Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212470.roa
File: AS212470.roa (raw, json)
Hash identifier: BkoGp1mfu8PKLA0NNyq1faOZDr+XM+U2rn6+kRADAlI=
Subject key identifier: 65:7A:64:C2:86:01:79:1D:A0:0F:E6:50:9C:E3:52:66:92:90:94:E3
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 41C576E7F7A96CF4AD61CBB41F3C486905722006
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212470.roa
Signing time: Mon 11 May 2026 09:16:04 +0000
ROA not before: Mon 11 May 2026 09:11:04 +0000
ROA not after: Mon 10 May 2027 09:16:04 +0000
asID: 212470
IP address blocks: 2a14:7580:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c5:76:e7:f7:a9:6c:f4:ad:61:cb:b4:1f:3c:48:69:05:72:20:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 11 09:11:04 2026 GMT
Not After : May 10 09:16:04 2027 GMT
Subject: CN=657A64C28601791DA00FE6509CE35266929094E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:5f:62:18:fd:9e:29:e7:19:57:25:7e:a4:
ed:25:66:47:33:5f:c2:e6:78:81:ee:ac:35:df:74:
33:00:05:b3:19:71:2a:08:3b:c3:82:ae:e9:42:21:
67:81:d1:20:53:a5:c2:ae:9c:19:fd:20:b0:1c:21:
26:ba:ed:3b:69:04:f8:f9:07:64:cc:24:6a:b5:bf:
8f:cc:b9:78:16:e1:3e:e3:ed:c5:6f:01:e8:76:bb:
27:f0:82:ad:12:78:ab:61:2e:0e:0e:84:dd:e1:4a:
47:b1:8d:e9:79:d9:56:81:52:87:ad:3a:ef:78:b2:
02:56:e5:99:a7:dd:ec:c0:a8:26:30:92:7e:a3:13:
1d:33:6f:de:f7:0f:de:92:e0:11:69:22:30:e5:ba:
a4:0d:1c:7f:4b:bc:86:22:bc:fe:82:40:62:c2:2c:
b4:80:9a:01:a8:9a:82:23:12:29:4b:2f:bc:ea:41:
25:cd:24:26:f5:c4:7f:65:22:ed:bf:d5:44:10:93:
26:56:e3:fc:54:38:4a:7e:33:09:c3:91:72:af:65:
d7:9b:64:72:b6:c3:4e:fb:cc:1d:00:40:53:65:a8:
b5:79:4f:1b:fb:23:a8:59:89:c7:b8:5b:59:50:f9:
e0:9d:1b:00:2e:8e:a3:82:09:a8:e7:6d:27:e9:88:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7A:64:C2:86:01:79:1D:A0:0F:E6:50:9C:E3:52:66:92:90:94:E3
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:200::/40
Signature Algorithm: sha256WithRSAEncryption
87:1b:2c:36:19:03:eb:e5:55:e5:58:3b:1d:c9:37:55:59:05:
09:5a:ff:95:99:19:fd:b2:c5:5c:06:cc:91:da:03:45:09:d1:
7e:2c:2e:66:40:55:71:3d:f8:f3:b1:22:39:36:5c:85:11:9a:
56:d0:c2:e9:01:b4:59:5a:26:eb:7d:18:53:6e:cb:af:de:40:
34:f9:fc:b5:11:0a:d7:15:72:e0:5d:6b:6a:0b:8b:4e:33:07:
93:1f:49:48:27:e1:b9:22:aa:05:fc:06:72:91:df:7c:24:6b:
48:6a:dd:04:e2:d3:a7:81:d4:03:8b:6d:20:d7:d5:e1:55:c6:
ed:cb:15:96:ec:0d:00:c8:c9:80:2e:3f:ab:8a:1c:c8:b4:51:
59:9d:e8:e6:ea:32:94:4c:05:3e:a5:01:19:d2:0d:17:ee:91:
0c:88:5b:e3:69:d0:5d:63:73:57:85:de:f5:a6:05:e7:45:f1:
0b:f8:58:a9:50:1e:e1:d9:70:39:33:22:9f:76:59:0a:15:61:
fa:3c:50:6b:65:68:77:77:60:4e:aa:ca:58:a0:fa:f7:b3:44:
58:67:70:36:e2:ea:27:c4:23:54:e4:3a:be:c7:0e:b5:57:e3:
f5:a1:59:5b:3f:bc:32:1f:1e:8c:17:1b:44:1c:0d:54:5b:ff:
64:79:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:22:45 2026 by rpki-client