Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211087.roa
File: AS211087.roa (raw, json)
Hash identifier: M0TXISRopVQ+iwWMtE8CXVEkN57IYD2H7zyg3fygqOo=
Subject key identifier: FC:F7:5A:E2:43:38:3D:7D:8B:1D:B6:F7:3D:6E:46:AE:36:A0:BA:59
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1067E61B8A5589AA725228A622538FD1EFEE1963
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211087.roa
Signing time: Tue 18 Aug 2026 16:07:30 +0000
ROA not before: Tue 18 Aug 2026 16:02:30 +0000
ROA not after: Tue 17 Aug 2027 16:07:30 +0000
asID: 211087
IP address blocks: 2a13:9500:1bf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:67:e6:1b:8a:55:89:aa:72:52:28:a6:22:53:8f:d1:ef:ee:19:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 18 16:02:30 2026 GMT
Not After : Aug 17 16:07:30 2027 GMT
Subject: CN=FCF75AE243383D7D8B1DB6F73D6E46AE36A0BA59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:ed:37:84:cf:70:20:75:53:f8:eb:c3:1a:
96:c2:43:20:85:b8:b4:40:96:6c:2d:b7:a3:b4:1d:
09:5c:cb:86:13:bd:66:a6:06:a3:5b:dd:64:2d:1b:
7e:1b:71:6c:f9:04:ec:87:5b:56:bb:9b:78:47:fc:
09:bb:78:4c:d8:66:32:9c:2b:11:b6:97:1c:de:57:
83:8f:ff:d4:b3:c9:02:61:45:a0:f2:49:ac:d2:5f:
18:ec:07:04:61:dd:94:3f:eb:a3:d0:f0:9c:4e:33:
fa:69:ef:02:50:12:fb:9a:ef:8d:3c:31:bf:66:e1:
7b:9e:40:4f:10:e7:69:9a:d8:b4:7f:f7:28:cb:57:
e1:cd:8d:35:9b:63:10:fc:7f:e8:41:2b:7a:e1:06:
d3:01:dd:0b:1f:f4:4c:ea:3a:37:d9:82:e5:cb:82:
5a:de:f2:bc:70:fa:f9:b3:0e:f3:b5:fa:49:3e:65:
bd:bf:04:aa:44:3f:eb:3d:d4:3d:09:cb:bb:e2:86:
75:ff:91:1b:69:46:ec:bc:5f:87:23:73:e7:fb:5d:
75:5d:c7:41:aa:2c:95:cf:53:c6:d4:cc:a1:af:71:
42:f6:dc:1a:c8:38:9e:39:7a:71:64:dc:e8:f6:d5:
f5:dc:2a:df:d7:aa:ba:a1:0d:d0:40:0c:0d:53:e9:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F7:5A:E2:43:38:3D:7D:8B:1D:B6:F7:3D:6E:46:AE:36:A0:BA:59
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1bf::/48
Signature Algorithm: sha256WithRSAEncryption
3a:9e:5c:99:9b:9d:e5:b1:4c:38:e9:8e:e3:a7:85:d5:80:01:
f5:b8:18:35:fe:d5:9c:94:a3:af:9f:08:07:e3:a7:b4:95:de:
2a:b1:60:c4:e2:f3:05:3c:86:ee:ce:81:95:49:a4:03:fd:d4:
e2:ec:42:ca:a8:33:50:e0:97:16:f2:b5:fa:48:77:bf:2a:c9:
17:9b:1d:74:75:5a:65:58:b1:b8:6e:5d:74:8f:0e:d6:b5:9e:
ec:83:f6:25:61:9d:a2:83:b5:06:45:0b:91:21:17:6b:b5:3d:
9b:cc:76:4a:c9:16:e8:50:8b:52:64:6a:b6:40:35:5d:07:1d:
af:82:91:55:7e:98:b0:14:72:92:24:10:55:35:2e:63:68:2a:
a5:9c:c2:1e:50:02:9d:3c:9e:c0:ff:83:27:a4:6f:8b:4a:1f:
28:28:2a:bb:f0:bc:49:54:8f:7c:0c:c9:ce:8e:cb:0c:54:8f:
fe:04:9f:6b:8a:e2:34:22:0b:21:05:db:73:e3:f7:7d:05:44:
89:bf:05:e6:60:32:a8:64:02:d5:c9:ce:f6:41:58:67:8b:2b:
4b:be:fc:6b:4f:5a:d7:54:38:75:ff:37:a6:77:b7:ed:19:40:
24:fb:c1:00:fe:bc:a7:f6:0e:7f:5b:ee:31:3d:cc:67:8a:e2:
d3:25:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:24 2026 by rpki-client