Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212358.roa
File: AS212358.roa (raw, json)
Hash identifier: LMB2JYRMRn649fy9na0KZkHLxa8kStMmiYCSYDrqPiY=
Subject key identifier: 8B:D6:05:77:7D:1B:6D:95:4F:76:7D:5A:28:8C:B3:29:26:00:B3:5F
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 65521226186EA1560D3A2DCAC31F2E325407B98C
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212358.roa
Signing time: Wed 04 Nov 2026 20:32:54 +0000
ROA not before: Wed 04 Nov 2026 20:27:54 +0000
ROA not after: Wed 03 Nov 2027 20:32:54 +0000
asID: 212358
IP address blocks: 2a0e:8f02:f00f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:52:12:26:18:6e:a1:56:0d:3a:2d:ca:c3:1f:2e:32:54:07:b9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:54 2026 GMT
Not After : Nov 3 20:32:54 2027 GMT
Subject: CN=8BD605777D1B6D954F767D5A288CB3292600B35F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:4a:79:80:7e:5c:71:3d:9d:04:a4:cd:b3:
f1:f1:62:29:9c:8b:f6:41:1c:18:75:20:fe:bf:27:
06:11:22:be:62:1a:65:2f:b1:cd:f1:8a:6c:9d:0b:
81:d8:21:dc:b0:cd:8f:a8:7e:d0:94:32:3a:a6:e1:
31:88:4e:c3:52:78:85:8e:d0:ae:8e:0e:87:48:20:
95:85:a7:25:e5:11:8f:79:9c:ac:1a:33:be:d1:f9:
3f:7e:f6:94:ba:e9:d5:45:86:5e:28:5c:54:a5:9e:
f5:5b:bc:b6:e5:5c:fb:fe:ca:6c:b5:a1:52:dc:af:
f9:1b:ee:14:73:e5:dc:c5:af:3b:90:7d:8f:4a:d4:
70:55:e3:f5:ad:09:21:f0:5e:b9:4d:07:81:c2:fd:
f9:79:17:1a:8e:1d:e1:91:ea:a0:0a:5c:c1:7b:3b:
2f:9d:41:1c:88:17:9c:6d:4c:26:9e:68:70:06:c1:
5e:be:e2:43:77:41:97:51:1e:6d:67:06:28:88:fb:
ca:e1:ed:35:4e:db:4e:25:c0:dc:64:64:ab:7b:a8:
5b:b3:8b:67:f4:5c:44:c2:fd:ad:2c:b9:20:cd:fb:
da:be:e8:d9:63:b2:b6:10:81:5d:ae:9b:69:8f:70:
e7:dc:41:b8:fc:7b:0e:2d:4f:9f:d4:74:c7:ce:98:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D6:05:77:7D:1B:6D:95:4F:76:7D:5A:28:8C:B3:29:26:00:B3:5F
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212358.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f00f::/48
Signature Algorithm: sha256WithRSAEncryption
54:ee:7e:cd:1e:61:d3:ca:39:c5:be:4c:e2:e2:62:84:93:f2:
d5:fe:e8:d2:41:15:49:dd:ee:97:f8:de:af:bd:f9:12:5b:15:
28:fe:80:99:14:f9:ae:71:cd:08:ec:4f:cc:11:d5:ce:39:5c:
43:5f:a3:b2:d1:25:6e:68:2a:da:4b:34:0a:2e:53:09:49:fe:
06:7c:33:de:ff:e3:4b:b2:cf:e4:26:30:f2:43:e2:2c:f7:ec:
23:98:85:30:9a:b3:ea:0e:6e:45:b0:30:f6:ca:8e:f2:b3:7b:
ff:1e:3b:97:67:67:0d:bd:f2:ae:cc:4e:a7:a8:11:fa:bf:57:
ea:90:53:19:d4:e2:be:6d:39:63:4b:f0:bc:62:41:f2:71:c4:
07:0b:9a:77:8b:a4:05:f4:85:2d:20:58:8a:70:1d:78:c9:69:
3b:1e:5c:05:c2:73:f2:30:73:a5:9e:a7:2c:f0:36:3d:75:8e:
ba:07:d5:80:59:ea:48:d7:58:57:d8:3a:2f:a4:4d:e0:9e:89:
73:74:89:1f:4f:13:52:a1:97:6a:ba:f2:38:dd:ee:1c:f3:e4:
28:2c:af:c1:4a:06:f0:d9:41:fa:7a:95:2c:22:07:21:6c:4d:
b5:58:7a:41:c2:e7:63:6f:6c:3f:a5:d0:a5:fb:9c:33:77:42:
84:82:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:17 2026 by rpki-client