Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211588.roa
File: AS211588.roa (raw, json)
Hash identifier: 7qW0cban1VXPSSjE8QMeqPJWjHu77PAG3lHB/LEhQ5g=
Subject key identifier: 79:80:1D:BF:A2:9D:AC:9E:A5:FC:91:89:95:BC:84:07:D8:5F:41:CF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 111A201B6767021839FA83304D8AF1EA252F4353
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211588.roa
Signing time: Wed 26 Aug 2026 01:49:30 +0000
ROA not before: Wed 26 Aug 2026 01:44:30 +0000
ROA not after: Wed 25 Aug 2027 01:49:30 +0000
asID: 211588
IP address blocks: 5.181.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1a:20:1b:67:67:02:18:39:fa:83:30:4d:8a:f1:ea:25:2f:43:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 26 01:44:30 2026 GMT
Not After : Aug 25 01:49:30 2027 GMT
Subject: CN=79801DBFA29DAC9EA5FC918995BC8407D85F41CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7d:8e:1d:bc:73:41:04:9d:40:fc:86:2c:4f:
85:a7:64:ff:c2:5e:99:6c:76:0c:6f:3b:b2:95:76:
6e:97:58:11:79:fe:ca:90:84:0f:7f:5d:b4:04:eb:
9d:cf:3c:db:41:18:42:da:74:8c:01:55:93:3c:eb:
96:2a:21:ad:b3:c0:ea:a7:1d:46:05:79:e5:fb:29:
c0:a0:a3:6f:46:fe:67:fb:1a:5f:82:6a:69:46:46:
e6:84:c7:54:5c:17:17:80:ed:a5:e2:6e:b9:2a:4c:
32:68:4c:dc:52:d1:d2:40:b7:8d:10:c2:95:53:fc:
b1:37:e2:bb:a3:59:7d:33:42:01:a6:fa:4b:c7:b0:
4b:49:66:1a:f9:4a:8a:14:e4:d5:8c:dc:bb:20:a8:
02:f2:7d:ee:85:e1:8a:bf:a2:26:f5:3f:6f:26:cf:
e0:77:e2:20:c8:a6:54:f3:50:08:55:1a:49:f0:dc:
74:b2:ac:d9:64:8c:de:e2:7b:20:e8:a3:22:b2:3a:
77:76:ce:d0:22:6c:5e:2e:01:7b:8e:ac:1d:29:40:
8a:49:68:d4:46:12:7c:a5:49:49:cd:12:33:60:ee:
41:52:d6:a3:d5:d2:ba:cb:d1:ff:58:f0:27:82:10:
be:0a:1f:ef:36:96:7b:dc:94:88:1e:9b:ff:9f:12:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:80:1D:BF:A2:9D:AC:9E:A5:FC:91:89:95:BC:84:07:D8:5F:41:CF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211588.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a4:5e:e4:a6:46:4d:d1:6e:e5:ee:c0:b6:cd:92:9d:ce:ec:
c2:fa:e4:a1:1b:b9:df:01:31:1d:c5:88:3e:6c:b8:00:26:5a:
f9:81:72:ef:4a:4d:27:01:48:56:db:8b:13:34:b9:44:6f:65:
8a:29:3e:38:7c:78:3c:c8:41:c1:fe:b0:a5:48:fe:8e:f5:aa:
e6:6a:8c:29:aa:fc:c2:84:3f:86:f8:13:ab:2c:8d:77:66:6a:
6a:b2:a3:fe:7c:cf:ad:70:05:09:69:27:21:47:a0:75:5f:6b:
2e:53:61:a3:c4:8c:2a:3d:d6:d5:de:35:62:19:bb:e4:9e:49:
34:c2:36:63:89:e4:ed:9d:5c:95:75:48:ca:90:11:cf:0a:d4:
80:bd:18:eb:55:9d:fb:45:b4:f6:d4:c4:bd:23:cc:bc:62:8c:
75:c4:fe:71:ae:d9:52:cc:ba:f7:44:71:c9:a1:e3:3c:31:c2:
0c:a7:5e:21:99:0e:39:16:c6:42:e5:2f:64:96:b8:6a:5d:60:
1d:90:40:d2:b4:f0:92:5b:bb:36:b4:25:b7:8b:5f:c6:eb:72:
cd:65:ad:8e:25:19:78:33:50:41:c6:86:ff:fa:2d:2f:00:83:
80:b9:f2:07:ba:28:91:d6:30:27:05:79:16:87:0d:ef:94:f2:
cc:68:4d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:42:05 2026 by rpki-client