Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212360.roa
File: AS212360.roa (raw, json)
Hash identifier: 3YaNcepb90/khdIMJeoFD7WT4oKjhMsnsgFtGndm2IA=
Subject key identifier: 7D:98:C7:54:E9:CA:2E:6C:F9:CC:45:5D:DA:67:6A:7F:73:AB:85:83
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 2539125042A696035EDD2271DDF80CCA24547267
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212360.roa
Signing time: Wed 04 Nov 2026 20:32:50 +0000
ROA not before: Wed 04 Nov 2026 20:27:50 +0000
ROA not after: Wed 03 Nov 2027 20:32:50 +0000
asID: 212360
IP address blocks: 2a0e:8f02:f00d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:39:12:50:42:a6:96:03:5e:dd:22:71:dd:f8:0c:ca:24:54:72:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:50 2026 GMT
Not After : Nov 3 20:32:50 2027 GMT
Subject: CN=7D98C754E9CA2E6CF9CC455DDA676A7F73AB8583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:ed:fe:1e:0b:59:69:98:9d:7a:8f:95:e7:
d0:16:c5:e9:1c:c4:ce:77:86:4d:49:d8:86:7d:1d:
8f:a8:75:9b:5a:a7:6c:b8:ce:44:ed:31:18:db:ba:
7c:21:5d:42:1c:74:23:e6:d7:4a:cc:06:83:46:51:
4a:63:e0:41:77:ba:7a:67:23:a4:95:4a:4f:f5:1d:
ca:e5:dd:d5:17:e8:52:76:c2:99:c9:d8:6d:01:41:
0b:b7:a5:63:0f:2a:4e:5c:62:b9:c3:af:29:47:de:
da:a6:8d:b5:bf:a8:1c:82:f5:83:84:c1:eb:b0:c4:
f1:72:91:a1:ac:d4:45:c7:77:81:af:15:10:21:aa:
c3:b9:51:fe:2d:2b:33:74:03:50:29:b6:82:34:e5:
00:aa:6e:1e:75:3a:a2:11:b6:bb:f4:2a:4a:e1:ba:
4a:38:6a:88:5e:a7:c6:ce:db:96:89:d0:6d:75:51:
99:7a:8d:b3:8f:04:f6:ec:f2:dc:10:eb:b2:f2:e6:
6a:f4:d8:64:f4:59:4f:23:7f:e7:9f:64:3c:e5:06:
68:ab:48:b6:0b:b1:98:50:0d:14:0e:07:95:79:f6:
fa:49:8c:8a:3c:fd:cc:fa:ca:cf:da:08:6b:71:8d:
3c:ad:96:91:c0:c4:dc:a8:5f:8b:28:f1:28:3a:43:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:98:C7:54:E9:CA:2E:6C:F9:CC:45:5D:DA:67:6A:7F:73:AB:85:83
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f00d::/48
Signature Algorithm: sha256WithRSAEncryption
3a:4d:16:47:1d:91:5a:74:81:17:c3:98:49:fc:08:06:a7:8e:
a4:5e:1f:61:41:d2:34:a6:eb:94:98:a1:46:3c:e4:6a:b2:98:
02:f0:d1:85:af:af:fe:ac:6b:30:39:aa:07:e3:62:a9:b4:9f:
25:f8:47:43:9d:24:fb:81:29:12:62:3b:b9:89:a3:37:c4:da:
8f:7f:06:4b:6b:76:2f:0f:80:09:7f:e2:aa:a0:74:72:62:ff:
50:1d:61:fc:b4:e2:6b:9f:6d:32:9a:6e:f1:b8:39:8e:22:67:
a2:d8:f5:29:52:94:71:76:de:ce:46:b3:a6:3c:2b:84:bc:a2:
33:8c:f0:b5:13:dd:5d:2f:4e:fa:c6:cb:3e:04:b6:e0:e4:73:
a9:74:13:7c:0d:dc:14:b4:78:8b:b5:39:6f:a5:ab:e2:d4:59:
f2:a1:e4:89:14:94:bb:76:60:e9:fb:82:cb:ed:b1:69:c1:4e:
5e:8b:ac:a3:f9:fb:46:44:51:6a:e4:dd:9f:b3:b4:31:55:63:
fb:11:b4:55:30:94:1f:8e:f5:6f:85:b1:17:c0:81:1f:f8:5f:
bf:59:3b:13:d4:0c:87:25:08:7c:3d:93:a2:ac:8e:95:99:fd:
dd:c5:a6:66:56:5c:52:b8:fd:df:e1:92:73:e0:da:f1:77:c5:
0a:a9:27:a4
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUJTkSUEKmlgNe3SJx3fgMyiRUcmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NTBaFw0yNzExMDMyMDMyNTBaMDMxMTAvBgNV
BAMTKDdEOThDNzU0RTlDQTJFNkNGOUNDNDU1RERBNjc2QTdGNzNBQjg1ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXu3+HgtZaZideo+V59AWxekc
xM53hk1J2IZ9HY+odZtap2y4zkTtMRjbunwhXUIcdCPm10rMBoNGUUpj4EF3unpn
I6SVSk/1Hcrl3dUX6FJ2wpnJ2G0BQQu3pWMPKk5cYrnDrylH3tqmjbW/qByC9YOE
weuwxPFykaGs1EXHd4GvFRAhqsO5Uf4tKzN0A1AptoI05QCqbh51OqIRtrv0Kkrh
uko4aohep8bO25aJ0G11UZl6jbOPBPbs8twQ67Ly5mr02GT0WU8jf+efZDzlBmir
SLYLsZhQDRQOB5V59vpJjIo8/cz6ys/aCGtxjTytlpHAxNyoX4so8Sg6QwEzAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUfZjHVOnKLmz5zEVd2mdqf3OrhYMwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIxMjM2MC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoO
jwLwDTANBgkqhkiG9w0BAQsFAAOCAQEAOk0WRx2RWnSBF8OYSfwIBqeOpF4fYUHS
NKbrlJihRjzkarKYAvDRha+v/qxrMDmqB+NiqbSfJfhHQ50k+4EpEmI7uYmjN8Ta
j38GS2t2Lw+ACX/iqqB0cmL/UB1h/LTia59tMppu8bg5jiJnotj1KVKUcXbezkaz
pjwrhLyiM4zwtRPdXS9O+sbLPgS24ORzqXQTfA3cFLR4i7U5b6Wr4tRZ8qHkiRSU
u3Zg6fuCy+2xacFOXouso/n7RkRRauTdn7O0MVVj+xG0VTCUH471b4WxF8CBH/hf
v1k7E9QMhyUIfD2ToqyOlZn93cWmZlZcUrj93+GSc+Da8XfFCqknpA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:05 2026 by rpki-client