Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211484.roa
File: AS211484.roa (raw, json)
Hash identifier: cejQgnMgvI0JNieey9rM7OxYQCSX8/VWHVzKti7oEgw=
Subject key identifier: 73:EA:FD:9D:FB:B8:D9:D0:96:33:91:72:EB:A4:F3:78:46:9D:18:18
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 15C50D119520F263E7858DE42C8C36F10BAB75C5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211484.roa
Signing time: Sat 05 Jul 2025 00:00:08 +0000
ROA not before: Fri 04 Jul 2025 23:55:08 +0000
ROA not after: Sat 04 Jul 2026 00:00:08 +0000
asID: 211484
IP address blocks: 155.117.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c5:0d:11:95:20:f2:63:e7:85:8d:e4:2c:8c:36:f1:0b:ab:75:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 4 23:55:08 2025 GMT
Not After : Jul 4 00:00:08 2026 GMT
Subject: CN=73EAFD9DFBB8D9D096339172EBA4F378469D1818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:b1:9d:89:ce:5b:24:28:a6:b4:e7:ea:28:
a5:00:7f:bd:97:bf:c3:ff:ea:08:4b:6e:6e:8c:49:
c3:c0:c1:05:ac:f6:d7:e1:05:79:42:b1:0f:72:97:
14:7e:52:5b:61:f1:0d:10:d5:71:c0:b1:25:ac:fe:
cd:4a:13:53:01:81:d0:01:0c:04:07:83:08:71:a4:
54:ed:79:6b:4f:12:bb:90:ed:b6:db:fd:02:a8:a8:
e4:01:0f:bf:8b:4a:7a:b6:2d:c3:6f:db:2d:a5:19:
e1:a4:b2:d1:27:8f:20:a4:9b:41:c1:f4:4a:18:11:
69:3a:79:73:98:b9:69:5e:59:ad:65:07:fc:eb:c7:
cb:1d:9c:cc:75:bb:52:3d:0a:f5:21:3c:bf:74:24:
38:0a:a5:31:02:5b:d8:1a:6f:3f:f6:dc:00:86:5d:
cf:3a:ef:f6:20:28:d5:b5:65:47:56:87:47:0b:94:
21:76:4d:86:69:42:1c:10:88:7c:5c:e6:bb:38:da:
9d:dd:d1:e2:4c:9f:76:3a:ff:e3:65:67:36:a6:98:
4c:e4:a3:6b:b0:86:27:2b:a8:a1:29:1c:6a:52:fd:
11:6e:37:10:99:b9:69:ff:5d:57:6a:0c:ca:02:07:
0e:d5:02:51:34:e2:8f:eb:91:63:ea:db:cb:b9:1c:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:FD:9D:FB:B8:D9:D0:96:33:91:72:EB:A4:F3:78:46:9D:18:18
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.252.0/23
Signature Algorithm: sha256WithRSAEncryption
72:a6:42:53:a9:a5:81:0a:63:22:0e:1c:e2:b6:1a:b5:a7:55:
aa:9a:5c:d2:ef:1b:ee:c0:d5:8c:4b:eb:1e:7b:cf:ad:6e:b7:
da:62:f4:ad:7e:6a:5e:47:ff:1b:0c:e5:fd:50:6d:e3:59:33:
f0:d4:48:4a:10:b4:cc:5c:e5:4a:13:a7:9b:fb:c5:72:33:7d:
4e:eb:bc:41:03:48:80:30:98:79:bd:63:04:15:b9:66:21:ed:
f2:ab:ed:fc:a6:3a:3c:1a:1a:83:0f:e8:0d:b3:4d:fa:e0:1b:
1f:8a:1e:ad:25:07:45:b6:fa:4a:34:d7:3d:b2:24:d2:de:58:
9b:2e:a2:c1:98:9a:53:2d:e3:52:7f:01:c2:63:71:3d:c0:86:
61:d0:e2:2d:26:a3:16:e0:c0:fc:61:db:a3:09:84:65:3c:64:
31:ef:73:4d:bb:4a:99:df:a4:49:9b:32:2b:23:31:ac:bb:fd:
06:17:47:cc:3f:1d:c8:23:3a:dc:91:b7:64:d0:54:e2:87:b1:
69:5a:6a:ab:07:9f:f5:c8:66:19:bb:cc:1b:f5:21:2a:d8:8f:
02:af:58:90:7e:94:ab:ff:4f:c9:73:59:2b:46:57:3c:37:08:
08:9f:e1:3d:3f:99:5f:25:1b:58:1d:54:2a:c3:6a:01:fe:cb:
b8:50:ba:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUFcUNEZUg8mPnhY3kLIw28QurdcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA3MDQyMzU1MDhaFw0yNjA3MDQwMDAwMDhaMDMxMTAvBgNV
BAMTKDczRUFGRDlERkJCOEQ5RDA5NjMzOTE3MkVCQTRGMzc4NDY5RDE4MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZrGdic5bJCimtOfqKKUAf72X
v8P/6ghLbm6MScPAwQWs9tfhBXlCsQ9ylxR+Ulth8Q0Q1XHAsSWs/s1KE1MBgdAB
DAQHgwhxpFTteWtPEruQ7bbb/QKoqOQBD7+LSnq2LcNv2y2lGeGkstEnjyCkm0HB
9EoYEWk6eXOYuWleWa1lB/zrx8sdnMx1u1I9CvUhPL90JDgKpTECW9gabz/23ACG
Xc867/YgKNW1ZUdWh0cLlCF2TYZpQhwQiHxc5rs42p3d0eJMn3Y6/+NlZzammEzk
o2uwhicrqKEpHGpS/RFuNxCZuWn/XVdqDMoCBw7VAlE04o/rkWPq28u5HECxAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUc+r9nfu42dCWM5Fy66TzeEadGBgwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjExNDg0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBm3X8
MA0GCSqGSIb3DQEBCwUAA4IBAQBypkJTqaWBCmMiDhzithq1p1WqmlzS7xvuwNWM
S+see8+tbrfaYvStfmpeR/8bDOX9UG3jWTPw1EhKELTMXOVKE6eb+8VyM31O67xB
A0iAMJh5vWMEFblmIe3yq+38pjo8GhqDD+gNs0364Bsfih6tJQdFtvpKNNc9siTS
3libLqLBmJpTLeNSfwHCY3E9wIZh0OItJqMW4MD8YdujCYRlPGQx73NNu0qZ36RJ
mzIrIzGsu/0GF0fMPx3IIzrckbdk0FTih7FpWmqrB5/1yGYZu8wb9SEq2I8Cr1iQ
fpSr/0/Jc1krRlc8NwgIn+E9P5lfJRtYHVQqw2oB/su4ULp0
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:58:33 2025 by rpki-client