Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212279.roa
File: AS212279.roa (raw, json)
Hash identifier: WIE7WZEsZ5X3NQSEIaCww4v8fPylECoLUFc+xn72bvw=
Subject key identifier: CE:34:68:22:66:82:96:F9:A0:8A:28:69:C6:5B:D6:01:34:3F:3A:32
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 54265DAEA68C45246A5A2BAB9F514B6E5EF84B5D
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212279.roa
Signing time: Wed 04 Nov 2026 20:32:53 +0000
ROA not before: Wed 04 Nov 2026 20:27:53 +0000
ROA not after: Wed 03 Nov 2027 20:32:53 +0000
asID: 212279
IP address blocks: 2a0e:8f02:f013::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:26:5d:ae:a6:8c:45:24:6a:5a:2b:ab:9f:51:4b:6e:5e:f8:4b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:53 2026 GMT
Not After : Nov 3 20:32:53 2027 GMT
Subject: CN=CE346822668296F9A08A2869C65BD601343F3A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:8c:c2:2c:68:8c:4e:c8:c4:7f:b4:b0:93:
95:cc:26:e0:b0:b7:1e:d3:1a:b0:b3:46:27:b7:10:
d7:7c:e2:87:76:e4:75:66:67:0d:22:20:2f:13:b8:
4d:64:21:49:37:ad:dd:4b:c2:d1:0c:c9:96:fd:e7:
f0:f7:84:d6:67:41:d1:a7:99:40:fe:92:56:a2:36:
d2:1b:e8:48:f9:33:b0:a0:9e:06:dc:c2:80:41:8c:
68:79:3d:a3:ea:a8:63:5f:7c:f4:2b:ef:8d:eb:cb:
d6:f4:ed:bc:ea:a7:ac:49:72:3f:15:bb:fc:7b:39:
1f:5c:a8:17:1b:52:c6:8f:e3:c8:dc:7e:b0:f0:ad:
6b:d6:34:ba:8f:b3:01:cb:42:b0:39:89:bb:ef:16:
75:96:52:bf:76:8b:37:bf:4b:e0:4a:76:79:9d:51:
ad:73:1e:51:36:6e:84:d8:df:0a:b8:76:7b:86:ac:
65:a1:eb:58:29:17:6d:74:4b:78:31:c6:9a:7d:46:
3f:fb:dd:82:4a:3c:17:91:b9:b8:fa:e8:69:ea:a8:
b5:95:98:62:85:d3:e1:37:00:e8:53:c8:81:c2:c1:
d9:5c:d7:c7:33:0d:72:5f:94:b3:3c:c7:e3:05:78:
07:98:b9:0b:16:2a:ed:dd:18:73:a5:b6:ae:dd:b3:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:34:68:22:66:82:96:F9:A0:8A:28:69:C6:5B:D6:01:34:3F:3A:32
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212279.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f013::/48
Signature Algorithm: sha256WithRSAEncryption
0d:e6:98:e6:6d:60:07:50:4f:d2:f1:73:ec:84:0c:5f:50:be:
b2:dd:a1:bb:90:d2:6c:ff:6d:aa:b4:97:52:cf:2d:7e:f7:f3:
7f:58:f5:ab:98:e4:7b:3a:75:7e:d6:c4:40:13:54:ce:18:a5:
bd:d6:ab:7b:41:a7:da:77:5f:9b:33:e1:df:bf:a9:bb:5b:97:
1d:ba:23:77:f3:19:c1:8c:e4:ae:c7:29:20:19:a4:f9:db:1e:
11:cc:43:4c:a3:e3:41:b3:1c:00:22:34:fb:05:9d:42:16:1a:
81:5c:58:d3:fa:22:e6:4e:9f:ae:6f:98:ac:a8:70:07:43:cb:
26:c2:fe:4f:30:79:6c:98:4f:79:f2:9b:45:e1:04:7b:a1:16:
18:ac:b9:00:be:b9:84:3d:95:16:cb:4a:50:32:08:97:20:31:
8f:39:16:41:9b:1c:c7:f9:f4:90:43:56:c3:86:cc:e6:5d:4d:
3b:10:ec:67:b3:b7:e3:1e:e2:d3:72:be:ec:ae:5e:5f:4c:52:
c3:fa:92:4c:75:54:49:7f:1f:99:86:9b:7d:46:36:79:9f:d9:
26:86:14:3c:e6:f9:15:da:bd:5f:75:18:2f:2a:5c:e5:ef:99:
5c:bc:29:8a:d5:ff:03:54:09:ab:69:40:dc:66:2f:32:b2:55:
ca:e2:cd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:30 2026 by rpki-client