Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212370.roa
File: AS212370.roa (raw, json)
Hash identifier: P4eiKTi4DF6vO/LUFkk4P6Nmeb3dwMzMuXZS9OwPUR0=
Subject key identifier: 25:EA:E0:13:7B:26:DC:66:24:DA:C4:7F:4F:23:E8:8C:6D:86:02:FE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2D3A8496EAC1EF931A50E172766CA88DE7A9B3BC
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212370.roa
Signing time: Tue 03 Feb 2026 18:08:21 +0000
ROA not before: Tue 03 Feb 2026 18:03:21 +0000
ROA not after: Tue 02 Feb 2027 18:08:21 +0000
asID: 212370
IP address blocks: 2a0f:85c1:bb0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3a:84:96:ea:c1:ef:93:1a:50:e1:72:76:6c:a8:8d:e7:a9:b3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 3 18:03:21 2026 GMT
Not After : Feb 2 18:08:21 2027 GMT
Subject: CN=25EAE0137B26DC6624DAC47F4F23E88C6D8602FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:f9:2e:02:1e:19:74:0a:4f:7e:20:87:fa:
af:d9:e9:1e:59:7a:4e:af:59:d7:ee:1a:90:90:a1:
4e:61:3a:fa:bc:9d:19:c6:c4:6e:b1:92:41:b5:cb:
a5:94:c4:bf:e7:08:61:9f:d0:40:05:d7:9c:2f:5f:
86:86:77:3a:07:6e:22:19:c5:cc:76:30:47:fc:b2:
b4:41:18:64:49:30:99:d0:6f:22:3e:f0:f7:4d:50:
99:45:1a:4a:a9:15:5f:f1:26:31:12:fe:db:90:fa:
0b:7c:88:c3:82:b9:a3:78:92:08:52:5d:da:ce:8c:
34:a1:1f:21:82:ad:43:19:2f:59:ff:37:db:7c:87:
8a:1e:a1:07:e4:1e:c0:47:15:54:6e:54:5c:88:7f:
2f:e0:8d:e0:50:54:06:9d:c6:36:70:4d:6e:4f:e1:
c1:7e:50:0b:b5:c9:1a:1c:f4:23:ad:34:40:5d:01:
ea:ef:f2:e9:1b:83:21:b5:9a:cb:ce:46:76:20:55:
ca:8d:9b:93:2c:39:d5:de:4a:5a:78:53:18:08:92:
b6:35:f0:2f:c0:5f:ae:ec:3f:4d:0b:dd:b7:65:c7:
b9:29:65:77:be:c3:f0:bd:3d:74:d5:58:6b:ee:8b:
f6:a6:ee:32:c0:68:6d:f6:33:41:4a:44:16:db:7f:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EA:E0:13:7B:26:DC:66:24:DA:C4:7F:4F:23:E8:8C:6D:86:02:FE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bb0::/48
Signature Algorithm: sha256WithRSAEncryption
4a:98:83:69:09:26:33:c5:4d:f0:89:83:86:b7:65:c6:4a:2a:
56:ef:f0:4c:cb:ca:ea:c4:34:87:94:72:21:96:2e:0a:5a:50:
3a:3f:86:cc:93:93:fd:52:c2:5c:5b:82:cf:86:b0:34:ba:30:
ca:57:59:62:b1:7a:e4:f0:68:5d:9d:89:00:59:2a:84:c6:67:
60:a8:fb:ae:fe:22:e4:bf:24:63:51:47:9f:70:d1:30:cd:55:
fe:2a:0e:4e:b1:3e:dd:8a:37:93:ed:86:91:29:e4:a3:5e:41:
56:b6:49:0f:46:7f:f9:ed:0f:03:eb:fa:dc:47:54:8a:93:db:
7b:9e:bd:7a:37:75:d0:93:e3:ff:77:dd:1a:cc:24:d7:19:11:
9f:4b:e5:0b:9e:2f:4b:29:fe:f1:2f:f0:20:ea:3f:5e:b7:1e:
e3:fd:8a:71:51:89:5f:ad:41:9c:3b:53:b5:5a:6e:3a:06:19:
66:a5:f5:5d:87:d8:7e:c2:48:f0:59:a3:10:db:e3:ac:5e:5c:
b3:02:d7:b3:20:b5:f5:36:f5:3b:8c:d8:86:5b:9b:70:a3:26:
66:1c:c5:f5:50:b1:15:9a:c7:d5:75:ed:73:bf:6a:43:e8:e8:
9b:07:6b:d5:7d:c2:c5:e0:57:54:a2:9c:65:e9:f8:d3:17:f5:
dc:bd:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:14:44 2026 by rpki-client