Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212528.roa
File: AS212528.roa (raw, json)
Hash identifier: jPy23I1GlOgmJ1VgSnWupJTuo8UvV2vvWpyfmuHEZK8=
Subject key identifier: 28:39:D7:93:B3:AF:05:8D:6B:DB:F5:9E:CC:4A:FE:DE:05:7C:F4:EB
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5FA393F5AFAD658ECA0062A3CBB8A4D57C377BE5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212528.roa
Signing time: Tue 03 Feb 2026 18:08:21 +0000
ROA not before: Tue 03 Feb 2026 18:03:21 +0000
ROA not after: Tue 02 Feb 2027 18:08:21 +0000
asID: 212528
IP address blocks: 2a0f:85c1:baf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a3:93:f5:af:ad:65:8e:ca:00:62:a3:cb:b8:a4:d5:7c:37:7b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 3 18:03:21 2026 GMT
Not After : Feb 2 18:08:21 2027 GMT
Subject: CN=2839D793B3AF058D6BDBF59ECC4AFEDE057CF4EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:2f:4e:5b:44:05:e8:0c:c9:7f:c1:da:b6:
d4:ac:83:e1:48:75:df:c1:dd:fc:96:90:4d:95:5f:
c7:4a:4d:d4:dc:f7:b0:9b:a3:f8:b5:50:d7:1b:1c:
17:78:39:f3:9c:c7:84:17:ec:8a:73:68:a7:b3:95:
e6:0e:5b:f0:4b:67:b1:3e:2f:a4:51:1a:fa:eb:99:
36:e9:6e:65:14:2a:8e:1c:3c:dc:a0:c1:28:be:d0:
c7:de:fa:5e:6c:04:15:8c:b7:ba:f4:11:a8:d4:db:
f4:fc:4a:25:83:8e:47:04:6b:58:24:9d:93:9b:fb:
c2:4f:bd:01:2e:73:42:68:5a:c3:e2:a3:cc:46:b6:
52:c2:8f:33:19:28:0b:bb:5b:68:72:e0:2d:9f:93:
2b:bd:52:46:15:44:e1:fb:be:f7:56:53:81:c0:f0:
da:32:b5:d9:33:6f:2c:e1:9e:09:cc:2a:6a:9e:17:
66:b4:58:78:03:fb:a4:58:2d:4c:3c:78:e4:6b:ce:
5a:f2:e7:ca:18:bf:fa:1b:20:48:d6:e8:04:cc:68:
10:53:00:69:3d:0f:92:71:0c:c7:2c:ba:26:a8:26:
36:d9:41:b7:97:98:14:43:b4:ea:53:7f:cf:3a:5b:
9c:b0:36:be:33:ab:4c:b7:60:b2:8c:31:4e:72:a0:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:D7:93:B3:AF:05:8D:6B:DB:F5:9E:CC:4A:FE:DE:05:7C:F4:EB
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212528.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:baf::/48
Signature Algorithm: sha256WithRSAEncryption
0a:87:26:81:3f:9b:58:b7:34:dd:dd:12:7f:a6:c1:cc:62:ca:
ac:cc:c3:4d:7e:68:79:fc:2e:ac:5e:36:36:c7:8a:38:3f:67:
97:09:9b:3b:fd:b1:69:1f:c6:8c:6e:f6:12:13:8f:4d:d1:b2:
44:bf:8d:36:4e:0c:bb:6c:95:78:65:1b:00:ab:89:9c:87:df:
b0:c6:95:91:a5:b1:30:54:2e:60:e3:e7:c4:02:3e:b2:04:66:
a2:ea:63:b1:96:33:ea:2e:6f:94:03:b9:54:95:32:c2:35:06:
9a:91:d2:13:6d:9a:08:30:36:89:5a:bc:fb:28:f2:b7:23:df:
27:45:a3:da:79:a7:04:06:b0:8b:bb:52:c6:44:dc:c0:60:b4:
06:17:04:90:ec:30:9a:d3:15:cd:0d:e6:07:87:57:93:61:89:
80:df:2d:1d:2a:0c:f1:52:43:f4:6f:7c:43:a6:d3:8a:3b:89:
02:80:c4:61:25:2e:0e:cb:3c:96:06:3d:a6:f8:19:53:1b:46:
5c:4f:5b:3f:0f:6c:2b:0a:c5:1d:27:a1:92:95:28:d5:f8:c1:
f3:f3:fc:c2:85:24:97:46:7b:2e:5f:10:64:2d:74:91:98:eb:
86:cd:bf:d3:d7:d8:5e:44:67:ca:7a:f0:25:9c:e1:ff:25:a4:
50:a3:4e:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUX6OT9a+tZY7KAGKjy7ik1Xw3e+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjAyMDMxODAzMjFaFw0yNzAyMDIxODA4MjFaMDMxMTAvBgNV
BAMTKDI4MzlENzkzQjNBRjA1OEQ2QkRCRjU5RUNDNEFGRURFMDU3Q0Y0RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsy9OW0QF6AzJf8HattSsg+FI
dd/B3fyWkE2VX8dKTdTc97Cbo/i1UNcbHBd4OfOcx4QX7IpzaKezleYOW/BLZ7E+
L6RRGvrrmTbpbmUUKo4cPNygwSi+0Mfe+l5sBBWMt7r0EajU2/T8SiWDjkcEa1gk
nZOb+8JPvQEuc0JoWsPio8xGtlLCjzMZKAu7W2hy4C2fkyu9UkYVROH7vvdWU4HA
8NoytdkzbyzhngnMKmqeF2a0WHgD+6RYLUw8eORrzlry58oYv/obIEjW6ATMaBBT
AGk9D5JxDMcsuiaoJjbZQbeXmBRDtOpTf886W5ywNr4zq0y3YLKMMU5yoFaZAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUKDnXk7OvBY1r2/WezEr+3gV89OswHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEyNTI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQuvMA0GCSqGSIb3DQEBCwUAA4IBAQAKhyaBP5tYtzTd3RJ/psHMYsqszMNNfmh5
/C6sXjY2x4o4P2eXCZs7/bFpH8aMbvYSE49N0bJEv402Tgy7bJV4ZRsAq4mch9+w
xpWRpbEwVC5g4+fEAj6yBGai6mOxljPqLm+UA7lUlTLCNQaakdITbZoIMDaJWrz7
KPK3I98nRaPaeacEBrCLu1LGRNzAYLQGFwSQ7DCa0xXNDeYHh1eTYYmA3y0dKgzx
UkP0b3xDptOKO4kCgMRhJS4OyzyWBj2m+BlTG0ZcT1s/D2wrCsUdJ6GSlSjV+MHz
8/zChSSXRnsuXxBkLXSRmOuGzb/T19heRGfKevAlnOH/JaRQo04d
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:34 2026 by rpki-client