Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211693.roa
File: AS211693.roa (raw, json)
Hash identifier: zKyCHsQv8mfhJs2qdJRkztztgTRUudl9d+2ixjLqjZU=
Subject key identifier: D9:C4:E5:B4:93:2A:D4:1C:71:98:A0:64:5C:97:85:B5:CB:F1:C4:6B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 18EFF345C66821DE6CF5CFD7B2DE7132FF578B6D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211693.roa
Signing time: Wed 01 Jul 2026 16:29:32 +0000
ROA not before: Wed 01 Jul 2026 16:24:32 +0000
ROA not after: Wed 30 Jun 2027 16:29:32 +0000
asID: 211693
IP address blocks: 82.39.212.0/24 maxlen: 24
2a13:9500:19d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ef:f3:45:c6:68:21:de:6c:f5:cf:d7:b2:de:71:32:ff:57:8b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 1 16:24:32 2026 GMT
Not After : Jun 30 16:29:32 2027 GMT
Subject: CN=D9C4E5B4932AD41C7198A0645C9785B5CBF1C46B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:40:4d:06:5c:a5:5c:d8:65:e1:10:3f:0a:a5:
a7:90:2d:b4:21:d7:bf:23:2d:47:5e:97:c6:92:55:
4c:e1:84:28:4b:79:d3:0b:f1:76:76:c6:cb:2a:b2:
3e:02:15:00:2d:fd:24:d7:51:d6:ad:a0:00:13:10:
ae:04:36:f4:d2:e7:77:28:ae:7c:ee:4a:54:9d:ed:
ff:cc:f8:be:5d:25:92:59:2a:54:b4:2d:17:bf:8d:
06:b8:73:39:b8:5a:a1:c9:95:a6:bd:12:61:c0:b1:
0f:a1:9c:18:d0:28:eb:4c:f2:c0:9e:49:96:ce:b4:
9f:a2:ce:74:e0:02:46:aa:13:d5:e1:c6:d2:ce:4a:
f5:39:d6:1f:c2:66:49:0f:12:da:8d:52:11:f2:99:
cf:f0:af:46:e9:c8:a4:01:8f:1b:d3:1a:1a:50:fd:
fc:9f:e9:40:f0:4c:22:62:51:ba:54:2b:f3:68:ea:
87:44:8b:3a:f3:3d:8b:c1:b9:98:36:3e:9b:e1:63:
50:75:fd:3a:ff:23:19:ed:ec:6f:11:89:31:04:f4:
82:78:c2:f7:38:62:0b:ea:fa:43:93:06:69:09:e4:
c6:a8:af:ca:58:1c:5b:e1:14:99:b7:21:db:2c:0e:
6f:e3:81:b4:db:5e:de:5b:59:36:d6:57:a5:8f:ed:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C4:E5:B4:93:2A:D4:1C:71:98:A0:64:5C:97:85:B5:CB:F1:C4:6B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.212.0/24
IPv6:
2a13:9500:19d::/48
Signature Algorithm: sha256WithRSAEncryption
58:23:f7:55:eb:9d:14:99:64:e0:d8:7c:58:0e:d3:5a:ea:80:
cf:77:bf:37:3b:c5:ab:2a:1e:ad:af:1d:54:a9:37:46:19:bf:
a9:47:6d:ca:80:9b:1d:29:5f:e8:14:d1:d0:e9:29:95:4a:57:
09:52:45:ea:8d:f3:56:f3:2f:61:87:cf:d1:4c:64:2a:d4:52:
03:a8:e9:40:00:1b:1c:c6:46:6e:41:6a:a5:e0:2d:49:97:fe:
02:c5:7a:7e:59:54:b8:77:a8:86:a0:1a:2c:93:65:c4:41:c0:
f8:b2:7d:ca:2e:95:9c:b8:c6:87:64:46:09:20:64:ee:81:a1:
5d:84:30:50:96:55:7b:1b:29:99:c0:b0:33:7c:7f:46:84:58:
18:92:7e:3f:41:91:f7:e0:7e:11:b8:0a:77:1b:b3:cb:ca:ba:
aa:e9:d2:d4:52:55:d2:88:1c:ff:cf:6d:7a:cc:6c:66:dd:ad:
c1:b8:1c:42:0e:76:81:3a:bb:75:b0:64:28:09:a0:0e:3b:c3:
90:b7:13:a5:49:b9:bd:71:4c:a7:fd:2a:b3:ad:0c:ed:d7:27:
2d:92:50:fe:7a:0d:e4:b4:77:40:7e:8b:36:4b:bb:02:96:67:
b4:d3:73:be:b3:f9:d8:d4:da:9d:09:ab:97:ff:a8:45:ed:c7:
0a:01:00:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:57 2026 by rpki-client