Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211411.roa
File: AS211411.roa (raw, json)
Hash identifier: NDGWfoTJXjeP6Aqfi/fV8avqX/dOss4N+J3xIy4AhKM=
Subject key identifier: C0:1A:A5:F4:AC:48:A3:A7:CD:80:B6:FF:BD:58:FB:21:FB:51:62:AF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6281CB41BF58E012E41C0B83813581C79BBDE6F3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211411.roa
Signing time: Tue 18 Aug 2026 21:09:03 +0000
ROA not before: Tue 18 Aug 2026 21:04:03 +0000
ROA not after: Tue 17 Aug 2027 21:09:03 +0000
asID: 211411
IP address blocks: 2a0f:85c1:c47::/48 maxlen: 48
2a0f:85c1:c90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:81:cb:41:bf:58:e0:12:e4:1c:0b:83:81:35:81:c7:9b:bd:e6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 21:04:03 2026 GMT
Not After : Aug 17 21:09:03 2027 GMT
Subject: CN=C01AA5F4AC48A3A7CD80B6FFBD58FB21FB5162AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:e6:1d:6f:ec:43:32:0e:36:e9:d9:0c:29:
b6:1e:09:80:f1:09:87:91:96:24:e1:22:35:d8:93:
55:98:be:f0:19:a6:ea:e0:ba:f8:a0:a2:d4:9f:6f:
99:1c:67:85:59:d9:ee:33:91:86:ba:43:1b:ec:4f:
b1:62:06:40:6e:23:46:61:12:13:71:4b:47:35:77:
f3:7a:25:cb:da:f0:5f:ad:9b:10:20:c7:c8:c2:be:
b6:8b:19:ba:de:92:2d:15:05:94:3f:39:66:6f:9a:
a2:69:e7:3a:de:8b:52:2c:48:67:10:0c:a1:f9:e4:
a0:2b:cf:6c:75:66:d5:d1:a9:3a:1b:95:7e:6d:9e:
87:b5:51:c8:3b:a8:d6:9b:a2:6f:40:af:75:d8:59:
75:12:d8:f0:31:60:74:4b:91:ee:28:72:4c:fd:59:
ef:46:e2:3d:b6:9b:e5:9f:56:61:c3:20:bb:fb:31:
a0:af:d4:76:8e:6d:6c:71:96:3b:f3:1a:75:64:3b:
05:a1:0a:97:e9:5d:21:5d:ed:cc:09:e6:57:df:6e:
bf:a5:ef:9f:9b:30:94:39:c7:6c:a8:56:a0:e6:a8:
ea:a9:b1:5b:21:8b:77:f6:71:b5:6b:8e:12:e8:13:
75:dd:05:ea:b6:e3:08:dc:50:3c:a7:04:97:a8:ea:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1A:A5:F4:AC:48:A3:A7:CD:80:B6:FF:BD:58:FB:21:FB:51:62:AF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211411.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c47::/48
2a0f:85c1:c90::/44
Signature Algorithm: sha256WithRSAEncryption
bf:e3:26:cc:c4:41:e9:51:5d:9a:55:5e:f1:6c:e7:1a:c7:57:
56:d3:34:ef:a0:84:84:83:1c:56:10:80:45:e3:90:7a:4f:c0:
8d:7c:12:a7:63:46:41:e5:ea:73:9a:4b:d1:15:5a:1a:08:cc:
4b:32:62:b2:9a:62:15:50:61:b3:3f:52:d1:3a:d9:64:91:be:
7e:65:0f:e7:68:bc:b5:d0:dc:e3:57:fb:2e:e8:eb:9b:a6:9a:
17:59:92:0d:ae:c8:5f:05:2e:26:82:5c:d3:ff:a3:d5:7c:a1:
3a:5f:22:7f:20:27:bb:bc:d8:6d:57:bb:36:60:21:40:60:53:
39:c4:2d:f3:4a:1e:02:95:2b:6b:0a:03:cc:cd:40:c7:63:12:
b9:a6:9b:55:d7:2a:ad:7f:19:ed:54:0d:d8:55:ec:53:52:a4:
63:50:45:91:1b:e6:d7:bc:80:c6:d6:e1:03:d4:eb:a7:45:28:
76:b8:1d:cc:80:14:e0:7a:23:ec:61:b1:d8:b0:13:33:43:41:
e3:0c:3a:a7:18:e8:a1:94:55:20:4f:7e:e4:11:63:e3:3c:3a:
7e:4d:c6:7e:95:eb:ce:80:06:46:e1:63:06:a3:90:f1:2b:f2:
18:0b:12:91:52:d3:fc:1d:08:79:02:3c:5a:8d:82:4c:39:07:
ec:da:cf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 08:19:58 2026 by rpki-client