Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212008.roa
File: AS212008.roa (raw, json)
Hash identifier: Xm/ytW4aOercL9bQOntgyUnuN0HP5COzPOKthqYQLU4=
Subject key identifier: C2:89:15:94:35:D6:5E:13:5E:F6:CB:19:BC:AA:EE:52:E6:8E:66:60
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 322E725296A985B795551A8640EAC1E2150A7D16
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212008.roa
Signing time: Wed 04 Nov 2026 20:32:46 +0000
ROA not before: Wed 04 Nov 2026 20:27:46 +0000
ROA not after: Wed 03 Nov 2027 20:32:46 +0000
asID: 212008
IP address blocks: 2a0e:8f02:20f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 18:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:2e:72:52:96:a9:85:b7:95:55:1a:86:40:ea:c1:e2:15:0a:7d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:46 2026 GMT
Not After : Nov 3 20:32:46 2027 GMT
Subject: CN=C289159435D65E135EF6CB19BCAAEE52E68E6660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:b8:c9:b7:54:ae:bf:12:7c:fc:27:24:cd:
70:b4:d7:53:4c:8f:4e:3f:2d:68:ea:10:1c:f4:55:
e8:cf:56:5d:4f:a9:de:b6:c8:0e:0d:e9:4a:47:51:
d5:a0:92:60:71:7c:b1:cf:0a:f9:57:3b:8b:64:27:
45:a3:4d:d0:8c:8c:ad:b6:45:19:e7:f3:8f:b6:a7:
fb:eb:d6:7b:8c:99:dd:a7:b1:c7:9b:eb:73:82:15:
ef:e3:f0:c3:72:c2:ca:4d:87:98:e1:c9:5d:d7:11:
99:8a:aa:4e:06:50:2f:4f:a2:71:2d:54:18:3d:30:
46:8d:94:09:29:c1:9f:1f:8d:69:17:6e:6a:e4:2c:
8b:61:d0:d9:45:b7:c5:3d:e5:37:b5:bb:0b:ae:d7:
4c:9d:cd:e3:eb:41:6c:3d:a0:5c:f1:36:16:82:0b:
c3:4f:6c:62:25:15:38:e9:a4:63:30:2c:95:eb:a8:
b7:a3:a1:08:26:2b:a8:18:77:62:e0:43:62:5f:44:
cc:a3:f2:4b:58:09:9f:89:fc:7b:81:8e:df:58:26:
a4:d1:9f:a4:a5:3e:6a:35:7d:27:eb:b2:e6:fb:d1:
6d:27:f1:20:ca:f8:e4:d0:a0:d5:df:95:62:de:94:
9c:ec:a2:dd:b7:c5:46:46:6e:e2:b7:e8:ed:b0:07:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:15:94:35:D6:5E:13:5E:F6:CB:19:BC:AA:EE:52:E6:8E:66:60
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212008.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:20f0::/44
Signature Algorithm: sha256WithRSAEncryption
86:6d:8c:68:2f:07:b1:79:13:8b:b4:1f:c6:1e:dc:dc:70:c9:
ac:aa:d3:1d:e0:49:82:b4:2e:5f:12:c2:97:03:5e:ff:0c:db:
59:b3:da:22:88:83:8b:51:19:ef:00:a7:d7:2c:f9:b1:f3:51:
49:88:0e:48:a6:14:1f:57:94:2a:18:a3:e7:d4:93:23:50:ab:
62:ad:ec:6a:9b:64:82:d7:bb:58:16:d8:85:8b:c3:60:21:9b:
d5:29:48:ed:e3:99:ef:73:4e:a9:f0:2b:21:5b:8f:03:89:39:
d4:48:be:d7:45:43:9b:e0:2e:6d:95:7b:24:5b:aa:2c:08:b6:
74:7a:92:ad:e3:92:33:f0:19:71:c8:ae:fa:0f:26:22:d5:19:
05:a6:bc:b3:9f:47:1d:c3:dd:c9:b0:42:eb:39:85:13:b9:20:
e4:c7:14:35:b7:55:19:7a:b5:c8:ab:b5:c5:5d:87:b6:f8:54:
bb:63:a0:1c:d6:3b:76:fc:bb:3d:59:f6:83:58:14:3c:ad:1a:
26:e8:7d:1b:fc:ae:30:44:00:c9:e6:16:4e:ef:d3:2d:56:99:
f0:25:b4:08:f9:95:2b:3a:1c:cb:f7:01:e7:7c:76:5b:d1:8b:
ed:28:06:b1:ed:4b:c6:5a:a1:36:f2:59:e0:4f:8e:d6:66:ee:
46:7e:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 09:01:21 2026 by rpki-client