Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212746.roa
File: AS212746.roa (raw, json)
Hash identifier: eyuKNiMUDN8477e5/xuxGKB7snA3yaVdhU5rDpNdSV4=
Subject key identifier: 2C:F3:28:F8:4D:EE:E8:04:4E:E6:D1:41:23:AC:0F:2B:0E:F5:55:2A
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 193D512C06EC91BE3B7EE1A5851BA64C8CC1C43E
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212746.roa
Signing time: Wed 04 Nov 2026 20:32:47 +0000
ROA not before: Wed 04 Nov 2026 20:27:47 +0000
ROA not after: Wed 03 Nov 2027 20:32:47 +0000
asID: 212746
IP address blocks: 2a0e:8f02:2040::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 11:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3d:51:2c:06:ec:91:be:3b:7e:e1:a5:85:1b:a6:4c:8c:c1:c4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:47 2026 GMT
Not After : Nov 3 20:32:47 2027 GMT
Subject: CN=2CF328F84DEEE8044EE6D14123AC0F2B0EF5552A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:f4:d9:7e:65:eb:8e:62:f2:28:89:99:f3:
cc:47:52:2f:05:fa:8c:f8:3a:7b:c4:71:bc:e8:e0:
64:0d:3f:5e:b0:0c:a7:1c:b1:04:c2:da:f1:7e:a1:
20:d7:b9:b6:e5:f7:18:b7:f9:7f:07:fe:5e:35:f0:
f7:95:9b:fc:31:7b:a7:4e:28:03:cb:54:c9:a2:3f:
bb:79:f1:f9:f9:79:89:e8:fc:67:1e:0b:eb:3d:80:
2c:3d:ab:cc:07:e7:06:ef:79:5c:2a:e2:c2:ed:37:
6d:da:61:8b:1d:7c:ac:d9:4a:2a:5d:a3:a3:9f:c2:
72:5d:8c:01:fe:16:f6:c9:8b:48:9f:1d:d6:0b:52:
4a:bf:57:47:ca:5d:f7:38:18:4b:af:47:45:b2:40:
e0:16:90:df:83:70:50:bc:3a:e6:28:00:cc:8a:4c:
11:c6:c5:64:5c:3e:2e:a5:b3:04:87:77:88:a9:7d:
6c:9e:ed:99:0c:83:e2:d4:9a:ce:05:60:9c:43:69:
36:bd:fe:95:91:9a:04:8d:50:4f:dd:c2:04:96:c7:
62:02:16:9c:04:a5:d2:db:8b:de:67:f8:17:b6:ba:
5f:27:ff:ea:66:fa:e5:44:5f:96:7f:6f:07:e1:91:
33:00:0f:6b:5a:1d:ae:99:6b:32:d8:ba:77:f5:96:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F3:28:F8:4D:EE:E8:04:4E:E6:D1:41:23:AC:0F:2B:0E:F5:55:2A
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS212746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2040::/44
Signature Algorithm: sha256WithRSAEncryption
73:0b:b1:fa:d5:77:fb:b6:22:15:00:c2:da:5c:0d:6c:2a:76:
70:ab:f9:d9:1b:4a:00:e9:63:d7:ae:d8:90:f1:95:be:d6:0f:
37:27:b8:b5:68:8b:22:f1:fe:72:99:65:9a:6f:b1:14:e4:08:
89:5b:c0:8a:11:ce:c4:9d:b6:b4:9d:9a:25:46:fe:51:f0:f4:
2a:d0:c1:2f:05:8d:c7:ba:b5:da:16:89:fe:b2:5c:51:61:e5:
b1:6a:84:2d:3a:fc:dc:7f:9d:ec:ae:b7:41:b9:f3:ff:11:38:
ec:9f:3d:6d:e8:c9:ef:1f:38:10:7c:bc:54:a1:ce:ac:7b:18:
3d:70:fb:91:90:11:03:74:b1:16:7e:eb:3b:df:40:99:09:7f:
15:d8:69:c7:2c:89:c7:33:1b:6e:f3:36:1a:6c:62:84:ec:c5:
de:d4:5a:ec:ca:28:51:a3:38:f9:81:87:43:43:31:1b:07:69:
4c:a7:f9:17:e1:3f:d0:b0:bc:db:dd:f6:26:ec:69:c3:fd:a6:
34:52:7f:ef:1d:a8:a7:68:72:e3:57:2f:ca:5f:f1:fe:c5:42:
6a:7a:e8:6a:06:81:b7:ff:6a:f6:5e:b6:8e:ec:63:ee:fe:1e:
34:97:21:27:cf:a6:d5:24:74:7d:56:ad:7d:87:f1:fc:47:65:
42:b2:c3:cd
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUGT1RLAbskb47fuGlhRumTIzBxD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NDdaFw0yNzExMDMyMDMyNDdaMDMxMTAvBgNV
BAMTKDJDRjMyOEY4NERFRUU4MDQ0RUU2RDE0MTIzQUMwRjJCMEVGNTU1MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfQvTZfmXrjmLyKImZ88xHUi8F
+oz4OnvEcbzo4GQNP16wDKccsQTC2vF+oSDXubbl9xi3+X8H/l418PeVm/wxe6dO
KAPLVMmiP7t58fn5eYno/GceC+s9gCw9q8wH5wbveVwq4sLtN23aYYsdfKzZSipd
o6OfwnJdjAH+FvbJi0ifHdYLUkq/V0fKXfc4GEuvR0WyQOAWkN+DcFC8OuYoAMyK
TBHGxWRcPi6lswSHd4ipfWye7ZkMg+LUms4FYJxDaTa9/pWRmgSNUE/dwgSWx2IC
FpwEpdLbi95n+Be2ul8n/+pm+uVEX5Z/bwfhkTMAD2taHa6ZazLYunf1lvljAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQULPMo+E3u6ARO5tFBI6wPKw71VSowHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIxMjc0Ni5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoO
jwIgQDANBgkqhkiG9w0BAQsFAAOCAQEAcwux+tV3+7YiFQDC2lwNbCp2cKv52RtK
AOlj167YkPGVvtYPNye4tWiLIvH+cpllmm+xFOQIiVvAihHOxJ22tJ2aJUb+UfD0
KtDBLwWNx7q12haJ/rJcUWHlsWqELTr83H+d7K63Qbnz/xE47J89bejJ7x84EHy8
VKHOrHsYPXD7kZARA3SxFn7rO99AmQl/FdhpxyyJxzMbbvM2GmxihOzF3tRa7Moo
UaM4+YGHQ0MxGwdpTKf5F+E/0LC82932Juxpw/2mNFJ/7x2op2hy41cvyl/x/sVC
anroagaBt/9q9l62juxj7v4eNJchJ8+m1SR0fVatfYfx/EdlQrLDzQ==
-----END CERTIFICATE-----
Generated at Tue Nov 10 18:55:20 2026 by rpki-client