Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212173.roa
File: AS212173.roa (raw, json)
Hash identifier: P021glDHMdbrhbgA93VjmRaagpMTyWtaDusJkPcFsmw=
Subject key identifier: FA:D0:89:E2:48:B7:00:36:A6:D9:92:44:D2:59:09:59:E9:55:89:29
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5F276E5C67EBCC64593BF6B756FDAB61B3D0F637
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212173.roa
Signing time: Tue 16 Sep 2025 16:07:30 +0000
ROA not before: Tue 16 Sep 2025 16:02:30 +0000
ROA not after: Tue 15 Sep 2026 16:07:30 +0000
asID: 212173
IP address blocks: 2a0f:85c1:d4a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:27:6e:5c:67:eb:cc:64:59:3b:f6:b7:56:fd:ab:61:b3:d0:f6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 16 16:02:30 2025 GMT
Not After : Sep 15 16:07:30 2026 GMT
Subject: CN=FAD089E248B70036A6D99244D2590959E9558929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:35:6a:fe:8c:e7:6e:4f:6c:78:14:c1:25:d0:
4e:22:fd:17:59:50:4a:47:90:ef:e0:76:87:32:99:
ec:45:4a:f3:8b:91:6d:00:ba:35:66:a4:6b:06:31:
07:cd:20:08:cc:55:b7:ca:f1:b5:51:8b:5f:2b:29:
a0:69:6c:96:89:24:20:31:b1:ae:bf:14:ea:92:d5:
ab:34:ed:cc:9b:79:7e:fa:e3:07:f4:b5:15:6c:11:
82:b8:34:d6:95:36:cc:81:ce:a6:74:2a:1b:dd:3a:
8b:6a:b3:8e:b5:11:b2:f2:b0:9e:56:f9:6c:a2:b6:
49:4b:8c:10:45:18:64:57:fe:06:a6:72:77:1b:6a:
9c:ca:e4:4c:cf:e8:ef:dc:19:79:69:f2:c8:c9:c9:
8d:15:f3:ef:f2:b2:cf:f6:a4:0a:48:b7:2a:de:6f:
10:79:a3:06:f4:c7:51:53:49:1d:6a:02:cf:9f:64:
82:24:92:2a:21:c6:a5:fb:a6:db:ef:4d:0f:d8:76:
7b:9b:4e:d2:9d:fa:df:7d:18:97:19:21:66:c1:1b:
e5:9a:39:8a:f7:ad:03:6e:29:05:23:7c:3c:ef:70:
f8:9b:80:64:2b:33:1f:a1:f1:0e:e7:22:0f:dc:00:
6c:9b:b4:80:19:e3:32:06:b4:5b:4a:05:0a:71:54:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D0:89:E2:48:B7:00:36:A6:D9:92:44:D2:59:09:59:E9:55:89:29
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d4a::/48
Signature Algorithm: sha256WithRSAEncryption
0b:c9:03:9c:1e:cb:08:67:20:7b:36:c0:6d:2c:89:5c:1d:85:
15:73:6e:a8:db:49:37:0d:c9:30:e7:19:cb:d5:c4:27:a9:c5:
2f:f6:09:e8:f0:59:ed:e2:39:78:10:0f:92:dc:e3:89:89:28:
e5:e4:45:b9:59:bc:1f:a6:5e:0f:d4:63:a2:11:f5:9c:75:d7:
2e:5f:30:e8:eb:36:65:6e:17:12:5f:aa:dd:b8:08:a2:96:03:
56:c0:b7:97:ba:86:4e:68:7c:69:3f:4a:d3:91:30:57:0d:8e:
ba:9a:ae:af:07:a5:ac:86:11:74:68:74:93:61:08:9f:a1:13:
6b:ee:26:75:8b:ca:92:a3:c9:99:85:5b:3d:23:da:fc:86:12:
78:1a:79:f8:a0:e8:8f:11:42:33:76:ca:2c:9c:4d:62:7b:3a:
8a:21:03:7e:10:04:ba:36:dc:1c:c7:48:69:87:b3:9a:c4:34:
eb:2f:f2:43:0b:c6:c5:54:12:64:17:fc:3c:91:dd:6c:71:a4:
1d:d9:15:a7:a2:cb:40:37:a1:c5:fc:a2:0d:00:8f:1e:60:4e:
b4:82:8b:01:f1:dc:89:37:b2:fc:1e:2a:c4:39:6a:bf:0f:6c:
38:dc:5f:00:c1:eb:cc:68:75:55:5d:4c:e3:e8:23:89:1e:75:
17:c8:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:00 2025 by rpki-client