Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211224.roa
File: AS211224.roa (raw, json)
Hash identifier: RX5fzceX1VDW+yPK7NNCkO5p203EL32Maktlk5FJmx4=
Subject key identifier: 2D:5F:86:3F:8D:20:F5:3E:70:BD:13:07:41:AA:64:0A:60:26:27:6A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 726BB31F7EBB5ECCD3E7A3BB3F79637054CDBFCA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211224.roa
Signing time: Fri 26 Jun 2026 08:08:49 +0000
ROA not before: Fri 26 Jun 2026 08:03:49 +0000
ROA not after: Fri 25 Jun 2027 08:08:49 +0000
asID: 211224
IP address blocks: 2a0f:85c1:23::/48 maxlen: 48
2a0f:85c1:60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:6b:b3:1f:7e:bb:5e:cc:d3:e7:a3:bb:3f:79:63:70:54:cd:bf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:49 2026 GMT
Not After : Jun 25 08:08:49 2027 GMT
Subject: CN=2D5F863F8D20F53E70BD130741AA640A6026276A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:16:83:a7:cb:f6:6b:1e:ef:50:b4:a5:12:
99:88:e5:4d:48:c7:d8:8a:ce:c7:0e:d2:45:57:23:
4c:12:4a:37:de:f3:dd:90:fd:df:54:93:cc:19:46:
d4:55:f9:77:e3:ce:f0:8e:64:2d:e4:26:b9:20:3a:
1d:ce:ab:b7:ca:c3:20:e8:9e:39:f7:81:2d:44:39:
1f:30:2f:a7:54:9e:d9:73:83:7d:4c:2f:fd:07:56:
fc:94:88:52:36:42:a6:ac:6d:e6:d7:eb:84:e6:c6:
ff:95:f6:65:79:bc:5e:ab:b3:0e:64:97:61:ea:ed:
44:c6:67:28:a7:55:1c:6f:b1:45:02:55:43:b9:4d:
f0:9e:76:39:ca:30:c1:f5:dc:4e:91:4c:7a:2a:f6:
ee:08:d6:60:0e:dc:c7:0c:f1:53:10:eb:d3:f1:9a:
0e:d0:39:42:bc:71:f8:26:be:8f:42:95:df:83:4e:
f1:d6:eb:36:dd:30:f2:58:7d:36:ef:25:ec:3a:bc:
29:7d:dc:4d:11:d7:bd:a5:e6:ba:9b:27:74:8c:b5:
70:5a:a4:81:55:b5:40:29:df:cc:99:91:9a:e9:42:
7f:27:60:eb:fe:1e:7f:49:7e:77:fc:73:7e:ba:b0:
19:da:89:48:e7:00:e0:f2:82:e0:fd:ec:0d:f9:68:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5F:86:3F:8D:20:F5:3E:70:BD:13:07:41:AA:64:0A:60:26:27:6A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:23::/48
2a0f:85c1:60::/44
Signature Algorithm: sha256WithRSAEncryption
80:49:44:be:19:e2:e6:7b:cb:45:e2:fc:22:b0:1a:5a:79:9c:
7d:db:c4:ca:af:5b:42:82:25:15:bc:26:e0:77:9e:0f:2e:1b:
7b:8a:d2:8f:3f:65:1a:15:5e:d8:61:9a:80:2a:c6:4c:c7:b1:
72:63:aa:ab:3b:88:32:39:31:e9:39:a2:ce:c4:65:ea:5d:7b:
3e:79:b4:8b:0c:d4:6d:08:03:b5:84:92:c4:ba:32:8f:ee:62:
3a:a2:36:a9:1c:c3:13:6d:5b:2c:4f:50:60:91:b4:3b:32:ad:
5f:f8:b2:37:0d:41:ff:8e:dc:56:6c:69:c9:23:65:a0:38:e2:
f9:71:35:7b:25:98:ec:09:55:58:b2:1c:38:f0:d0:cf:f2:68:
32:ce:83:f9:ae:41:33:ad:3d:c1:a1:b5:72:33:3c:e8:2d:01:
f4:e7:83:da:78:bc:3e:97:08:aa:8f:0b:7f:a9:a7:a7:5a:20:
70:b1:13:e5:a5:94:99:8b:b5:ca:56:e9:8d:72:a2:05:63:b3:
c7:d4:b4:69:1b:cb:59:74:bd:17:d4:0a:19:1e:6a:b1:20:20:
ec:56:cb:f5:b8:9c:59:45:90:32:6b:56:aa:f6:e7:cd:8a:ef:
ac:24:a9:bf:8b:64:e9:49:2f:5a:9d:da:7d:e7:e2:f4:f6:a2:
e2:28:9d:dc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUcmuzH367XszT56O7P3ljcFTNv8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzNDlaFw0yNzA2MjUwODA4NDlaMDMxMTAvBgNV
BAMTKDJENUY4NjNGOEQyMEY1M0U3MEJEMTMwNzQxQUE2NDBBNjAyNjI3NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLhaDp8v2ax7vULSlEpmI5U1I
x9iKzscO0kVXI0wSSjfe892Q/d9Uk8wZRtRV+XfjzvCOZC3kJrkgOh3Oq7fKwyDo
njn3gS1EOR8wL6dUntlzg31ML/0HVvyUiFI2QqasbebX64Tmxv+V9mV5vF6rsw5k
l2Hq7UTGZyinVRxvsUUCVUO5TfCedjnKMMH13E6RTHoq9u4I1mAO3McM8VMQ69Px
mg7QOUK8cfgmvo9Cld+DTvHW6zbdMPJYfTbvJew6vCl93E0R172l5rqbJ3SMtXBa
pIFVtUAp38yZkZrpQn8nYOv+Hn9Jfnf8c366sBnaiUjnAODyguD97A35aAFvAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQULV+GP40g9T5wvRMHQapkCmAmJ2owHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjExMjI0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+F
wQAjAwcEKg+FwQBgMA0GCSqGSIb3DQEBCwUAA4IBAQCASUS+GeLme8tF4vwisBpa
eZx928TKr1tCgiUVvCbgd54PLht7itKPP2UaFV7YYZqAKsZMx7FyY6qrO4gyOTHp
OaLOxGXqXXs+ebSLDNRtCAO1hJLEujKP7mI6ojapHMMTbVssT1BgkbQ7Mq1f+LI3
DUH/jtxWbGnJI2WgOOL5cTV7JZjsCVVYshw48NDP8mgyzoP5rkEzrT3BobVyMzzo
LQH054PaeLw+lwiqjwt/qaenWiBwsRPlpZSZi7XKVumNcqIFY7PH1LRpG8tZdL0X
1AoZHmqxICDsVsv1uJxZRZAya1aq9ufNiu+sJKm/i2TpSS9andp95+L09qLiKJ3c
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:04 2026 by rpki-client