Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210812.roa
File: AS210812.roa (raw, json)
Hash identifier: hvMTBvd8Xy9BJmHu9jqiJeW11C/snajxzWx9W4iljok=
Subject key identifier: 30:3B:5F:30:99:98:56:52:51:8D:8E:3B:89:E7:BC:9F:B7:14:95:FF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 35B88D75BC216378AAF93B64B90C6409AD776AF5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210812.roa
Signing time: Tue 15 Sep 2026 21:09:11 +0000
ROA not before: Tue 15 Sep 2026 21:04:11 +0000
ROA not after: Tue 14 Sep 2027 21:09:11 +0000
asID: 210812
IP address blocks: 2a0f:85c1:d65::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b8:8d:75:bc:21:63:78:aa:f9:3b:64:b9:0c:64:09:ad:77:6a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 15 21:04:11 2026 GMT
Not After : Sep 14 21:09:11 2027 GMT
Subject: CN=303B5F3099985652518D8E3B89E7BC9FB71495FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:7d:57:0f:e5:1e:f2:1f:05:de:62:52:1c:
f4:57:77:3f:7a:ab:a5:4e:d2:37:11:a0:8b:53:51:
d8:24:e8:1b:22:50:b0:a5:8c:ae:fb:e7:ac:c5:e8:
dd:3b:50:e8:96:b4:8e:e5:7d:af:4b:cb:01:c8:f2:
4b:17:70:20:25:e8:90:a1:5f:72:d1:9c:74:1c:c4:
92:c5:f5:7c:87:9b:9c:d6:d4:91:95:fd:5a:a9:d8:
9a:18:60:02:90:57:cd:fa:f2:0e:19:aa:8f:51:ee:
15:10:df:6f:fc:05:1a:27:48:ec:4c:d2:5e:d7:10:
6c:f9:ec:57:0b:7a:2b:0a:7b:84:ae:d1:80:46:46:
47:8b:89:53:cb:a6:11:93:1a:c4:76:25:e9:d7:e6:
8a:38:16:95:d1:04:9f:6c:df:16:f5:15:1e:46:78:
32:57:e3:a1:d9:71:3c:a3:55:84:3f:d3:dc:22:29:
d8:ce:d8:91:c5:03:51:39:96:52:f7:8f:a3:21:21:
8f:a7:1d:0a:75:0d:3e:11:c9:41:57:dd:b2:7c:e2:
49:e3:ec:1e:b5:5c:de:fa:1f:0f:6f:81:da:cc:17:
35:3f:73:14:19:cc:41:1d:46:a9:33:b8:99:2d:b9:
03:64:10:5e:d3:f1:04:2c:83:7c:eb:cc:b2:a0:f6:
dc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3B:5F:30:99:98:56:52:51:8D:8E:3B:89:E7:BC:9F:B7:14:95:FF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210812.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d65::/48
Signature Algorithm: sha256WithRSAEncryption
dd:70:9a:ad:e8:72:e7:a6:5d:4a:6c:c6:48:09:a7:c4:90:f2:
a7:fb:f9:a7:d0:22:2e:4a:7b:16:66:cf:06:6e:20:9b:90:f6:
b8:9f:16:90:6e:2f:b9:1e:11:fb:39:db:9d:8d:a1:e9:d3:0b:
4e:33:a4:d6:72:ba:05:3d:f8:6c:93:29:50:c2:c9:f3:d7:12:
c1:91:5e:a9:63:00:79:30:2b:cb:83:90:ba:55:92:2a:cf:f8:
39:0e:b7:6f:a5:41:cb:24:48:f9:ec:68:bf:f3:c4:f7:31:e0:
7a:2b:99:58:37:ad:db:a8:db:05:ca:62:24:71:c5:8d:8d:52:
22:8a:e0:d1:57:bd:4e:7c:66:74:d8:b2:b4:aa:a8:ea:1c:5e:
06:24:7d:64:b3:71:20:d6:23:01:9b:c7:37:aa:82:05:47:3c:
df:55:fb:6e:2e:90:9a:30:48:6d:92:5d:42:2b:d1:73:c1:04:
82:a8:9a:bf:a0:a8:16:00:ca:d9:72:e8:a4:9b:36:54:18:3b:
6a:b6:87:01:52:cb:49:2e:8d:01:31:f7:8e:6e:92:be:97:8b:
d6:6e:fa:dd:20:0b:3e:69:4b:9a:31:3d:34:4c:56:c7:bf:57:
da:d2:d7:f3:3f:57:c1:bd:10:ba:06:27:30:3f:46:45:87:a4:
ac:50:1b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:35:55 2026 by rpki-client