Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211237.roa
File: AS211237.roa (raw, json)
Hash identifier: aB/PWwgLbD//+14oOM90CturGk7wtj49jUN3Kaq3SAg=
Subject key identifier: 26:DD:9A:A1:79:52:5A:95:C0:CA:0F:1D:29:13:09:6B:8B:76:41:4D
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 1AFE93FB8761B045F2DC96A1EFD952644E195CC8
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211237.roa
Signing time: Wed 04 Nov 2026 20:32:51 +0000
ROA not before: Wed 04 Nov 2026 20:27:51 +0000
ROA not after: Wed 03 Nov 2027 20:32:51 +0000
asID: 211237
IP address blocks: 2a0e:8f02:f006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:fe:93:fb:87:61:b0:45:f2:dc:96:a1:ef:d9:52:64:4e:19:5c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:51 2026 GMT
Not After : Nov 3 20:32:51 2027 GMT
Subject: CN=26DD9AA179525A95C0CA0F1D2913096B8B76414D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:e4:4b:ad:13:27:8d:9a:49:5b:9a:3c:fb:
61:2b:ae:00:86:36:46:e5:69:18:cc:4e:fb:a4:cd:
6a:5f:c8:dd:94:37:28:d3:1e:4b:25:fb:b3:e2:f4:
8b:ab:3d:d1:a9:41:bd:ec:b3:23:64:1c:65:2f:69:
d7:4b:aa:37:87:a6:0d:33:8b:e5:a5:2a:94:1a:e9:
1e:67:41:0f:aa:f7:d1:be:9e:6a:63:01:40:03:dd:
75:63:51:96:ce:62:43:d3:ca:9e:e7:66:7f:d3:7b:
dd:48:e5:39:64:24:21:17:06:46:47:a0:91:50:57:
12:67:d8:0c:9e:20:ff:41:92:27:78:43:6d:50:c8:
53:83:ec:af:50:21:09:33:6d:61:b2:5c:f7:ec:88:
90:f0:b0:86:0d:af:21:87:19:11:34:41:8a:26:91:
58:bf:23:92:17:e7:80:52:3b:da:c6:38:de:de:17:
fe:49:74:18:b6:27:57:4a:0f:ca:66:f9:b5:81:29:
f3:b2:ab:0b:4d:49:20:65:1d:fd:83:ed:4f:5d:49:
c9:00:9e:bb:11:47:31:e2:36:38:5a:99:1b:5e:96:
af:7d:16:2b:a3:db:d5:71:71:e7:a8:77:1f:64:5a:
d7:76:47:6c:73:83:8e:29:e1:8c:11:69:12:e1:cc:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:9A:A1:79:52:5A:95:C0:CA:0F:1D:29:13:09:6B:8B:76:41:4D
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f006::/48
Signature Algorithm: sha256WithRSAEncryption
51:3c:c7:a3:7f:18:89:65:9c:07:60:1a:0b:ef:51:16:8c:76:
89:3b:96:91:e3:a0:8f:4d:f7:16:4c:71:31:74:e4:28:c7:27:
ae:86:0b:43:4d:de:8a:94:f4:79:85:a6:a8:73:ae:3c:8e:f6:
3f:00:ae:ec:d9:72:4c:9f:e6:d0:48:1a:50:2b:e9:1d:7e:f3:
f3:68:50:ab:c8:38:de:4f:5f:cf:31:42:73:f6:6c:32:9b:64:
1b:37:28:04:ca:e0:9d:4d:00:51:61:26:69:f4:31:59:9f:a5:
5c:fd:9e:f9:0b:89:1a:fc:6f:20:cc:9c:13:77:c9:17:e4:a1:
b0:c5:ad:0f:6c:a8:f7:53:6a:e2:a9:54:b6:d7:2e:9f:b6:cf:
7e:22:dc:ad:3e:fc:6c:45:d8:31:d4:e8:13:dc:b0:43:fc:4f:
44:45:0f:52:06:22:e4:76:e9:1e:7b:4a:f9:d1:19:5f:be:ca:
5b:2a:63:8b:65:7e:e7:e6:d6:a0:82:6c:fb:7c:8e:03:d0:75:
bb:1e:d0:f2:43:c7:ef:51:66:8b:b7:71:56:4f:35:b7:e9:80:
1a:5c:e3:10:bb:de:e2:5d:3d:82:82:18:aa:e7:07:d5:2f:5e:
9c:d9:84:d5:9f:f4:b3:03:4e:ec:b6:7e:05:79:89:4f:3f:93:
0a:da:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:45:58 2026 by rpki-client