Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211750.roa
File: AS211750.roa (raw, json)
Hash identifier: izqL3T6/+VMU9SPTzXsvHmgEsdqt3OfSLD6mPLgAasM=
Subject key identifier: F3:A8:10:D3:48:6E:56:F2:24:88:87:EB:9C:B1:F2:F9:30:64:61:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 17B33A0E6A02FA3D071CFEDD35FB2148E95CB96C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211750.roa
Signing time: Wed 17 Jun 2026 18:47:41 +0000
ROA not before: Wed 17 Jun 2026 18:42:41 +0000
ROA not after: Wed 16 Jun 2027 18:47:41 +0000
asID: 211750
IP address blocks: 140.233.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b3:3a:0e:6a:02:fa:3d:07:1c:fe:dd:35:fb:21:48:e9:5c:b9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 17 18:42:41 2026 GMT
Not After : Jun 16 18:47:41 2027 GMT
Subject: CN=F3A810D3486E56F2248887EB9CB1F2F930646180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:01:dd:8a:dc:b2:41:79:ce:42:b9:24:3d:
3a:b4:47:26:d1:5b:4f:5b:07:b7:fe:56:95:e9:b7:
3f:14:2b:65:19:61:49:88:da:79:b2:2e:6f:02:33:
ac:7e:54:02:9e:c7:fc:d4:c5:1d:a8:cf:2a:ce:14:
54:47:17:6b:9f:92:1c:03:b4:56:4d:2b:d5:99:72:
d1:10:92:c4:53:30:8d:9f:49:10:72:7d:9b:d8:16:
83:3a:f7:85:38:07:be:18:f7:39:69:57:5c:c3:2f:
a5:98:c0:d8:b9:7f:75:74:6e:fb:bb:9a:76:65:d1:
f3:c7:f9:a2:4c:9a:9a:41:4c:a4:c3:f2:04:aa:1d:
4a:36:78:6a:43:c2:8e:c3:47:58:7c:fb:b0:40:cd:
44:a7:aa:df:16:9b:7c:d7:4f:f2:a6:a8:8c:26:70:
d2:78:dd:83:84:b4:fc:29:dc:49:4f:e3:66:a3:6d:
02:16:e8:60:67:14:75:48:6a:96:ea:4f:82:dc:f1:
4f:f2:2d:1c:7f:a1:b4:74:d7:a2:09:29:b0:7a:6c:
a0:cf:ef:26:b3:7e:ec:a1:72:8d:d1:5e:8f:f7:56:
70:45:73:d9:86:dc:41:6c:0f:b1:89:57:96:c5:07:
61:e8:81:70:88:17:64:54:9d:01:50:21:47:76:cf:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A8:10:D3:48:6E:56:F2:24:88:87:EB:9C:B1:F2:F9:30:64:61:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211750.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:3e:8e:59:cc:f7:b3:c5:7c:2a:2b:c9:03:d8:90:71:c2:26:
db:1c:53:f0:b6:fb:8f:ad:07:72:d6:fc:b5:72:89:b3:a4:08:
f2:13:52:63:1d:d6:8f:ab:24:95:4d:c6:56:51:d4:2e:53:42:
47:4b:44:1d:32:9b:08:a8:e2:67:aa:d5:1e:69:3f:32:a7:d1:
d7:9a:cf:5a:d3:4f:95:8b:af:7f:1c:2e:f2:4a:e1:dd:92:76:
21:d5:e0:f7:5e:d3:f1:cb:fb:1c:1e:17:1c:07:a8:eb:eb:d7:
b8:78:fc:c8:54:57:22:11:4f:70:6b:97:43:9a:35:cc:59:ce:
1d:82:c0:c6:90:5d:f9:44:8e:d2:b7:9a:21:6c:05:c1:ea:33:
23:5e:0e:94:c7:a5:08:27:0a:05:ce:92:17:70:37:9c:85:bf:
9e:0f:38:1d:60:1d:2e:63:e9:c7:e2:1c:e5:70:ab:b4:36:80:
5b:be:19:2b:40:a1:60:6f:06:03:6e:cf:66:8d:b3:b5:87:bf:
f1:b2:6e:8f:0c:01:c8:35:9b:24:4c:f5:0c:cd:8b:36:7c:1c:
13:9d:47:81:43:da:eb:8a:fa:53:f5:31:db:63:18:c0:39:f2:
a6:b1:0b:51:47:d0:39:29:7c:d0:14:b1:03:cf:9a:84:e3:da:
6e:ac:e0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:41 2026 by rpki-client