Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212331.roa
File: AS212331.roa (raw, json)
Hash identifier: yhBPe4oQBc/A9T5cFckYCIjMzUg/3pZKvGFchE2UbQ8=
Subject key identifier: DA:38:06:E4:8F:FA:D0:81:11:24:E3:3A:E9:C4:06:EC:52:8B:E4:E2
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 730FFF3F6AA561C3D7BE87B0DD5E6483C75F51D2
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212331.roa
Signing time: Wed 04 Nov 2026 20:32:50 +0000
ROA not before: Wed 04 Nov 2026 20:27:50 +0000
ROA not after: Wed 03 Nov 2027 20:32:50 +0000
asID: 212331
IP address blocks: 2a0e:8f02:f010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0f:ff:3f:6a:a5:61:c3:d7:be:87:b0:dd:5e:64:83:c7:5f:51:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:50 2026 GMT
Not After : Nov 3 20:32:50 2027 GMT
Subject: CN=DA3806E48FFAD0811124E33AE9C406EC528BE4E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:01:77:19:19:2d:d8:2b:49:74:87:bd:19:
69:ce:43:34:9c:64:b9:20:3b:d8:5f:f7:14:24:aa:
69:09:54:86:e2:b7:00:b4:a6:71:7c:e6:17:cc:f3:
02:a0:94:86:6a:a5:19:da:52:f3:15:9e:56:82:c6:
77:07:88:97:6e:16:1c:09:0d:f2:66:3b:fa:54:04:
4b:53:e8:59:a7:fc:9c:fb:a3:2d:94:eb:73:f7:b5:
d1:a4:2b:ad:95:37:37:74:b7:a2:95:15:0b:35:39:
86:7f:a2:bf:bc:7a:a6:17:fc:fc:1c:47:dd:2d:11:
c5:5e:10:cb:e8:85:11:9b:82:c6:37:4f:77:7c:ff:
dd:1f:92:ed:c2:7f:7a:2a:d5:5d:34:6a:ec:5f:46:
55:c4:b9:4c:88:5d:73:08:22:06:2d:73:c0:ce:75:
c0:25:56:ec:8e:26:56:51:71:0b:c4:ee:df:a2:3b:
91:e7:fc:13:ed:c1:6f:9b:55:ca:37:e7:9b:55:eb:
68:75:b9:fe:50:2a:8c:9b:5f:20:69:98:01:21:07:
98:f7:1c:cf:e3:ab:82:ed:6f:26:77:78:34:63:2e:
0a:ab:8c:23:bb:f0:b8:bd:b0:9d:66:70:3c:1b:ac:
03:7a:ae:35:bf:61:da:75:12:fc:b2:64:97:32:d1:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:38:06:E4:8F:FA:D0:81:11:24:E3:3A:E9:C4:06:EC:52:8B:E4:E2
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f010::/48
Signature Algorithm: sha256WithRSAEncryption
24:33:76:eb:c4:f3:1f:b8:21:33:1b:f8:14:9d:ee:c4:16:3c:
f6:e1:60:3e:51:48:e5:c5:2a:67:75:bd:94:d3:64:3d:a1:75:
d1:05:69:47:9f:62:ba:1e:de:be:70:d3:a6:21:e8:c9:9a:6e:
32:73:8d:5b:db:54:64:d6:1c:cd:64:44:e7:85:f8:11:2c:61:
35:ee:16:0f:a6:32:fa:00:ac:6a:d6:16:75:4c:b2:72:c0:74:
2c:18:f3:c2:11:6b:49:ae:e1:6c:95:6b:7a:65:25:47:27:5b:
0b:52:c5:c3:92:5e:8e:96:78:70:60:b1:67:d9:a0:9d:3e:a0:
cb:e3:17:7f:2e:29:1d:de:73:cb:74:b5:22:78:9a:0f:eb:9d:
0e:0b:60:f2:4c:ea:17:7f:e1:e4:45:84:e0:55:f2:cf:bf:29:
2f:99:cd:c9:2e:8c:63:2f:bf:17:93:c4:c3:7b:80:9c:12:29:
4c:9f:58:12:db:b1:73:6c:42:fd:fa:52:09:3b:ee:69:00:db:
68:f8:45:89:68:2a:00:2a:d7:a2:31:32:c9:c3:f9:74:ee:51:
af:92:d3:fd:43:7b:aa:3c:31:c8:d4:b5:d4:34:bb:ad:78:9d:
3b:fe:82:af:c3:6e:6d:9c:78:1a:86:a2:23:0e:6a:2c:41:fb:
f7:7e:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:00:07 2026 by rpki-client