Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212577.roa
File: AS212577.roa (raw, json)
Hash identifier: wov459+iKzZCvcgThlyUaKMD4bz9hyVgJtGo3xuv74c=
Subject key identifier: 33:15:07:2D:7B:AB:FB:2D:3A:DE:4C:37:BF:DF:9E:4D:15:6A:D8:55
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 2BA2504910F6F295738AAF19C282F03B1E7170F4
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212577.roa
Signing time: Wed 04 Nov 2026 20:32:46 +0000
ROA not before: Wed 04 Nov 2026 20:27:46 +0000
ROA not after: Wed 03 Nov 2027 20:32:46 +0000
asID: 212577
IP address blocks: 2a0e:8f02:f02a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a2:50:49:10:f6:f2:95:73:8a:af:19:c2:82:f0:3b:1e:71:70:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:46 2026 GMT
Not After : Nov 3 20:32:46 2027 GMT
Subject: CN=3315072D7BABFB2D3ADE4C37BFDF9E4D156AD855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:2a:7d:81:2a:99:cb:fa:e7:49:a3:73:22:
af:d5:a2:9e:4e:4e:c0:b9:76:19:7e:45:6a:89:ae:
9d:f3:d4:a0:f8:7f:1d:48:91:75:81:5e:1a:1c:65:
b6:d1:53:0f:e4:cd:cd:e6:4d:3c:96:7b:f0:63:a2:
7b:b4:cf:4f:b9:03:d2:e3:8e:a1:ad:13:c4:9c:9e:
ee:e4:03:42:c6:ce:7e:69:13:17:87:ed:6f:7a:99:
d0:4e:1a:ad:d6:aa:42:55:39:ca:9c:18:e2:bb:71:
68:4c:7e:d6:d8:9a:dd:52:23:6b:d5:c4:d5:ef:c1:
f4:26:73:0b:be:2b:21:43:1c:2a:9d:76:93:7d:73:
b5:9e:3b:4a:05:0f:78:eb:62:69:68:b7:cc:a6:65:
35:bc:6d:a9:40:a3:50:08:47:dc:24:f5:3d:2c:e0:
ab:30:3c:8a:46:a3:64:a4:82:8f:40:49:5b:6f:22:
a4:92:92:ce:62:25:9d:07:c3:31:80:62:f1:e7:ae:
cb:92:38:b8:69:ab:aa:8f:bb:b6:d2:81:7f:d9:40:
53:23:d3:c5:fb:ca:d7:37:ae:66:f6:3f:d8:6e:2e:
04:57:1d:49:9d:6a:a9:4d:be:37:e6:b7:1e:9c:a7:
36:39:fb:55:7e:04:8a:0b:61:ec:9b:de:7a:65:2f:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:15:07:2D:7B:AB:FB:2D:3A:DE:4C:37:BF:DF:9E:4D:15:6A:D8:55
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212577.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f02a::/48
Signature Algorithm: sha256WithRSAEncryption
7f:3b:93:eb:9d:67:f6:ae:65:5b:c9:50:6c:51:25:83:08:13:
8d:9c:a6:ef:a4:cb:73:d0:75:77:d8:b1:a9:a4:3c:dc:19:e1:
aa:65:5f:ea:d8:29:b3:b4:c8:e8:ae:cc:3e:7a:1e:2c:90:b2:
26:83:2d:a2:15:ad:54:38:52:ec:a3:e7:d5:6d:18:6f:33:55:
ff:19:47:33:9c:26:d7:8a:4f:3d:bc:8f:b7:13:03:ee:b7:86:
6d:b4:ad:d3:d4:59:69:26:1a:48:1a:f0:19:4f:ff:35:d4:20:
4e:72:65:b3:2e:45:a6:1c:c2:41:28:e8:ef:a2:6a:9c:f2:2e:
42:ab:f0:11:7f:f0:a6:ec:fc:02:61:76:f5:9e:8f:ad:a8:e1:
3c:a9:d6:9c:59:31:60:73:b6:5d:d6:af:42:82:ae:95:cf:43:
50:40:1d:6e:1c:18:14:fb:05:75:e7:6a:76:1a:27:cd:5d:d4:
6c:a9:7e:cb:88:94:43:4b:5d:16:27:50:be:0b:4a:53:0d:72:
2c:d2:46:01:df:99:41:ef:04:7a:5a:b7:ab:ac:5f:c2:32:15:
01:9c:57:67:6a:f4:91:37:51:f3:30:9c:69:1b:18:43:15:c3:
a3:70:31:8d:40:92:21:d7:b0:2a:b1:e8:91:90:46:17:3a:d0:
79:8c:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 09:10:48 2026 by rpki-client