Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212294.roa
File: AS212294.roa (raw, json)
Hash identifier: 7vQ7CobJK03x4E8FZ2ngEAB3McFoYix6T3lfKeQGUOA=
Subject key identifier: FC:71:94:02:15:EA:F5:E7:15:63:BC:47:33:88:D1:25:FE:20:AC:6C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7F180D87A8EFDE93BA2640FF4A421D1A52E6876C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212294.roa
Signing time: Mon 20 Jul 2026 21:08:52 +0000
ROA not before: Mon 20 Jul 2026 21:03:52 +0000
ROA not after: Mon 19 Jul 2027 21:08:52 +0000
asID: 212294
IP address blocks: 2a0f:85c1:ccb::/48 maxlen: 48
2a0f:85c1:d00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:18:0d:87:a8:ef:de:93:ba:26:40:ff:4a:42:1d:1a:52:e6:87:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:52 2026 GMT
Not After : Jul 19 21:08:52 2027 GMT
Subject: CN=FC71940215EAF5E71563BC473388D125FE20AC6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:9d:9b:e7:78:c8:6f:21:c2:a4:f0:45:7c:
d6:6f:97:77:29:ba:5d:12:c5:66:0d:c6:44:05:42:
12:38:a7:c6:94:f4:13:74:ff:8d:d5:94:2a:be:2b:
39:7e:fc:4b:f3:4b:a2:1a:7e:22:8c:8f:3c:cb:4d:
74:5f:b8:3b:51:af:99:78:c5:66:1f:99:50:7c:d3:
6e:de:2a:a1:6b:a1:f1:c8:7e:b8:35:48:de:8b:c1:
c8:49:df:fc:8f:49:22:7b:51:74:04:da:b5:bb:79:
39:af:36:2b:50:6e:f5:31:a5:82:5f:ee:11:2f:4c:
a4:cd:2e:22:70:2e:f7:b6:1b:b6:db:10:f1:a8:ea:
64:00:0d:6a:de:db:9d:7a:f0:e5:ac:4d:06:dd:45:
e7:03:38:11:26:75:a2:1c:2d:2a:d1:6f:be:53:84:
e3:d1:b3:0e:b0:9a:ae:2a:11:cf:d4:8a:75:d4:b4:
b8:bd:01:b9:cc:d6:a2:27:fa:63:77:e8:0a:7f:ec:
be:ac:94:40:da:0d:6b:66:9f:e9:51:2f:b9:17:a9:
ab:bb:f3:63:5a:ad:c3:2e:da:cb:1c:5a:fd:31:cb:
08:19:0e:f0:19:2d:c1:b6:3f:94:35:2e:03:33:53:
5c:3e:ba:89:5b:50:e2:06:1a:17:98:13:30:02:38:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:71:94:02:15:EA:F5:E7:15:63:BC:47:33:88:D1:25:FE:20:AC:6C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ccb::/48
2a0f:85c1:d00::/44
Signature Algorithm: sha256WithRSAEncryption
cf:13:a2:69:3c:3f:75:43:7e:2f:a2:4c:f1:b3:c5:12:ab:b4:
6c:20:4a:c1:86:c2:86:a5:aa:d6:f5:18:06:25:0e:60:f4:79:
9d:ea:ba:e6:ce:0c:c4:0e:d2:02:ff:87:17:f0:32:d7:cb:4c:
96:c3:1d:d7:db:d4:d9:1c:d5:67:98:23:88:a3:ce:ba:fd:fc:
4b:ef:6c:16:81:ff:cf:de:63:f9:ca:30:0f:8c:d6:e2:37:5a:
61:c6:17:95:71:c2:59:e0:e1:c3:99:f1:a0:55:73:fd:a3:36:
c5:6a:35:22:9b:a7:8f:90:a8:44:72:bd:05:60:82:b4:0e:4e:
d5:99:97:1f:4e:ed:45:a9:22:c4:a1:33:cf:7d:3a:e1:e9:e8:
cf:b4:7c:2e:9a:3d:8c:0b:e6:77:7a:d8:c0:b4:6e:27:f9:45:
7a:fe:45:33:2c:cc:a1:24:16:c6:f8:0b:70:d0:b3:bf:23:81:
8c:ed:28:1c:f1:b6:1a:85:54:93:ff:0b:43:83:3c:5e:e5:5d:
93:8e:b5:40:e1:9c:49:2a:fa:ce:3f:e5:a4:79:60:60:52:ef:
6e:ab:7c:fe:d8:a7:17:0c:f6:aa:93:41:ed:59:94:bb:db:e4:
a1:a3:10:19:12:3b:b4:9d:05:93:e1:fb:91:e1:47:73:d0:ad:
b7:8b:82:09
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUfxgNh6jv3pO6JkD/SkIdGlLmh2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA3MjAyMTAzNTJaFw0yNzA3MTkyMTA4NTJaMDMxMTAvBgNV
BAMTKEZDNzE5NDAyMTVFQUY1RTcxNTYzQkM0NzMzODhEMTI1RkUyMEFDNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Hp2b53jIbyHCpPBFfNZvl3cp
ul0SxWYNxkQFQhI4p8aU9BN0/43VlCq+Kzl+/EvzS6IafiKMjzzLTXRfuDtRr5l4
xWYfmVB8027eKqFrofHIfrg1SN6LwchJ3/yPSSJ7UXQE2rW7eTmvNitQbvUxpYJf
7hEvTKTNLiJwLve2G7bbEPGo6mQADWre25168OWsTQbdRecDOBEmdaIcLSrRb75T
hOPRsw6wmq4qEc/UinXUtLi9AbnM1qIn+mN36Ap/7L6slEDaDWtmn+lRL7kXqau7
82NarcMu2sscWv0xywgZDvAZLcG2P5Q1LgMzU1w+uolbUOIGGheYEzACOGj7AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU/HGUAhXq9ecVY7xHM4jRJf4grGwwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEyMjk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+F
wQzLAwcEKg+FwQ0AMA0GCSqGSIb3DQEBCwUAA4IBAQDPE6JpPD91Q34vokzxs8US
q7RsIErBhsKGparW9RgGJQ5g9Hmd6rrmzgzEDtIC/4cX8DLXy0yWwx3X29TZHNVn
mCOIo866/fxL72wWgf/P3mP5yjAPjNbiN1phxheVccJZ4OHDmfGgVXP9ozbFajUi
m6ePkKhEcr0FYIK0Dk7VmZcfTu1FqSLEoTPPfTrh6ejPtHwumj2MC+Z3etjAtG4n
+UV6/kUzLMyhJBbG+Atw0LO/I4GM7Sgc8bYahVST/wtDgzxe5V2TjrVA4ZxJKvrO
P+WkeWBgUu9uq3z+2KcXDPaqk0HtWZS72+ShoxAZEju0nQWT4fuR4Udz0K23i4IJ
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:58 2026 by rpki-client