Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212868.roa
File: AS212868.roa (raw, json)
Hash identifier: ne8hEmmb227bjzBQsAkJrqcYRn50HmuSyeRtxc8IO4A=
Subject key identifier: 1D:32:FB:A0:A0:87:73:B7:15:A3:29:0E:6D:E6:D7:1D:BA:D8:1D:0A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5EBBD3743CE99B90EABBFD382085F5FDCF9F32AE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212868.roa
Signing time: Mon 14 Sep 2026 16:49:35 +0000
ROA not before: Mon 14 Sep 2026 16:44:35 +0000
ROA not after: Mon 13 Sep 2027 16:49:35 +0000
asID: 212868
IP address blocks: 82.22.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:bb:d3:74:3c:e9:9b:90:ea:bb:fd:38:20:85:f5:fd:cf:9f:32:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 14 16:44:35 2026 GMT
Not After : Sep 13 16:49:35 2027 GMT
Subject: CN=1D32FBA0A08773B715A3290E6DE6D71DBAD81D0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:6c:85:13:6c:42:22:7e:59:fb:ae:6c:db:
41:7d:7a:70:34:9e:35:26:5d:09:bd:95:23:70:01:
38:14:af:ca:e6:55:bf:30:58:20:00:a1:a2:69:b6:
99:b9:e8:6f:12:76:db:12:a4:75:21:3f:e0:7a:5b:
7f:07:2a:56:a8:49:02:f1:8a:a2:b6:4f:0f:dd:48:
54:f1:ee:50:f0:f2:55:ea:7a:cf:99:4b:6d:d5:20:
db:ff:ba:47:97:8d:1b:dd:08:08:6e:78:6e:b6:6b:
1e:1b:8f:99:b2:d9:75:5e:aa:da:dd:c6:3f:d7:ad:
64:0e:46:5b:d4:2a:3a:80:74:44:19:44:81:64:83:
9a:de:f3:95:e3:de:e0:1b:86:35:c5:d4:f1:fd:a1:
88:b3:ee:91:a9:94:04:42:b1:e9:2a:56:be:41:b5:
3b:32:62:1f:d5:61:c6:7c:04:c7:e3:92:16:cd:83:
2f:45:5c:49:16:8d:37:2b:f9:cb:78:98:75:d0:97:
50:a0:f4:e0:14:96:25:29:7b:7d:77:14:a0:f3:b6:
7d:d6:57:c1:42:96:7e:41:f0:0a:f0:b3:1c:97:3b:
4c:b5:f5:99:57:7d:98:54:a8:c5:ac:cc:bc:17:6e:
4e:99:f2:8a:09:c1:65:74:fe:5d:44:39:ad:1c:b7:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:FB:A0:A0:87:73:B7:15:A3:29:0E:6D:E6:D7:1D:BA:D8:1D:0A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.20.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f0:93:5e:00:f7:17:ee:5f:94:3b:2a:c7:e5:cc:81:48:58:
b2:55:50:cb:f2:b1:aa:47:bc:d4:4c:9b:8e:89:ab:4e:84:23:
e6:b7:36:95:12:a0:aa:8d:f5:ca:bd:7f:14:10:cf:f9:f5:09:
40:9a:cd:39:ec:55:e4:26:7f:19:75:af:0e:4c:8d:cd:ce:5c:
3a:f9:d6:2b:83:84:5c:d5:ab:00:4d:34:d3:a3:1a:9d:04:0e:
1e:8f:7c:a0:30:c1:fe:78:93:f6:63:3d:fa:e8:48:f5:13:fa:
81:7c:04:7b:11:f9:0f:a3:cc:04:6c:22:ee:76:61:f8:61:8c:
9c:85:b9:9c:5c:c0:06:f8:a8:62:8f:cb:fc:4d:25:6c:dd:44:
d6:6f:19:f3:e1:b4:35:9b:41:b4:a3:e0:38:ba:af:bc:3f:ce:
a2:da:d6:5d:20:0e:e8:85:50:b6:2f:11:22:66:2b:80:b1:63:
7e:b8:56:30:b6:8e:e8:b1:f6:ff:ac:a0:4e:42:92:1a:d8:81:
69:e5:24:af:ee:18:00:83:49:6b:10:23:fa:d2:0b:8a:f1:f8:
db:63:53:06:e0:15:58:31:f5:eb:c3:61:b5:d1:e9:bf:ea:4f:
79:73:dd:71:e8:9f:96:d5:b8:c8:84:eb:e0:db:1e:3e:0b:08:
da:9d:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:03:33 2026 by rpki-client