Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212720.roa
File: AS212720.roa (raw, json)
Hash identifier: NR9XSUUeV8tddCVDWArOB0ZDDUGovbyzaeW9NpQXxiY=
Subject key identifier: 59:F2:EA:7D:2E:B8:9B:3E:DB:16:D7:82:7A:38:9C:00:DC:F8:16:DC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5DCFF71F605FD7CF9D70FAE5CF9AC368332B0F3C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212720.roa
Signing time: Fri 06 Nov 2026 14:13:30 +0000
ROA not before: Fri 06 Nov 2026 14:08:30 +0000
ROA not after: Fri 05 Nov 2027 14:13:30 +0000
asID: 212720
IP address blocks: 82.21.157.0/24 maxlen: 24
82.25.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 04:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:cf:f7:1f:60:5f:d7:cf:9d:70:fa:e5:cf:9a:c3:68:33:2b:0f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 6 14:08:30 2026 GMT
Not After : Nov 5 14:13:30 2027 GMT
Subject: CN=59F2EA7D2EB89B3EDB16D7827A389C00DCF816DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:50:f0:13:c2:cf:fe:b9:57:d8:d3:53:66:
a4:1f:10:6f:a6:56:d0:76:d5:e8:f6:3e:ac:fb:4f:
01:d8:5b:27:01:1b:a4:02:81:31:3d:b4:2e:50:fa:
d4:51:00:f9:a8:c9:c0:35:70:0f:7c:ff:01:c0:2f:
f5:ec:9c:70:1c:3d:04:46:cf:a5:e7:78:57:1e:0d:
af:b2:c4:2d:09:e9:4f:55:f5:a1:89:f6:cd:65:70:
30:17:ae:d6:1a:1b:25:40:83:c5:d8:01:64:62:3e:
6b:d3:28:4e:85:40:01:98:a6:ee:73:f5:4d:f3:ce:
11:49:c2:b8:53:de:07:68:2f:00:3a:41:36:da:80:
62:7a:d4:39:ee:24:17:07:e0:43:fe:ff:3e:28:a3:
82:dd:c8:9b:16:c5:76:ad:b2:1b:4d:ba:f3:7c:25:
3c:f2:94:58:af:22:b3:5a:cd:29:11:66:a7:ba:74:
8b:76:7e:8f:18:83:41:dd:b9:9f:89:14:e1:c8:e9:
8a:76:90:15:09:00:b2:49:e2:e8:23:bd:bd:fc:93:
61:b9:e1:72:57:16:d7:e1:59:9d:30:86:e3:75:79:
e1:ed:16:07:8e:89:ba:9d:d5:eb:df:8a:2c:48:f5:
1b:32:c7:17:29:e2:c9:65:5b:b9:a4:b0:c7:cf:cd:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F2:EA:7D:2E:B8:9B:3E:DB:16:D7:82:7A:38:9C:00:DC:F8:16:DC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.157.0/24
82.25.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:7e:4d:bf:17:6f:6e:fa:d7:4e:62:79:8c:55:2a:22:92:81:
a6:fc:30:29:ca:e0:7d:6c:74:c1:4c:44:d4:47:df:31:47:3a:
35:7f:9d:40:60:d4:25:9d:89:23:6a:39:6e:cb:ca:5a:01:53:
4b:7a:e7:76:40:9a:f2:97:94:b2:36:68:c1:a0:33:c3:83:bf:
06:0c:a5:6d:e7:d5:ca:32:29:ce:60:57:a6:c5:b8:b9:70:67:
f2:8e:ee:72:5a:f9:e7:4b:95:de:09:f6:93:22:7d:2a:80:74:
60:b4:c8:9f:d2:c3:a5:83:ba:6d:b9:38:4c:24:49:e0:02:71:
69:54:af:46:73:51:d8:71:0e:bf:2f:36:98:4e:9f:63:57:20:
a9:c2:4c:90:7b:a5:c0:bf:59:42:b6:e2:3e:9f:6d:c4:55:4b:
9e:c7:b0:58:92:9c:eb:b5:1b:07:5f:a3:03:df:e6:d7:07:cc:
70:1c:52:b7:0a:cb:b4:af:dd:a8:cf:f0:92:8c:ac:99:1b:57:
a0:62:b1:d2:96:94:90:40:71:08:d0:82:af:de:a8:de:9e:c1:
cc:bb:1f:e7:06:69:37:8f:61:cb:a6:30:cc:16:5d:40:a3:ba:
1c:7a:b2:63:e2:5e:07:81:a9:d3:e7:62:0a:79:27:8a:9f:95:
bf:fb:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 14:44:21 2026 by rpki-client