Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212890.roa
File: AS212890.roa (raw, json)
Hash identifier: lz7UEKKSXXpppoAsujA8sLGrZZkJPD2UBAJKocAeYiI=
Subject key identifier: 78:9A:74:9D:B7:05:9D:25:46:47:91:68:FC:B0:66:47:E0:E5:2E:A9
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 78C267970DD035A30BD855E76BC83C0116A4AF6D
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212890.roa
Signing time: Tue 19 May 2026 09:49:52 +0000
ROA not before: Tue 19 May 2026 09:44:52 +0000
ROA not after: Tue 18 May 2027 09:49:52 +0000
asID: 212890
IP address blocks: 143.20.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 21:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c2:67:97:0d:d0:35:a3:0b:d8:55:e7:6b:c8:3c:01:16:a4:af:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 19 09:44:52 2026 GMT
Not After : May 18 09:49:52 2027 GMT
Subject: CN=789A749DB7059D2546479168FCB06647E0E52EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:d0:ba:f5:11:13:9d:bb:84:b7:ab:6b:01:
b4:b8:73:b0:48:d4:19:37:b6:c3:e3:14:a8:95:00:
5e:d3:4d:76:76:25:19:93:6d:bf:08:d0:f2:eb:b0:
14:ac:d6:9e:0a:13:a3:e3:98:16:0b:0b:ca:cf:52:
b6:a7:ad:a7:ec:77:98:2d:78:20:77:e6:57:2e:27:
33:1c:a6:95:74:4b:94:a7:43:e0:b8:59:d3:ac:76:
e8:6e:68:8e:93:0c:0f:01:76:a4:66:e3:43:62:dd:
2e:a5:9f:81:70:4a:84:f8:89:79:65:1c:e7:72:20:
28:fc:81:a9:5e:43:78:03:51:9c:68:38:0e:55:4c:
51:86:1f:a1:65:88:1b:ff:15:2a:96:47:ae:5b:22:
60:51:36:98:09:29:19:82:51:1c:34:3c:b6:f3:be:
c7:a8:b4:84:4f:40:00:f4:1e:c9:76:68:a2:32:17:
98:06:b9:f6:24:72:25:da:dc:36:ea:07:a5:3f:77:
af:7c:b8:94:99:4a:47:c7:b8:40:b1:f0:ca:a7:53:
21:de:18:d2:1d:ff:15:31:d5:e8:44:1b:f9:1c:2b:
92:c9:be:65:dc:0c:a6:07:39:ec:3b:54:67:84:07:
c7:05:79:72:33:4a:7b:eb:cf:2b:a3:58:aa:f8:a2:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9A:74:9D:B7:05:9D:25:46:47:91:68:FC:B0:66:47:E0:E5:2E:A9
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.136.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1d:61:43:e4:ca:b6:93:e5:60:29:30:ec:e9:80:5b:61:11:
46:7d:d1:91:b5:da:0d:7e:e2:3a:61:1f:ac:f1:98:e0:2e:59:
ea:f1:90:75:93:9f:2e:9c:aa:35:ae:46:1a:a5:c9:e6:ea:5c:
b7:dc:86:7b:bd:41:6c:9a:d9:3e:f6:3d:06:a0:3b:9e:cd:46:
b8:c9:15:9f:0f:46:3e:f2:93:cf:0b:19:1e:9b:7c:97:ac:88:
e9:0f:d0:48:a1:23:43:87:29:3a:66:49:32:e8:2e:65:90:77:
56:19:ae:18:a7:de:0c:a2:3b:12:7c:fd:9c:d2:4b:9d:10:63:
89:c0:ed:49:92:cc:39:e2:32:d0:ad:17:44:45:f6:92:9c:21:
2f:d3:4c:67:84:7b:c6:b4:27:a6:cb:f0:46:b5:cd:dc:a1:cd:
6b:74:b1:d7:7c:80:80:9b:0b:b2:19:3d:12:37:69:6b:80:8f:
e5:82:99:9a:b5:4a:8f:66:bd:e8:13:02:76:93:e8:f9:81:bd:
c4:9c:1a:1f:6b:0a:af:a1:75:9f:dc:f2:fc:ca:d5:c5:1c:c4:
4e:44:d4:a2:ca:6e:66:b6:c2:cd:ea:ff:ec:de:a3:67:83:55:
8c:df:89:f9:90:98:be:fa:4b:5b:59:fc:d2:cc:f0:11:6f:94:
33:c2:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:32 2026 by rpki-client