Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212895.roa
File: AS212895.roa (raw, json)
Hash identifier: zbjsvb9BUzLTo/9VFC60G+kHsHd5bvfDiMxQvjiBrB8=
Subject key identifier: B1:D1:A4:DF:8D:48:73:B9:9C:E4:34:25:53:D6:6D:4D:A3:BB:7C:E8
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3F9C9EF511AB2D834676E2EFB003A3E834BAE46D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212895.roa
Signing time: Wed 26 Aug 2026 18:32:07 +0000
ROA not before: Wed 26 Aug 2026 18:27:07 +0000
ROA not after: Wed 25 Aug 2027 18:32:07 +0000
asID: 212895
IP address blocks: 2a14:7583:5800::/42 maxlen: 48
2a14:7583:5840::/42 maxlen: 48
2a14:7583:5880::/42 maxlen: 48
2a14:7583:58c0::/42 maxlen: 48
2a14:7583:ac00::/38 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9c:9e:f5:11:ab:2d:83:46:76:e2:ef:b0:03:a3:e8:34:ba:e4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 26 18:27:07 2026 GMT
Not After : Aug 25 18:32:07 2027 GMT
Subject: CN=B1D1A4DF8D4873B99CE4342553D66D4DA3BB7CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:fa:8e:72:2c:ba:29:d6:db:0f:2b:e8:11:
95:5f:82:de:a1:a6:d0:c2:7a:db:13:33:ff:e4:9c:
de:7f:e1:9c:2e:d4:fe:07:33:e9:aa:c8:e8:0e:33:
e0:cb:aa:8d:a7:c5:da:4e:9b:b0:18:98:fc:f7:7f:
65:33:1b:4a:fa:99:be:7c:c3:02:36:6d:de:d1:b2:
16:a3:70:54:ca:91:6e:6b:b6:1f:d7:b1:0b:7d:01:
cc:78:58:ab:22:d4:61:56:5e:75:4f:59:a9:2b:80:
f4:92:b1:28:0a:f6:80:f5:12:f1:49:98:40:80:e7:
51:ce:d4:8c:71:a7:84:93:44:2d:45:6e:ff:b6:e1:
da:ec:16:75:b3:bb:bb:af:dd:29:94:c2:93:a7:14:
e9:6c:49:ac:80:06:ce:34:9f:f4:dd:00:99:63:43:
b3:d1:e6:6b:35:18:39:f2:63:ed:d6:e4:81:65:89:
c7:ef:0b:2a:bc:c2:e1:6f:fc:42:57:ef:1e:db:90:
c0:3a:81:c3:e1:2e:c9:c8:81:86:78:18:c0:d2:d7:
9d:b2:77:8f:f5:88:70:eb:bc:15:01:54:44:30:2f:
69:ce:43:75:31:9e:1c:c9:eb:d2:dc:bb:c9:63:83:
05:eb:d8:e2:a9:f9:2e:37:62:d4:62:f4:ed:90:b9:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D1:A4:DF:8D:48:73:B9:9C:E4:34:25:53:D6:6D:4D:A3:BB:7C:E8
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:5800::/40
2a14:7583:ac00::/38
Signature Algorithm: sha256WithRSAEncryption
3f:e5:ab:4c:46:2f:d0:e9:50:d4:79:50:ea:7f:e0:08:fb:5b:
1b:66:5b:44:8a:4f:70:3e:fe:e4:6e:78:56:40:c6:d0:a0:c3:
1b:69:35:b7:6f:00:fc:90:54:78:ca:73:e6:20:68:b4:3f:4d:
00:2c:14:10:ea:3f:48:f1:ba:76:9a:d0:a0:80:6c:c5:28:8c:
b5:2b:0c:02:a0:46:10:cf:ef:2f:ff:3c:4c:b8:15:d5:48:bd:
a1:b2:a1:9d:61:46:c5:52:55:f6:a1:ca:e7:50:bd:e8:a3:52:
1a:d1:23:d0:ff:11:bd:c3:06:8c:10:90:dc:b4:a9:73:c9:7c:
14:4d:a7:d1:bb:cb:c1:3c:c6:c3:0f:af:15:0f:81:fb:09:05:
74:0e:1f:5d:49:82:f3:49:36:b3:10:04:0b:22:87:ba:4b:dc:
a8:aa:47:b9:ba:d9:20:6b:63:56:84:fc:c0:34:10:cc:b0:ff:
0e:8f:0c:92:6c:ab:0a:78:b2:c3:93:93:c8:e4:06:96:7e:c1:
3d:a3:bc:62:d1:ad:c2:ff:73:10:d0:ac:7d:1c:09:fa:11:af:
3b:c8:71:7d:5d:48:bf:3e:98:37:4a:5d:ac:f3:1a:c6:4e:3a:
62:ac:c7:0f:4d:74:f5:7d:50:92:b3:d3:c5:81:1a:c4:ff:95:
3b:f0:e0:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 4 18:40:51 2026 by rpki-client