Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212387.roa
File: AS212387.roa (raw, json)
Hash identifier: dvXpmzv0Q5etreEPn6wMRMt/JgY1U0RZpSOz4Su4Ro0=
Subject key identifier: 84:F7:1D:16:6F:6F:83:35:0B:3A:FE:92:72:91:FF:9F:32:12:0C:C1
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 13CDD0D66D3551F576EDE36A7A0BA4F0657B121D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212387.roa
Signing time: Wed 14 Oct 2026 04:48:47 +0000
ROA not before: Wed 14 Oct 2026 04:43:47 +0000
ROA not after: Wed 13 Oct 2027 04:48:47 +0000
asID: 212387
IP address blocks: 2a14:7581:ffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:cd:d0:d6:6d:35:51:f5:76:ed:e3:6a:7a:0b:a4:f0:65:7b:12:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 14 04:43:47 2026 GMT
Not After : Oct 13 04:48:47 2027 GMT
Subject: CN=84F71D166F6F83350B3AFE927291FF9F32120CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:02:e8:ce:7f:a0:93:05:7a:a9:82:48:60:23:
23:e1:ef:a5:7b:e3:69:e0:83:08:59:20:f9:95:a7:
b0:ae:ba:20:e3:85:df:fa:03:43:71:06:13:4f:62:
93:cc:c3:05:ae:d9:d5:1d:73:d2:1c:32:dd:7f:cb:
b7:61:d8:03:43:96:41:b4:54:c0:37:19:b6:f3:8f:
83:e8:46:2d:6e:65:20:36:f9:ed:67:ee:46:43:71:
60:14:1d:d5:a0:05:f6:77:62:86:49:bd:cc:70:33:
35:9e:2f:18:76:0c:cf:c0:dd:8a:ff:a1:20:a5:88:
31:cf:4c:8b:54:39:3b:ff:f7:e1:5d:60:28:69:3a:
1f:90:9b:a9:01:8f:9f:25:c5:63:7c:1f:61:42:67:
11:b5:d7:ce:da:77:59:2d:cb:a4:ee:69:78:23:5a:
ca:62:b4:be:50:42:36:b0:e8:9c:af:88:b4:7b:c9:
68:83:ef:bf:ec:2c:e7:fc:bc:d5:af:2a:7a:18:ef:
8b:47:24:1e:01:08:5c:93:46:ed:44:0b:a8:ca:01:
5d:7b:34:cc:01:d9:1b:c5:74:8c:f8:7d:02:6e:21:
45:9d:6c:87:ba:b5:2f:f8:8b:cb:4f:e5:68:81:8f:
ba:6a:fb:e9:73:41:3c:fd:dc:55:95:ea:43:13:cb:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:1D:16:6F:6F:83:35:0B:3A:FE:92:72:91:FF:9F:32:12:0C:C1
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ffe::/48
Signature Algorithm: sha256WithRSAEncryption
6b:ba:69:8c:05:1f:79:8c:1c:c0:67:8c:08:e2:5e:15:51:45:
af:d2:c4:80:82:20:ed:37:97:f0:df:25:fe:97:6e:15:ba:ea:
77:e5:8b:ad:33:aa:e0:63:fb:70:29:a9:ee:61:d0:04:05:d6:
19:04:99:c8:b0:f8:5d:a7:12:8c:b9:90:e0:cc:51:74:9f:50:
c4:86:d8:11:fc:d7:b3:55:d7:fa:56:ec:17:ef:1a:1c:28:76:
c5:90:73:a3:27:c1:20:c4:da:59:54:d0:05:43:d8:0c:c2:9f:
d2:19:75:d2:f0:e0:09:16:6a:81:c4:b1:d0:dd:0e:18:38:56:
43:13:57:d4:56:49:18:0c:d0:23:fd:a1:63:8b:91:1e:4f:d3:
90:3c:69:0a:bc:9b:3a:58:2b:97:1b:91:c0:70:97:03:1b:b5:
d4:d9:2c:3b:6e:8b:be:e3:05:64:e6:32:80:3c:4b:5c:62:1b:
18:a5:cf:c1:b9:8c:e3:ff:6d:83:59:c5:18:bf:d9:83:e0:ef:
ce:82:ab:3d:53:23:92:ab:fb:56:c6:53:3c:70:c7:57:0f:59:
10:ab:34:d9:fc:5b:1f:eb:91:d7:78:3f:40:a2:5a:d8:57:2c:
ff:16:6c:18:43:5d:4f:ef:10:69:06:c2:62:39:81:bb:d6:7d:
11:8d:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:39:50 2026 by rpki-client