Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211895.roa
File: AS211895.roa (raw, json)
Hash identifier: S0CHif41pnaYOnEFNWt20bc0lJUy+7wPW/COTqolMME=
Subject key identifier: A9:A4:6F:A7:26:A7:47:61:40:CF:A9:78:39:03:CE:21:B7:3B:CD:0D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 45884A7F5EFABBDF54FD374DF6C4E8212A5BC397
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211895.roa
Signing time: Thu 03 Sep 2026 14:49:32 +0000
ROA not before: Thu 03 Sep 2026 14:44:32 +0000
ROA not after: Thu 02 Sep 2027 14:49:32 +0000
asID: 211895
IP address blocks: 91.198.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:88:4a:7f:5e:fa:bb:df:54:fd:37:4d:f6:c4:e8:21:2a:5b:c3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 3 14:44:32 2026 GMT
Not After : Sep 2 14:49:32 2027 GMT
Subject: CN=A9A46FA726A7476140CFA9783903CE21B73BCD0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:d0:c4:1a:e1:63:62:91:3f:35:59:7a:da:
ea:59:9b:7a:f0:e6:80:ff:bd:f2:9e:dd:b3:c7:4b:
4a:77:5b:2b:07:76:b7:ab:91:a0:1b:ea:64:77:40:
6e:6f:c7:ef:94:04:47:93:0c:d2:0a:af:13:d7:91:
59:6a:7d:6d:1c:43:cf:33:71:6f:03:94:25:b4:f8:
90:f6:1e:d8:2c:fe:f8:52:26:8d:3f:34:5b:f2:ea:
45:39:d6:f7:7f:f9:55:87:8b:dd:ce:10:2a:21:d4:
5b:5b:a9:ef:ea:84:cf:e1:31:05:2e:71:f9:2b:0d:
bd:19:71:c2:68:76:a9:af:7c:20:66:2b:4f:19:53:
16:15:b9:1b:48:1d:71:e4:77:29:d0:62:72:3a:73:
3c:4b:42:8f:8f:c4:38:51:7b:7f:0a:6c:e4:3e:16:
c3:2c:34:96:35:3a:63:36:22:e8:f7:7d:7f:24:55:
d2:78:9e:a8:70:70:b4:75:8a:ba:b2:f2:3b:ac:ae:
54:59:51:98:11:67:8c:b6:f8:0c:cb:a6:05:8d:23:
4c:a8:e1:2d:22:57:07:80:37:57:5a:ac:77:57:30:
11:85:35:05:60:bf:4f:b1:f8:70:b8:aa:3a:18:8f:
af:5a:43:84:37:1f:fe:ac:b9:3e:a1:2f:ec:d6:fa:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A4:6F:A7:26:A7:47:61:40:CF:A9:78:39:03:CE:21:B7:3B:CD:0D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.77.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:65:26:94:e9:6a:8d:aa:b8:d5:8b:43:ad:14:a6:df:60:68:
70:2a:ba:fe:ab:cd:ab:f1:0e:c2:16:14:12:ae:b8:58:55:b9:
49:6d:bb:20:6b:62:a3:27:28:2d:04:6c:ad:71:84:37:53:fe:
bf:43:1b:54:f0:d9:4b:36:83:e3:fa:1e:d1:07:e6:ef:e4:a9:
34:ee:cf:c2:90:85:1d:c5:e7:e6:c2:58:f6:b2:54:4b:9d:5c:
6a:84:06:8d:11:5b:bd:38:a4:00:be:09:ec:5b:48:fb:14:7e:
52:9d:b3:cc:7e:ae:4b:be:de:c3:66:ed:32:b5:25:a8:97:5b:
97:d1:3c:66:27:2f:40:0f:6f:2b:79:33:2a:98:d4:de:cd:cb:
a4:0b:f2:84:4c:c6:f0:cc:5b:9a:77:29:98:8c:a7:bc:c5:70:
d7:d2:43:46:b0:e3:b1:7a:95:4b:fd:13:8d:ee:27:f5:de:f9:
df:c5:4e:15:25:18:44:82:40:f2:69:6a:14:aa:2d:ae:ab:92:
41:df:54:27:c5:9e:91:fc:e6:09:3b:bc:5e:20:0e:73:e0:35:
13:ea:c8:b6:0c:44:22:a8:c4:07:2f:31:66:f4:e0:ac:62:69:
f6:54:5f:25:4c:14:79:d4:73:98:04:4b:e9:0c:60:2b:71:e6:
5c:11:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:21:30 2026 by rpki-client