Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212895.roa
File: AS212895.roa (raw, json)
Hash identifier: 9fvjwHLQ1lYUe1r3xS5j/iG1RUhlsX64+rpEzgzALRc=
Subject key identifier: EB:40:E0:02:FD:CF:8A:A0:D5:45:55:D9:C0:79:52:11:7C:28:2F:E1
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7F09A672BBB216EC004D8D3800902C2CEC10749E
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212895.roa
Signing time: Thu 18 Jun 2026 22:51:06 +0000
ROA not before: Thu 18 Jun 2026 22:46:06 +0000
ROA not after: Thu 17 Jun 2027 22:51:06 +0000
asID: 212895
IP address blocks: 2a14:7583:58c0::/42 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:09:a6:72:bb:b2:16:ec:00:4d:8d:38:00:90:2c:2c:ec:10:74:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 18 22:46:06 2026 GMT
Not After : Jun 17 22:51:06 2027 GMT
Subject: CN=EB40E002FDCF8AA0D54555D9C07952117C282FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:16:3a:22:63:e0:1f:c8:2f:55:7b:90:86:
0c:b8:2f:3a:05:ae:62:68:45:0b:b7:92:04:92:41:
4e:1f:39:fb:f5:1e:0e:cc:31:f4:02:b5:98:35:6e:
fb:4b:ee:08:99:66:02:55:3e:c2:9b:0c:b8:a7:01:
b3:5d:5d:15:f0:96:5c:0f:35:5e:3b:54:54:ab:ea:
d9:ca:bc:77:a3:7a:ff:65:0f:77:2c:15:7c:57:23:
2a:c0:89:53:20:1a:9c:5c:50:c9:b3:03:e9:10:9a:
ef:01:a2:5d:bd:b5:ad:94:d7:b0:f3:82:d9:2a:c0:
95:8f:9b:de:cf:6c:91:73:c1:d6:16:b9:1b:c0:6d:
0e:f9:d2:38:2b:17:89:b5:8b:76:ac:67:41:25:bc:
70:26:75:e1:b9:e5:a1:33:12:c4:a5:bf:44:35:92:
d5:72:d6:73:7d:82:ef:6b:66:75:8b:cf:7f:f7:c8:
7c:fe:be:5f:05:96:7d:73:1c:bf:a9:ff:88:e2:ba:
b7:97:d5:c2:0a:ad:80:fa:3b:ae:8a:9a:ca:d0:eb:
af:b3:27:3e:c7:47:0b:a2:4c:3a:1b:eb:96:b6:13:
c7:e3:0d:e8:23:4f:41:ff:1d:12:b1:8f:8f:05:4e:
93:a6:6c:76:4d:b4:8a:63:5f:b8:b5:84:11:49:30:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:E0:02:FD:CF:8A:A0:D5:45:55:D9:C0:79:52:11:7C:28:2F:E1
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:58c0::/42
Signature Algorithm: sha256WithRSAEncryption
52:ad:f4:7b:35:a4:80:24:38:ec:73:3e:fe:bd:4c:6d:55:30:
73:bb:4d:d3:ba:bb:b4:4c:6c:98:47:b0:3f:16:28:59:f6:db:
64:0e:65:7e:a1:31:66:f5:5b:61:29:3e:0c:f4:b3:48:36:85:
8a:3f:da:fb:34:f0:c3:b9:da:45:ab:d6:7a:ad:1c:b5:ed:ec:
26:67:88:e7:b3:35:12:2b:86:3b:0e:25:50:72:d2:1e:4d:90:
81:40:20:c6:bd:28:23:90:c9:56:e7:59:94:62:6e:0b:c7:d5:
8b:fe:6b:04:98:30:45:a2:e7:58:8c:7d:79:cb:0c:06:68:cc:
91:3e:39:f0:c9:58:6d:3b:20:d1:0f:d0:d5:f6:c1:78:c2:ad:
a9:7c:af:0d:7f:5e:16:78:14:55:f9:dd:80:bc:7a:8f:2f:09:
f2:22:e2:cb:ac:0e:18:be:eb:54:f4:c6:03:c2:19:31:20:3d:
8c:5e:f5:f7:3a:d4:4a:fb:1f:2b:6a:48:5c:cf:5f:a4:33:70:
a4:ae:ad:68:d8:9f:8b:b4:ce:5c:15:c9:65:26:9f:fc:53:cd:
34:e6:c6:48:25:f8:60:94:f4:08:af:ce:94:7c:01:d3:69:89:
99:0c:29:a8:9c:4d:17:1f:2a:87:31:5d:bd:08:3f:a4:39:4f:
63:62:1b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:29:08 2026 by rpki-client