Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS212483.roa
File: AS212483.roa (raw, json)
Hash identifier: RjawMaIlDEceUgPpRhjp3cW7Srn90vTZK6c3yojZJ7k=
Subject key identifier: 1B:79:3E:42:2B:AA:A5:E4:FE:3E:67:4D:0E:F3:46:3B:1E:FC:C2:C7
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 3F8FD2B9FC22C63DC210EA9D6BBE56C5473A857E
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS212483.roa
Signing time: Thu 12 Nov 2026 08:25:01 +0000
ROA not before: Thu 12 Nov 2026 08:20:01 +0000
ROA not after: Thu 11 Nov 2027 08:25:01 +0000
asID: 212483
IP address blocks: 2a0f:1cc5:1800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 06:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:8f:d2:b9:fc:22:c6:3d:c2:10:ea:9d:6b:be:56:c5:47:3a:85:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 12 08:20:01 2026 GMT
Not After : Nov 11 08:25:01 2027 GMT
Subject: CN=1B793E422BAAA5E4FE3E674D0EF3463B1EFCC2C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:4c:d0:71:f1:0b:75:31:1a:ae:5e:50:fb:
0f:6b:d0:72:3b:7b:af:38:65:45:dc:fd:e3:2a:61:
ea:01:81:16:4e:0d:3d:88:17:5f:5f:0e:ee:12:ab:
14:d9:44:f7:51:2b:63:dc:26:df:e9:32:8f:51:d1:
1e:a5:25:64:28:d6:59:9a:1b:da:f2:48:d7:1a:a8:
61:b2:02:0a:f2:c2:eb:c5:5a:bc:11:75:06:30:a4:
36:b9:12:74:6d:51:47:5f:14:89:36:69:77:b1:d1:
6a:45:40:5f:ef:5b:67:25:cd:66:a0:56:6e:a4:44:
e5:5d:40:27:f4:5e:83:52:cc:33:7a:fc:72:70:9a:
44:19:8b:a7:35:41:0f:8a:b1:a1:16:d3:f5:21:8d:
19:5f:f9:b8:54:93:fd:b3:63:05:21:aa:d7:11:4a:
72:d0:44:85:3c:ba:8f:12:da:b6:01:95:67:9f:cb:
e3:48:9b:33:b7:2d:7f:e2:e0:1b:43:19:69:68:e9:
22:45:60:58:b7:01:67:89:b6:9c:aa:6d:e4:00:52:
f2:05:4a:e7:c4:d6:b4:18:47:c4:a0:95:75:c5:45:
a1:3b:c3:4b:cf:6e:c7:dd:17:11:54:c8:9f:0b:33:
4e:20:d2:bd:1d:da:46:51:b3:1a:49:eb:b8:c4:c8:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:79:3E:42:2B:AA:A5:E4:FE:3E:67:4D:0E:F3:46:3B:1E:FC:C2:C7
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS212483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:1800::/40
Signature Algorithm: sha256WithRSAEncryption
41:83:da:6b:f3:a2:5d:e6:3f:95:de:40:ba:36:25:19:9b:26:
02:b3:b2:8d:43:de:2d:55:cc:15:95:31:07:65:ca:fe:46:4f:
91:09:95:02:21:df:ad:d5:04:50:27:29:6d:e8:9b:50:60:6d:
46:aa:00:d8:cb:8d:1d:91:11:2e:ac:bc:77:45:2c:72:7c:87:
42:99:99:6b:dc:08:70:10:1f:54:0d:c6:7a:c4:c5:5b:ac:28:
ef:5f:3e:25:3a:a1:f4:84:f4:a5:33:5c:48:b3:0a:13:dc:cb:
d7:9f:6f:72:0b:57:f8:26:34:70:e8:44:9b:0c:3c:25:64:a0:
fc:ca:23:01:18:8c:7f:60:55:06:cd:63:aa:da:dc:b8:de:54:
10:57:a7:04:fb:ec:8f:61:9d:f2:13:ca:1f:84:bd:05:8d:64:
e3:c2:12:7f:62:df:f9:cd:bc:92:90:f4:dd:30:0b:03:49:3d:
74:88:19:dd:51:28:42:89:f8:38:ea:8b:07:53:01:5b:6a:34:
69:6d:39:04:51:98:1c:51:5e:aa:e0:7c:ad:2b:f2:cb:e0:a8:
48:9c:96:a7:2a:36:27:1a:4b:80:82:0d:0c:82:eb:8e:ea:0b:
0a:44:89:ae:4b:ac:4e:11:52:cf:37:f2:41:ca:99:9a:35:0a:
e3:9e:36:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:03:54 2026 by rpki-client