Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211826.roa
File: AS211826.roa (raw, json)
Hash identifier: psa9cMl2jU6jrNIGNhBbHFrvsOeIyAyGlbpUC+R1Qz0=
Subject key identifier: 35:0D:C5:2C:D8:15:8B:76:97:06:AC:ED:8B:4A:D1:EF:BC:F2:26:49
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 564C545D394BC9F8E5041999205D4AAF8B01F027
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211826.roa
Signing time: Fri 26 Jun 2026 19:40:24 +0000
ROA not before: Fri 26 Jun 2026 19:35:24 +0000
ROA not after: Fri 25 Jun 2027 19:40:24 +0000
asID: 211826
IP address blocks: 82.47.42.0/24 maxlen: 24
82.47.105.0/24 maxlen: 24
178.83.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:4c:54:5d:39:4b:c9:f8:e5:04:19:99:20:5d:4a:af:8b:01:f0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 19:35:24 2026 GMT
Not After : Jun 25 19:40:24 2027 GMT
Subject: CN=350DC52CD8158B769706ACED8B4AD1EFBCF22649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:72:8c:f2:27:3e:bd:30:d8:ba:11:96:e3:
82:0e:ac:d6:92:6b:75:52:60:e9:d0:36:27:6d:c8:
38:58:0e:19:1b:33:fd:eb:4b:e3:c9:92:af:66:64:
60:54:60:8b:da:b6:e1:e3:37:93:9d:a6:62:4e:a4:
98:01:1a:35:7e:53:ea:4e:0b:63:1e:4f:90:ed:0a:
94:82:12:f3:09:f8:eb:0d:11:3a:86:29:1c:02:59:
ad:d9:85:8c:78:f3:ea:02:21:f4:c9:73:42:8c:ad:
67:5b:ab:bf:7c:f6:e2:84:ae:78:50:5b:bf:37:0b:
d0:90:c1:ea:ee:ed:63:1c:65:e9:60:2e:42:af:9d:
77:a0:90:b1:cb:b4:1e:3e:eb:3f:c7:ca:63:ab:b3:
88:8d:61:d5:13:5e:84:1b:91:17:11:fa:0a:7f:30:
b9:5d:f5:3f:1b:37:06:d7:c7:cf:f5:a6:fd:52:0f:
32:ea:0f:f0:35:74:4f:14:8e:58:d9:0d:9e:4e:44:
36:fc:1b:0e:42:4c:72:ef:0b:ee:e8:a4:9f:ab:ea:
14:a0:40:f8:73:12:49:34:cc:4d:13:32:ba:0e:80:
43:fa:9d:38:e4:16:04:f7:a1:c1:6f:8f:f8:49:6d:
09:bc:f8:1c:aa:8e:87:69:dd:7b:00:8a:78:aa:ba:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0D:C5:2C:D8:15:8B:76:97:06:AC:ED:8B:4A:D1:EF:BC:F2:26:49
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211826.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.42.0/24
82.47.105.0/24
178.83.63.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9d:80:32:30:d0:60:a9:52:a9:06:ac:c3:42:be:14:60:52:
98:16:f9:79:d1:96:ac:60:b2:11:2f:a1:0c:0e:bd:29:38:d1:
b9:77:13:6a:5e:34:cb:52:ba:b8:3b:c5:ba:eb:c7:71:0d:da:
2c:66:69:b6:98:95:ba:ec:b1:42:f1:19:29:52:72:91:06:61:
6d:9f:a0:9b:95:97:bc:14:ad:85:8f:a6:2c:84:73:2c:d2:a0:
c8:78:7d:d8:bc:a0:f4:9d:58:bb:cb:39:c0:59:09:7b:9c:b6:
48:e9:57:8e:ed:45:ac:8d:c4:e0:91:a2:54:e1:8c:72:d6:b3:
74:e4:e4:da:f3:c5:67:6a:6a:51:e5:6e:b3:1c:5b:4c:e8:6a:
08:71:48:57:c0:1e:a1:d0:60:be:63:6f:3f:13:2c:e9:db:93:
64:c6:37:3d:ce:33:81:5e:ee:13:1c:26:73:49:b3:9d:1b:4b:
d9:d1:04:46:95:b9:22:b8:4d:8a:2b:14:0e:b0:ec:25:0e:04:
63:b1:ad:b9:9b:3d:9d:bd:36:18:df:15:79:6d:ff:60:66:86:
ee:f7:34:0f:ca:83:c7:88:49:32:c6:e2:e7:54:37:b6:70:0b:
2d:24:5a:aa:09:16:5f:43:ee:92:d0:d2:5a:e9:8f:60:76:a7:
d3:e9:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:26 2026 by rpki-client