Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212128.roa
File: AS212128.roa (raw, json)
Hash identifier: ZhnHI0zPbj6nwT1V2tRnq3/KaLu6tHFXxkuhtiOm8q8=
Subject key identifier: 1F:46:C5:AF:B1:EC:8A:B5:B4:8D:45:AA:CC:BB:C3:4A:91:91:44:B6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 18ED9D2265C3CFD20448A8EAB3F377D5B236B418
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212128.roa
Signing time: Wed 19 Aug 2026 03:09:06 +0000
ROA not before: Wed 19 Aug 2026 03:04:06 +0000
ROA not after: Wed 18 Aug 2027 03:09:06 +0000
asID: 212128
IP address blocks: 2a0f:85c1:88b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ed:9d:22:65:c3:cf:d2:04:48:a8:ea:b3:f3:77:d5:b2:36:b4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 03:04:06 2026 GMT
Not After : Aug 18 03:09:06 2027 GMT
Subject: CN=1F46C5AFB1EC8AB5B48D45AACCBBC34A919144B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:4f:d4:9c:36:bf:b0:a2:50:ab:6c:be:dd:
29:fe:1b:9a:8f:8e:92:74:15:cf:cd:e5:57:4f:cd:
a0:05:ca:5e:65:a6:c2:13:97:77:c6:ad:61:e3:c6:
37:05:62:b7:36:ea:3a:a3:72:0b:c5:79:dd:a1:6e:
20:88:1f:af:81:36:10:ae:2d:07:0d:64:0b:07:90:
08:97:4f:14:00:bc:8f:02:32:ba:33:a7:5e:95:1b:
df:84:e2:67:c6:be:cf:1d:5f:db:e3:73:b9:85:cb:
2e:78:0e:a4:08:0b:f9:7c:91:9b:0f:7b:cf:52:c2:
37:ad:41:d4:10:13:e4:8e:11:8b:0b:a4:fd:dd:52:
58:c7:9b:b5:74:86:80:7e:90:bf:31:b1:5c:14:08:
5e:bb:f6:11:70:6d:85:56:c7:ee:bf:ea:bc:fe:7c:
9f:55:88:8c:65:c7:bd:4f:aa:92:89:91:bb:df:d2:
59:f1:98:81:55:92:02:7a:ad:d6:33:96:54:3a:55:
59:27:b1:49:7f:fc:13:60:d4:9c:9a:ae:da:6a:8b:
da:62:c9:71:cc:3c:13:f8:2a:ed:e9:40:48:4a:5e:
f4:32:5d:a5:b3:de:87:78:65:57:a7:c5:07:cf:29:
83:f0:5c:e6:00:27:a7:d5:cd:08:d0:f7:ab:fa:f5:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:C5:AF:B1:EC:8A:B5:B4:8D:45:AA:CC:BB:C3:4A:91:91:44:B6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212128.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:88b::/48
Signature Algorithm: sha256WithRSAEncryption
c0:5c:bc:3a:76:10:fc:4a:57:16:1f:19:d3:4f:1f:b0:08:6e:
35:19:17:44:a5:65:50:bb:b0:9b:58:da:b0:f9:9c:1b:93:01:
00:0b:f9:07:b1:d9:db:4f:60:51:dc:4e:8e:35:06:c9:88:ff:
d1:d8:97:ef:c3:a5:ab:56:12:c5:47:32:0d:1e:1d:06:4f:a9:
f9:e2:2b:8c:8d:e1:7f:0d:1b:12:45:73:ab:7c:22:1e:a9:e9:
50:b0:27:72:44:d6:9d:93:7a:6a:33:47:c7:df:17:44:a8:f9:
b0:45:9e:f8:9a:ec:06:4a:92:58:d8:67:79:be:d4:2d:a3:9f:
24:3d:60:49:7d:26:49:6a:df:d1:8f:61:eb:45:dd:20:d1:9b:
40:1c:e5:b2:d7:ca:cc:a9:dc:07:19:64:cd:1c:4e:e6:fd:0d:
2b:a7:e6:74:01:f3:70:f4:3d:79:8d:9d:fc:1e:b4:b9:88:52:
22:4a:10:04:e4:75:8a:03:05:b7:95:00:57:23:2d:99:98:49:
0d:4d:2f:d1:14:44:ce:30:4d:f0:56:ac:15:10:32:34:e0:8e:
a1:4f:b6:20:34:41:36:fc:9d:1e:a5:d7:59:b9:d8:05:52:1f:
69:46:69:9f:90:0b:9c:02:d9:9d:87:1f:35:ef:bf:ca:4e:27:
45:fb:01:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:51:56 2026 by rpki-client