Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212071.roa
File: AS212071.roa (raw, json)
Hash identifier: 8T/5MzY9chIw+UWzKtxJXh4U90L7kaihWbSRaz1WRUU=
Subject key identifier: D0:35:22:1F:80:50:D4:D0:2A:A9:F9:FC:2D:C6:A5:A2:E5:76:A6:12
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7293E24C1E465851810A98D7275E064B88CE9CDE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212071.roa
Signing time: Thu 09 Jul 2026 11:08:50 +0000
ROA not before: Thu 09 Jul 2026 11:03:50 +0000
ROA not after: Thu 08 Jul 2027 11:08:50 +0000
asID: 212071
IP address blocks: 2a0f:85c1:bb4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:93:e2:4c:1e:46:58:51:81:0a:98:d7:27:5e:06:4b:88:ce:9c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:50 2026 GMT
Not After : Jul 8 11:08:50 2027 GMT
Subject: CN=D035221F8050D4D02AA9F9FC2DC6A5A2E576A612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:27:0a:ce:88:ad:f3:a0:53:09:59:47:70:
7b:41:e8:91:b9:e0:82:f4:2b:1b:e8:49:f4:21:bc:
2a:29:3d:d3:15:f4:2f:1f:5e:2d:e2:7c:76:10:b3:
8b:c0:cf:13:a4:70:dd:30:08:6f:e7:3b:ab:65:53:
f7:a7:13:a4:4b:a0:62:f6:bf:50:4c:e6:8d:7f:ed:
58:3c:cd:9d:bc:75:6c:54:03:43:5b:4a:e9:c4:92:
86:b0:51:49:4b:1b:44:49:ea:1d:e0:53:4c:ad:2d:
21:f2:5e:dd:79:b2:b0:04:25:30:2e:e6:d9:5f:79:
8c:9f:5d:3e:9b:47:8f:af:03:a0:c9:5a:9c:46:fd:
4a:fb:13:75:9a:67:5b:e7:37:15:02:7d:c9:35:b4:
ed:7e:55:e5:b0:2d:78:85:65:37:d1:7f:18:44:4b:
95:ba:15:bb:8b:6e:61:43:02:88:68:c4:dd:e0:c2:
b4:5e:f4:1c:e0:bc:5c:7b:d4:86:29:c8:14:eb:1e:
68:0c:57:3d:32:ce:ff:f5:ef:a0:b5:f8:15:9c:62:
34:40:0b:78:4a:2d:48:5f:22:8c:62:b9:ce:3d:98:
cf:31:15:1f:2f:48:50:6c:7c:4d:d5:2f:f9:77:2e:
5b:6e:74:f7:94:e6:53:3e:7f:0f:69:99:db:d8:0e:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:35:22:1F:80:50:D4:D0:2A:A9:F9:FC:2D:C6:A5:A2:E5:76:A6:12
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bb4::/48
Signature Algorithm: sha256WithRSAEncryption
89:d1:06:02:63:d7:80:9b:c8:60:86:90:90:00:dc:04:1e:b7:
67:b1:6f:d2:c8:b4:86:41:f1:94:54:9b:ed:09:b3:b2:4c:3d:
08:c0:dc:6d:46:85:68:ca:9e:e8:8c:ae:a8:cc:29:4c:c4:51:
4c:90:2a:6b:a9:29:c3:ea:fb:65:e0:b2:f1:90:d6:70:24:88:
70:de:1d:88:e9:97:87:6d:ff:9f:68:c6:18:bc:ce:61:db:0e:
3e:f5:51:df:1d:a6:1a:06:a2:4d:3d:3a:45:23:23:d7:10:bc:
64:11:96:4d:c1:fb:e4:b5:b3:10:1f:bd:21:90:e8:c4:d7:e5:
bc:b5:ca:59:64:ce:7d:d9:65:72:54:8d:41:e0:d1:01:47:4e:
f5:4e:46:23:77:df:86:00:92:78:a1:e4:de:be:33:7f:99:31:
9f:62:ec:19:75:6c:ad:c6:c0:e9:14:70:a9:ce:c6:62:f2:fd:
df:ae:b7:c9:77:fb:21:34:79:22:a0:1e:bc:e1:67:f7:df:cf:
4e:40:93:fb:57:6d:b4:d6:1e:2a:a1:75:97:aa:4b:41:39:87:
62:4f:45:6e:4b:a7:05:0c:8b:4d:67:72:67:93:fb:b1:db:8f:
3d:b0:7d:bd:75:48:c0:a2:8d:54:d2:5f:db:b4:cf:42:bb:43:
22:e8:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:35 2026 by rpki-client