C5F72FEA2FFD3B8A24389475C594DEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:76:56:9a:f7:a8:76:a1:4c:de:74:e0:c4:
58:47:bc:12:ee:07:de:bf:c6:2d:db:12:dc:ab:e6:
d4:00:9b:cf:04:d7:74:a1:a4:45:3b:5c:14:c3:1a:
45:1e:1c:22:d0:a8:d2:e2:34:e3:04:b2:fc:cd:8c:
05:8e:13:42:a9:44:7b:09:10:39:bc:8e:ab:f4:56:
d2:4c:62:ba:dd:bd:86:65:fc:c3:73:1a:7d:db:7b:
2b:31:c8:d3:c9:98:3c:c8:30:49:2e:1e:81:d7:8f:
f1:3f:09:e3:35:52:dd:e9:42:91:6b:fd:70:d0:18:
9f:7d:1a:99:20:4a:b4:e9:e5:a2:16:78:13:6d:65:
0d:8d:f2:49:77:46:7e:6f:20:04:10:8c:45:36:e9:
35:7f:4e:d7:f8:5b:a5:05:1b:03:d1:54:d8:db:60:
ed:a3:e1:ec:b7:14:ef:70:5c:2f:f6:98:9e:1f:8a:
a8:f9:ca:ed:82:8b:5a:94:56:33:02:1f:ce:d2:f5:
1b:6f:49:44:10:b7:29:62:ab:3a:38:80:83:b2:d4:
73:60:76:3f:1e:68:0e:f0:4b:e6:5e:54:7a:e6:33:
5a:fc:d9:d9:fa:24:a2:10:62:d7:e7:c1:99:23:04:
15:33:75:46:95:4f:b0:f0:6f:10:75:a6:31:e3:c7:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:34:75:17:0C:5F:72:FE:A2:FF:D3:B8:A2:43:89:47:5C:59:4D:EF
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212353.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff6::/48
Signature Algorithm: sha256WithRSAEncryption
3e:90:f9:1c:9d:51:08:ef:bb:d2:62:01:7d:c2:17:0a:d4:1d:
c5:67:00:75:2a:16:f9:a1:ce:4c:9a:dd:f4:51:51:4f:e5:1c:
cc:fe:46:c3:c1:92:db:df:64:fd:68:ce:63:71:e0:52:ef:01:
47:a0:bc:fe:33:7c:2d:71:41:58:39:47:08:10:ef:21:f4:c8:
86:c6:e3:82:ad:dc:ae:22:ea:9c:dd:51:10:01:16:b1:df:35:
c2:f4:71:fd:30:ab:fa:38:f3:f8:31:4d:28:70:b5:2a:70:bf:
32:45:b4:3b:cf:7e:e0:b6:8d:58:62:f7:1c:37:aa:04:1a:2e:
1c:81:fd:11:2b:79:8b:ed:7f:83:59:f7:c9:11:68:81:a4:da:
03:15:69:ad:24:0a:67:89:37:4b:62:93:d4:40:78:9b:4b:67:
85:f8:02:38:32:f1:f4:7c:e0:ff:34:99:49:73:d8:4a:f7:77:
0d:91:08:c1:8e:99:3f:ce:48:13:91:26:2b:8b:c2:c0:24:5c:
d0:c0:a7:92:07:8d:2c:bd:1f:09:87:0b:d1:2d:11:7b:32:17:
70:6f:9a:fd:a1:e9:0e:60:f1:55:ae:d2:95:4f:22:7e:8c:63:
f5:6d:9d:6a:d0:58:de:40:28:b1:3e:6d:61:58:87:20:0d:0c:
5e:61:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 00:39:22 2026 by rpki-client