Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212810.roa
File: AS212810.roa (raw, json)
Hash identifier: 7QH2upfV476M3pLxKHQm5xsWO+rQy7sDcZpYKa5DFOA=
Subject key identifier: C1:E7:36:4D:D5:57:E2:35:3D:56:2F:18:59:03:36:4B:F4:29:CB:42
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 48C8764980B4770948AA8E5BF4FCAC8EAE77475F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212810.roa
Signing time: Fri 06 Nov 2026 18:52:48 +0000
ROA not before: Fri 06 Nov 2026 18:47:48 +0000
ROA not after: Fri 05 Nov 2027 18:52:48 +0000
asID: 212810
IP address blocks: 94.118.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c8:76:49:80:b4:77:09:48:aa:8e:5b:f4:fc:ac:8e:ae:77:47:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 6 18:47:48 2026 GMT
Not After : Nov 5 18:52:48 2027 GMT
Subject: CN=C1E7364DD557E2353D562F185903364BF429CB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:a7:1e:8b:67:08:7c:03:b4:bc:73:db:c6:
dc:95:57:1d:4b:45:82:13:ff:90:01:f8:9e:08:37:
96:d3:44:28:d1:a4:d6:2f:7b:e3:65:2a:bb:b8:5e:
05:d9:f7:be:3f:ab:6d:73:5e:61:34:b8:53:75:6d:
aa:fd:ba:28:7c:fd:98:28:98:58:43:9c:b9:9d:f7:
d4:ad:22:e9:06:a2:e5:01:ce:2c:02:42:67:f7:39:
9f:c4:69:4d:24:3f:b1:6f:1b:bc:fa:8d:40:e8:ec:
a3:d6:07:cc:29:2a:a2:2d:c8:88:f5:c4:78:f8:4a:
7e:a4:26:4a:62:50:5b:5a:28:17:fc:a6:ef:e0:ca:
d3:7d:e9:53:f3:1b:de:72:a3:11:de:88:d9:66:48:
fa:36:da:50:79:d5:22:1e:46:4d:59:cd:f2:8c:c2:
80:34:c4:85:3c:69:ed:f1:38:ea:9d:a0:a8:ec:0f:
56:70:cf:1b:a8:75:05:c2:9d:f5:48:99:71:8c:a2:
47:da:79:a3:9e:3a:13:9a:00:a1:58:01:0c:07:ed:
e0:5a:2e:a1:58:43:db:a5:c3:6f:9c:2b:d4:32:2e:
b7:80:86:07:25:8c:d8:b2:97:c2:37:13:5c:77:30:
5c:5a:d0:aa:e7:2a:58:54:90:d4:eb:20:3d:64:30:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E7:36:4D:D5:57:E2:35:3D:56:2F:18:59:03:36:4B:F4:29:CB:42
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS212810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.23.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ba:a7:b9:da:02:bf:e6:71:2f:ca:7b:57:8f:08:a5:ba:5f:
3b:e0:3a:ca:53:ed:22:0a:f4:10:fe:14:2f:c9:e3:3e:fb:45:
85:87:3d:11:63:2c:d8:85:29:e2:3f:55:1a:2b:29:de:30:0a:
55:e6:eb:b8:40:b0:a9:db:36:94:11:d9:34:e4:03:1f:5b:3f:
a8:f2:bb:c3:1d:9b:58:bc:3f:3a:78:62:f6:2d:a8:d8:a4:2e:
d6:d6:97:df:12:28:9f:34:71:11:91:3b:12:fc:b6:c7:d2:68:
57:e4:1f:d0:e6:96:a1:91:de:19:6d:1c:ec:3d:52:54:aa:24:
c5:53:f1:77:82:b1:f9:b8:a9:6c:0b:75:3d:2f:fe:47:36:95:
2e:29:43:4a:ae:12:bb:34:88:87:da:78:0b:aa:0f:6d:59:f6:
5e:6a:05:a9:a3:33:dc:1f:b8:b9:f0:cf:d7:5d:f7:6f:91:37:
50:34:b7:ea:4d:da:01:61:05:bc:74:f5:2f:48:e9:30:82:c0:
16:bf:0b:79:ae:cb:cf:55:c6:dc:ac:5d:42:70:07:6a:26:2a:
f7:78:3f:e3:57:4d:58:43:b4:35:8d:c6:3b:5f:00:ec:5d:4a:
85:21:65:d9:f1:9a:dc:e5:2a:05:d3:35:56:99:69:41:a5:6b:
bb:d1:bd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:06:55 2026 by rpki-client