Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212359.roa
File: AS212359.roa (raw, json)
Hash identifier: PzJb6pDTjljgbqso6iBXTPosOSlTQ7/3eui73EmnsRU=
Subject key identifier: B2:71:42:4C:46:10:DC:27:73:95:EB:03:DE:EB:02:02:6A:23:D0:9E
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 10B560420498B7B159EACBD01A33B6AE8B2A70ED
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212359.roa
Signing time: Wed 04 Nov 2026 20:32:53 +0000
ROA not before: Wed 04 Nov 2026 20:27:53 +0000
ROA not after: Wed 03 Nov 2027 20:32:53 +0000
asID: 212359
IP address blocks: 2a0e:8f02:f00e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 11:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b5:60:42:04:98:b7:b1:59:ea:cb:d0:1a:33:b6:ae:8b:2a:70:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:53 2026 GMT
Not After : Nov 3 20:32:53 2027 GMT
Subject: CN=B271424C4610DC277395EB03DEEB02026A23D09E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:c2:03:65:85:bc:49:eb:40:98:81:9b:91:
c2:3f:67:6b:f6:95:25:6a:5d:b9:4e:8d:39:a4:9f:
a0:d0:07:f9:ed:60:e9:4d:77:f0:1e:c5:90:3c:33:
58:30:5d:1a:53:17:6f:22:36:cc:ad:a0:fe:1f:ae:
8e:f7:41:79:53:f7:20:83:99:df:01:bd:8e:75:8d:
ff:2a:ce:eb:84:b5:3e:4d:f3:4e:50:b1:32:5e:a0:
30:ce:96:01:af:81:e7:19:32:93:da:40:6e:de:92:
42:b1:e7:76:4c:c0:b9:ed:d1:26:5b:e5:d4:da:a1:
d4:a7:1c:be:51:53:38:35:07:99:64:07:3f:85:64:
47:f0:09:72:9d:db:34:a2:88:73:ad:4e:f9:70:5d:
a5:e2:c7:7f:9c:c8:8d:3f:95:1e:54:a2:6d:fe:8a:
5f:45:81:55:60:23:c9:1b:13:b7:18:96:85:52:57:
55:e1:e3:0c:e9:0e:0b:24:29:29:27:22:d4:14:13:
ff:f0:93:a8:36:45:ba:b5:94:62:0a:16:8c:61:68:
96:fa:2b:29:49:9f:11:41:9b:ac:2f:05:a5:a4:64:
ee:b8:30:d4:1e:a7:d2:97:d6:30:7c:b9:12:92:6f:
c7:47:e3:95:0d:b6:61:6c:c5:e9:e7:1b:96:3d:16:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:71:42:4C:46:10:DC:27:73:95:EB:03:DE:EB:02:02:6A:23:D0:9E
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f00e::/48
Signature Algorithm: sha256WithRSAEncryption
24:5a:03:1f:c2:2e:61:d8:6b:b3:90:21:0e:88:6c:c3:bd:8d:
25:a0:f4:ac:6e:02:aa:49:34:68:f0:56:cc:99:c4:60:12:4a:
b2:8c:a6:66:e4:2d:fd:e8:81:54:96:e3:03:43:70:69:f5:0b:
12:bf:e6:a2:53:50:32:35:3c:e7:6f:e3:96:ab:74:ba:61:c9:
a6:f1:d2:f2:5c:34:f2:8e:43:47:99:46:24:88:e3:f6:a6:f1:
73:14:df:f0:c6:4f:9b:3c:33:f4:5c:6e:d2:c5:88:74:05:ef:
e4:03:97:2b:35:07:a7:12:da:0e:3c:61:78:70:c8:f0:c8:81:
32:fa:47:69:fc:07:35:c0:20:ae:2f:17:52:57:2e:0c:49:06:
cc:b7:3b:e3:3f:30:00:31:0a:f1:18:4e:c0:0a:73:7d:a5:59:
c0:8a:b6:51:52:4a:24:f7:31:a2:fc:17:27:19:37:ef:c3:be:
09:21:fd:60:00:1c:c0:67:8a:92:86:df:92:f9:2f:cb:55:4c:
8f:1c:55:08:08:c3:69:71:60:51:22:3e:c0:1e:44:cd:7f:b2:
7d:dd:53:65:f8:3c:89:6c:d4:52:ad:80:aa:10:d7:40:30:55:
50:81:eb:eb:ab:d2:1a:1c:15:87:61:44:6b:75:fa:36:4c:67:
b9:a9:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:04:49 2026 by rpki-client