Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212513.roa
File: AS212513.roa (raw, json)
Hash identifier: zfibifARNpYUIoPFpzCK41OuSgNVk8d7BcH7H8PYI6Q=
Subject key identifier: 88:AA:EA:94:56:7F:B5:6A:AA:7E:B1:C0:BA:93:79:86:E6:CD:2B:A6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 505288D93BD06388C33CFE503AB2FA19D7A5765F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212513.roa
Signing time: Sat 28 Feb 2026 12:20:48 +0000
ROA not before: Sat 28 Feb 2026 12:15:48 +0000
ROA not after: Sat 27 Feb 2027 12:20:48 +0000
asID: 212513
IP address blocks: 82.26.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:52:88:d9:3b:d0:63:88:c3:3c:fe:50:3a:b2:fa:19:d7:a5:76:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 28 12:15:48 2026 GMT
Not After : Feb 27 12:20:48 2027 GMT
Subject: CN=88AAEA94567FB56AAA7EB1C0BA937986E6CD2BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:b2:75:f9:e6:13:91:62:d7:4a:39:95:3a:
d8:ca:02:cd:6f:3b:ab:56:f0:22:8e:fe:eb:aa:79:
94:c2:9c:9b:f2:c0:13:2e:19:68:a5:84:b3:5d:fa:
9b:77:52:19:22:c7:f1:48:c4:7a:47:77:b0:41:ae:
fa:b5:7a:bd:11:86:8a:f2:ed:18:04:a3:69:e6:c8:
a5:5d:03:b1:74:78:f4:bc:b1:c2:e3:23:f8:7c:0f:
12:e9:a3:30:b5:0a:14:02:db:56:3e:41:a0:52:85:
ac:a7:c7:08:dc:b9:04:63:69:e6:aa:92:9e:23:85:
cb:d1:7c:88:a6:69:e2:07:40:f9:f2:9c:e5:7a:7e:
29:3a:8e:de:b8:8b:65:6e:66:fe:2a:d7:dc:6c:b4:
45:74:23:c2:1e:5b:91:fa:cb:1b:1b:c4:4f:ed:9f:
a3:55:59:89:25:6b:47:4f:6d:80:e4:9b:66:5d:41:
02:12:72:cf:9f:fd:55:d0:23:0e:4a:79:22:f0:b4:
6d:04:53:5a:a1:a7:c5:ac:8a:1a:18:b3:78:c2:a9:
3b:aa:6b:15:8e:9a:47:02:e7:18:77:a3:7f:e8:0a:
ea:6d:e4:19:c9:51:bd:63:9a:5b:39:69:aa:8f:78:
d7:5a:75:f0:3a:26:e2:16:49:bb:31:31:a6:9a:58:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AA:EA:94:56:7F:B5:6A:AA:7E:B1:C0:BA:93:79:86:E6:CD:2B:A6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212513.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.132.0/24
Signature Algorithm: sha256WithRSAEncryption
81:71:3e:82:97:7c:6b:8a:4f:7f:83:ea:46:cb:0f:6c:4d:43:
25:56:27:15:0b:fa:03:3d:8f:48:85:57:3f:e3:b7:8e:01:ca:
b8:c3:f5:77:66:97:51:e5:2d:99:b0:f1:3c:a5:32:33:5e:c4:
89:c8:df:f7:7a:32:d2:d1:52:5f:bf:4b:fe:37:c7:4e:ff:35:
35:d6:fc:3a:7f:a7:6f:3e:3f:37:8f:d3:05:8b:07:1a:9c:a0:
cb:39:c6:5d:59:07:8d:e9:5f:b6:8d:10:cd:b2:02:36:25:14:
68:66:41:5e:32:be:8a:b4:74:98:f1:8a:e5:60:1c:97:01:45:
c7:95:d5:bc:ee:3a:a4:be:61:45:8e:3b:d2:f5:cc:01:74:00:
f4:e8:fd:d0:d7:4e:5c:19:ba:62:2e:43:40:e0:e3:7f:b8:9e:
82:d2:30:5c:08:89:16:27:12:df:f8:2a:32:67:93:15:bd:ae:
f2:94:5a:cf:24:66:b3:d7:af:dc:9b:b3:66:2b:d5:3f:78:90:
45:f6:be:a0:d6:85:36:5e:d0:cf:76:26:5d:f9:ee:93:fc:62:
5f:fe:2b:99:ad:77:3c:3a:96:2b:0b:87:88:33:c5:2d:b6:a6:
07:9e:5f:cf:70:5d:ad:ae:f6:80:c9:37:fc:f4:22:70:93:49:
d2:1a:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:15 2026 by rpki-client