Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211091.roa
File: AS211091.roa (raw, json)
Hash identifier: riR9hXMKOG5EGjY+16snEE7iDqHQpACBhRrvsW3S4I0=
Subject key identifier: 5A:22:F0:D7:F5:88:EF:69:D1:E9:5A:33:FB:3E:FB:A9:E2:35:24:0F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2A1FF8728C3EC89CDBD6F2EDEC8E70360F36AF3F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211091.roa
Signing time: Tue 04 Aug 2026 10:49:18 +0000
ROA not before: Tue 04 Aug 2026 10:44:18 +0000
ROA not after: Tue 03 Aug 2027 10:49:18 +0000
asID: 211091
IP address blocks: 191.96.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1f:f8:72:8c:3e:c8:9c:db:d6:f2:ed:ec:8e:70:36:0f:36:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 4 10:44:18 2026 GMT
Not After : Aug 3 10:49:18 2027 GMT
Subject: CN=5A22F0D7F588EF69D1E95A33FB3EFBA9E235240F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:f3:22:ee:53:27:fa:eb:ac:98:b3:1c:24:
a6:46:a8:99:2c:d0:90:f2:2d:1a:33:9f:6e:5f:b0:
5a:27:20:db:a3:d0:5d:4c:8f:c5:58:b6:48:b3:8a:
ef:d0:b3:a4:45:34:1b:c8:42:fe:63:a3:47:b6:30:
e3:0a:98:d0:da:40:f2:5c:a0:bc:aa:7c:ff:8b:69:
73:6a:10:3d:d4:a9:d3:fa:92:68:3f:be:af:65:75:
ca:5c:e3:ef:ee:ac:3e:57:c8:4f:61:a8:83:b7:e2:
71:39:9f:cc:df:d0:5e:5c:10:57:91:67:5f:59:78:
a4:f6:57:1e:83:ee:8c:a5:90:bb:45:f3:ea:3f:a4:
65:e7:d4:d9:4b:b4:5f:0a:bb:7c:70:7a:0c:7e:b9:
b5:3b:48:ac:ba:a7:b0:f8:0b:b8:73:7d:a8:cf:57:
a9:28:ad:60:aa:4f:51:39:30:64:48:20:90:59:f9:
f3:6b:f8:aa:03:28:b5:a7:b6:0b:5d:6b:bc:cd:37:
d2:7b:96:0f:5d:8e:20:4a:c1:1a:8d:e4:c3:07:7d:
8b:55:e8:76:d1:54:61:be:fb:16:41:56:a4:66:47:
88:b4:4f:7f:3c:64:17:22:37:d6:ca:6f:fa:bf:72:
37:2c:bb:79:4a:a1:67:c5:c4:ac:7a:75:6e:57:02:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:22:F0:D7:F5:88:EF:69:D1:E9:5A:33:FB:3E:FB:A9:E2:35:24:0F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211091.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2d:e7:f9:c3:80:f4:87:9d:6e:88:2f:3d:be:76:57:df:60:
b1:56:44:93:b6:75:94:36:21:ce:62:34:00:d9:00:11:fa:7a:
cf:1d:b7:56:aa:dc:24:88:b8:d0:ba:e8:59:d3:5a:ab:10:1b:
5f:c8:5c:ec:cf:35:5e:53:e0:71:f5:9b:25:74:27:76:35:24:
ec:02:9b:94:98:3d:22:1d:ce:c9:27:b7:79:52:5b:bc:96:a6:
55:24:c3:03:0a:bc:df:fb:3c:5c:e1:ba:db:f1:e6:de:cf:85:
62:d9:4b:ce:2f:8a:2b:4d:3e:e6:a6:33:8d:d4:31:ca:0a:24:
76:63:fe:4e:6d:57:69:05:b2:7c:c8:9e:be:52:eb:28:bc:16:
4f:8a:fe:d4:38:5a:c2:19:a2:43:5b:f3:cb:9b:4d:33:dc:de:
8d:6a:94:5a:ba:5c:04:95:75:8e:96:72:19:9f:e7:e0:14:41:
12:f4:c7:dc:f7:8b:55:39:55:bf:7d:ad:fa:0a:77:6b:8e:3d:
06:e8:08:04:03:e3:86:b9:0f:7e:0c:cf:e2:22:b5:eb:77:ba:
3e:65:56:dc:a4:5d:6f:7c:40:22:94:17:71:d4:8b:b0:73:e7:
71:c2:c7:91:22:cc:d8:35:b6:c8:85:42:11:02:35:0c:32:ef:
a1:2f:08:2a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUKh/4cow+yJzb1vLt7I5wNg82rz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA4MDQxMDQ0MThaFw0yNzA4MDMxMDQ5MThaMDMxMTAvBgNV
BAMTKDVBMjJGMEQ3RjU4OEVGNjlEMUU5NUEzM0ZCM0VGQkE5RTIzNTI0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rPMi7lMn+uusmLMcJKZGqJks
0JDyLRozn25fsFonINuj0F1Mj8VYtkiziu/Qs6RFNBvIQv5jo0e2MOMKmNDaQPJc
oLyqfP+LaXNqED3UqdP6kmg/vq9ldcpc4+/urD5XyE9hqIO34nE5n8zf0F5cEFeR
Z19ZeKT2Vx6D7oylkLtF8+o/pGXn1NlLtF8Ku3xwegx+ubU7SKy6p7D4C7hzfajP
V6korWCqT1E5MGRIIJBZ+fNr+KoDKLWntgtda7zNN9J7lg9djiBKwRqN5MMHfYtV
6HbRVGG++xZBVqRmR4i0T388ZBciN9bKb/q/cjcsu3lKoWfFxKx6dW5XAjv9AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUWiLw1/WI72nR6Voz+z77qeI1JA8wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjExMDkxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2A7
MA0GCSqGSIb3DQEBCwUAA4IBAQBNLef5w4D0h51uiC89vnZX32CxVkSTtnWUNiHO
YjQA2QAR+nrPHbdWqtwkiLjQuuhZ01qrEBtfyFzszzVeU+Bx9ZsldCd2NSTsApuU
mD0iHc7JJ7d5Ulu8lqZVJMMDCrzf+zxc4brb8ebez4Vi2UvOL4orTT7mpjON1DHK
CiR2Y/5ObVdpBbJ8yJ6+UusovBZPiv7UOFrCGaJDW/PLm00z3N6NapRaulwElXWO
lnIZn+fgFEES9Mfc94tVOVW/fa36Cndrjj0G6AgEA+OGuQ9+DM/iIrXrd7o+ZVbc
pF1vfEAilBdx1Iuwc+dxwseRIszYNbbIhUIRAjUMMu+hLwgq
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:06:38 2026 by rpki-client