Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212633.roa
File: AS212633.roa (raw, json)
Hash identifier: QHgOKHuwCoZ4MA4QiiLnm1LjlHHjQXVukrochhXUr5M=
Subject key identifier: 4F:20:D1:C2:32:DD:58:71:EC:12:CA:65:E4:51:EA:FD:C3:99:67:01
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4FE0F1F709D0CED2205970D4B30555FA8F577F77
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212633.roa
Signing time: Thu 12 Nov 2026 14:49:41 +0000
ROA not before: Thu 12 Nov 2026 14:44:41 +0000
ROA not after: Thu 11 Nov 2027 14:49:41 +0000
asID: 212633
IP address blocks: 82.39.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e0:f1:f7:09:d0:ce:d2:20:59:70:d4:b3:05:55:fa:8f:57:7f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 12 14:44:41 2026 GMT
Not After : Nov 11 14:49:41 2027 GMT
Subject: CN=4F20D1C232DD5871EC12CA65E451EAFDC3996701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:20:11:a7:e2:d3:8d:25:78:b4:1f:06:17:
dd:3b:50:2e:2f:c4:b1:b6:ef:45:80:77:38:be:99:
44:73:d2:52:95:b2:26:b8:ac:a7:b6:0a:f6:d6:31:
4b:40:31:79:3a:a3:56:b7:53:33:2a:6a:b7:58:55:
4b:89:95:51:11:1b:d7:58:fb:e8:97:84:ee:46:fc:
61:a4:b9:fd:95:b8:41:a5:7c:3c:f8:20:c2:e6:ac:
a5:cf:32:b5:60:4d:4c:5e:e1:a4:61:54:38:5b:0d:
dd:97:8f:4b:67:18:88:38:22:8c:aa:ad:2e:e5:81:
a9:fe:f2:86:ed:93:7c:be:51:15:0f:88:14:fe:93:
3a:84:78:e0:78:04:6b:48:8c:d6:01:61:95:d2:cf:
a5:6f:ec:85:01:48:18:c3:c7:32:b3:91:8a:77:3a:
fd:dc:94:df:cc:79:ae:7b:c3:21:dd:e7:d2:f8:01:
98:46:0e:3f:72:8f:7f:2c:7d:3c:c7:24:ee:1e:4f:
91:78:2a:b7:ee:23:9f:97:ea:a0:49:14:21:e0:17:
25:47:9a:85:d4:25:dd:e6:96:4e:8b:5f:96:57:da:
16:73:56:7f:d8:ab:b2:4f:f3:b1:c3:9a:20:13:ad:
d4:9c:bd:4d:bd:ea:21:23:32:12:99:cf:57:2e:d8:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:20:D1:C2:32:DD:58:71:EC:12:CA:65:E4:51:EA:FD:C3:99:67:01
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.152.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f0:0b:40:28:80:d5:c7:47:35:5c:39:81:7a:fb:a3:9c:7f:
ac:b1:1f:2d:5b:81:1f:e8:e6:a2:71:a0:99:9e:91:17:03:aa:
18:a6:29:1d:50:16:37:b1:a5:ab:24:24:c2:00:e6:93:1c:33:
7c:1c:69:29:81:3d:fd:8a:a2:b8:46:d4:10:77:d7:e5:74:46:
f4:2b:ed:c3:72:80:0c:c1:15:ef:b5:2e:52:d6:95:28:f8:0e:
b6:7e:1f:32:d9:ad:f8:9c:02:b0:4e:b8:db:30:63:b5:9f:48:
e1:7e:b0:1e:63:d1:96:09:9f:6c:94:88:ac:17:6b:a2:df:83:
a9:22:9a:88:c0:8c:1c:0c:55:92:ec:59:90:9f:cc:da:02:e3:
38:9e:79:3b:cf:fc:d5:88:2d:f2:14:07:5c:1d:f9:56:5d:62:
e8:0f:b9:be:bd:35:09:7e:db:65:e2:62:95:2d:d8:46:e3:17:
49:31:8b:2b:fc:ed:7a:76:1f:a2:6d:3e:4f:51:7a:30:27:e5:
cc:48:95:3a:c4:c2:cc:45:b4:cd:12:79:12:00:40:25:77:d9:
b4:ee:44:7d:ea:7f:a3:10:6c:91:8b:ee:d2:0b:c0:21:a5:18:
b6:d1:33:c4:d3:f4:2e:03:06:aa:50:4f:ad:f4:e6:5d:22:bc:
e8:04:e8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:19:21 2026 by rpki-client