Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212294.roa
File: AS212294.roa (raw, json)
Hash identifier: QRsQ0tFtjXF8AfUvycF6cUwfRTdxiU2c4k5UjkaFzDs=
Subject key identifier: 99:B5:A8:3E:6C:4A:61:C5:F9:56:8F:07:BA:42:1D:0F:EA:BF:22:14
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4379CC2B87A9CF985EC72972C8B0FA0362E69E8D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212294.roa
Signing time: Mon 18 Aug 2025 20:54:41 +0000
ROA not before: Mon 18 Aug 2025 20:49:41 +0000
ROA not after: Mon 17 Aug 2026 20:54:41 +0000
asID: 212294
IP address blocks: 2a0f:85c1:ccb::/48 maxlen: 48
2a0f:85c1:d00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:79:cc:2b:87:a9:cf:98:5e:c7:29:72:c8:b0:fa:03:62:e6:9e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 20:49:41 2025 GMT
Not After : Aug 17 20:54:41 2026 GMT
Subject: CN=99B5A83E6C4A61C5F9568F07BA421D0FEABF2214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:1a:eb:a5:98:09:c8:cb:b0:88:f0:3d:cc:
60:00:1b:ac:0e:09:e3:7e:41:3e:a3:cb:4b:63:79:
15:ad:13:51:56:9c:cb:b6:56:6b:e2:46:aa:a8:f5:
f9:33:c1:12:5c:01:76:93:8b:a1:39:c7:da:b6:91:
93:3f:48:4a:3d:b0:ed:33:50:80:83:de:b1:ae:fe:
3c:a6:9c:8e:29:e1:27:a7:75:41:b6:e2:92:04:f7:
33:d5:f0:98:90:ae:b5:20:0b:6a:5d:86:c4:a8:06:
38:2a:84:44:3a:60:22:87:d2:18:43:e2:be:42:74:
b8:b9:d6:61:2d:ed:27:5a:b5:a6:d4:2a:43:ac:29:
5f:5a:b4:a5:56:bd:0d:d8:aa:f9:ec:39:68:86:23:
f9:b6:d1:ac:af:72:3a:e6:9b:42:55:9d:37:1f:23:
c3:60:4f:62:50:5e:e6:47:cc:8a:36:55:1f:fa:23:
2e:ce:61:95:78:55:6b:70:95:d3:5c:9d:91:c8:c3:
58:5e:d1:b4:0d:a7:fd:3f:d7:eb:fa:a2:6a:40:77:
6d:31:85:d8:2c:5c:b0:d1:43:98:b8:13:fa:42:7d:
81:b4:67:b3:4c:bc:3e:a2:9b:df:e1:d3:40:a5:be:
51:8e:7d:bc:f3:a0:9e:94:62:78:7b:28:8f:c8:8e:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B5:A8:3E:6C:4A:61:C5:F9:56:8F:07:BA:42:1D:0F:EA:BF:22:14
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ccb::/48
2a0f:85c1:d00::/44
Signature Algorithm: sha256WithRSAEncryption
22:26:0c:39:de:e9:e5:dc:57:4f:25:86:b5:b9:54:9c:3e:62:
10:81:a2:ef:00:fa:61:8b:a8:8e:d9:e8:fe:48:d5:af:59:6e:
50:92:5f:a7:42:38:3a:4b:d8:87:a3:ea:95:0c:b4:90:0f:bc:
35:8a:e9:74:fb:0d:0e:e8:fc:48:1d:7d:03:fd:b0:db:57:59:
d8:e2:32:7a:bc:01:2d:5e:c1:ca:f4:23:93:16:ad:1f:ba:0d:
fd:f0:2d:78:f2:05:9f:40:9b:c9:81:0a:d9:9a:67:ff:7f:93:
e2:da:29:2c:f4:c2:76:74:a7:8a:3f:7c:df:c3:3a:a9:ce:ff:
02:55:c4:2f:bd:6e:1b:b7:f9:c7:77:48:db:c0:21:fc:84:9c:
eb:43:0a:d4:bb:e5:cb:9e:85:06:47:e5:8a:9f:17:50:63:7a:
6c:be:f8:f4:94:b4:68:6f:1a:0a:ff:21:2b:ed:52:02:3a:e5:
f9:09:70:b6:12:7c:ef:6e:3b:ab:2b:fa:2b:c6:6f:67:8b:71:
43:fb:8a:22:27:c3:0d:a1:7d:c0:ac:ca:e4:28:96:dd:2d:0a:
7e:6d:f3:f1:9d:ee:6f:64:c8:63:71:5a:8e:5e:06:40:fa:61:
c4:c1:be:a1:21:d6:d5:f8:d5:c6:55:74:0a:17:f0:7b:eb:78:
59:1a:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:32 2025 by rpki-client