Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212770.roa
File: AS212770.roa (raw, json)
Hash identifier: mpmlejmYbQv+BKCcuRTPsOBgmFdknvnoA/VhShRAhHQ=
Subject key identifier: E2:69:03:2D:3D:7A:ED:11:8E:84:95:68:50:D8:BE:35:F8:DA:76:21
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7752FAD44C323089F026F0138BEF478A620FB552
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212770.roa
Signing time: Wed 10 Jun 2026 21:08:35 +0000
ROA not before: Wed 10 Jun 2026 21:03:35 +0000
ROA not after: Wed 09 Jun 2027 21:08:35 +0000
asID: 212770
IP address blocks: 2a0f:85c1:bab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:52:fa:d4:4c:32:30:89:f0:26:f0:13:8b:ef:47:8a:62:0f:b5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 10 21:03:35 2026 GMT
Not After : Jun 9 21:08:35 2027 GMT
Subject: CN=E269032D3D7AED118E84956850D8BE35F8DA7621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:d6:d7:2b:38:8f:c5:d1:26:e4:53:88:5e:
3e:89:33:13:cd:80:a0:f8:a8:11:61:cd:35:6a:41:
e7:bb:c6:4a:02:4f:4e:d7:b3:56:6a:b4:bb:f2:5e:
b8:68:05:0d:59:a1:af:28:bd:5f:31:09:fd:86:e3:
46:93:72:38:41:e0:d5:df:78:6e:50:69:89:aa:b3:
87:fe:60:4e:33:71:67:27:2e:bf:82:42:42:c6:3c:
57:1b:3b:8e:c3:e4:b8:00:cc:1c:b8:7b:9a:8f:67:
ac:c1:bd:d0:7a:e9:cc:cc:b0:06:a8:9e:c7:b4:27:
54:29:2c:2b:b9:7d:1c:58:17:6a:6b:c8:26:38:c9:
68:82:58:3d:1d:69:db:27:68:2c:ac:02:82:84:59:
d3:6f:62:4b:d4:c9:d4:46:93:5e:f4:47:35:8c:95:
52:71:6d:db:ed:48:d4:6a:8b:fa:cf:0d:45:7c:cb:
c6:81:8a:82:22:3b:94:c9:85:98:a5:02:ad:df:04:
35:a0:cf:a8:28:99:6d:36:6e:85:ff:06:1b:55:98:
4a:87:ed:55:bd:a9:e0:0f:bd:5a:84:65:dc:36:a3:
41:fa:7e:0d:65:72:19:90:54:72:32:03:fb:20:c5:
ec:e3:a7:3c:48:76:d2:bc:e0:a7:ec:6c:8e:41:54:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:69:03:2D:3D:7A:ED:11:8E:84:95:68:50:D8:BE:35:F8:DA:76:21
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bab::/48
Signature Algorithm: sha256WithRSAEncryption
98:f1:d9:01:cf:7d:7d:e2:b6:8e:d7:e7:bd:e1:29:ce:94:0c:
4a:a2:62:19:99:aa:79:9b:a6:9b:4b:56:90:2f:92:95:db:47:
0f:79:85:c9:9a:cb:a5:1e:9e:8c:dd:42:6d:92:e5:af:5a:d5:
82:59:1b:db:fc:84:9f:32:44:5f:df:bc:66:82:29:bd:91:63:
d3:18:7b:b6:8c:fe:35:a9:66:5b:bf:11:cf:84:80:71:d3:5d:
62:5e:17:da:7b:08:33:7f:d9:eb:9d:4d:3a:5c:3d:64:bc:b4:
a2:dc:1c:bf:04:e5:bb:75:5d:a5:b7:2e:08:92:1c:34:9d:8d:
c2:fb:90:b4:03:f9:24:3f:97:db:e5:69:6a:bb:b7:8a:77:2f:
90:17:c0:e2:d6:c7:69:b7:2d:1b:ad:17:de:bc:d4:88:21:ef:
2e:31:65:76:89:a4:99:da:98:96:c2:51:e8:99:1b:da:b7:dc:
bb:38:8f:9d:bc:ca:cb:1b:34:2e:bc:70:d8:33:da:5e:c2:87:
a5:c2:c4:22:22:c8:f7:45:73:b2:a8:cb:e5:f8:4e:fb:4e:a9:
dc:aa:1a:93:1f:52:3f:de:7a:0c:97:18:41:20:f2:35:42:59:
ab:c6:c7:55:05:23:b0:c0:73:23:00:a9:56:10:cd:c6:34:64:
c1:76:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:27:12 2026 by rpki-client