Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211481.roa
File: AS211481.roa (raw, json)
Hash identifier: U4tXT/U94izOOpVREwGnQWcspUEKIH+/dKNErRcf588=
Subject key identifier: 12:5E:45:40:A3:F1:C1:D5:7F:AF:70:03:05:D3:71:70:04:24:65:7C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0EB691EBA13173D9D5769B6DE12FAAACF18C180A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211481.roa
Signing time: Tue 18 Aug 2026 21:09:03 +0000
ROA not before: Tue 18 Aug 2026 21:04:03 +0000
ROA not after: Tue 17 Aug 2027 21:09:03 +0000
asID: 211481
IP address blocks: 2a0f:85c1:d4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:b6:91:eb:a1:31:73:d9:d5:76:9b:6d:e1:2f:aa:ac:f1:8c:18:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 18 21:04:03 2026 GMT
Not After : Aug 17 21:09:03 2027 GMT
Subject: CN=125E4540A3F1C1D57FAF700305D371700424657C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:96:73:43:db:3a:63:b0:a1:e7:e0:0b:4b:
cd:f6:09:a6:7f:27:8b:90:b1:cd:53:f0:69:ff:88:
98:5b:4b:a9:2f:a4:d9:03:9f:9e:bd:08:d0:fb:6a:
de:9b:20:fb:9b:1d:82:ea:0a:43:e0:fb:0f:9e:1d:
54:90:fe:5d:c5:d4:be:f5:3b:68:2a:75:3c:a3:92:
8f:76:98:4e:50:dc:f2:7a:1e:ac:d7:cd:ae:ee:85:
83:65:c7:b2:77:36:e8:52:4e:dc:24:b8:2b:3b:b1:
8e:48:6a:01:91:2e:4d:cc:ef:3a:c3:55:0c:78:8f:
be:21:ad:49:86:99:63:be:b4:16:6b:e2:5d:a3:57:
90:3f:69:ea:42:0e:39:a7:6c:01:26:47:c8:f2:cf:
1d:e8:86:0f:69:f5:4a:0b:da:1f:d5:3b:d2:66:8e:
ae:e6:aa:e2:33:c3:0d:67:88:a0:d2:69:18:75:fe:
2e:be:f8:d0:fe:5f:08:75:1a:3d:74:af:ea:00:3b:
28:81:08:9f:a2:93:d1:52:fb:1c:f3:57:47:aa:02:
34:d1:fe:be:8c:d0:3e:be:d4:a4:4d:4c:a6:bd:1e:
b9:97:a6:84:83:28:8b:66:b4:12:ef:94:59:4f:8a:
73:95:a5:3f:6a:57:8f:d6:5a:a9:94:8a:a5:04:b6:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5E:45:40:A3:F1:C1:D5:7F:AF:70:03:05:D3:71:70:04:24:65:7C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d4c::/48
Signature Algorithm: sha256WithRSAEncryption
5a:23:d8:91:f6:dc:70:97:9d:1d:c6:88:8b:40:89:25:b1:da:
86:d0:00:c1:04:fe:12:aa:a7:36:28:53:77:1a:31:3f:70:8b:
d0:81:c9:49:0f:fb:a1:09:3d:29:0b:c9:ea:d4:d5:0f:5b:2c:
6d:d0:25:56:5f:d4:9c:d7:d7:57:1f:f5:59:39:62:02:7e:58:
6c:44:2c:e3:4a:6c:f9:5b:56:09:8b:43:82:20:b2:2c:2f:a8:
e0:32:3f:c5:5c:36:5c:93:72:27:a4:86:a6:a8:28:f1:62:e7:
bc:36:dc:dc:55:2c:a5:6a:08:7a:70:79:4a:d8:65:c1:ea:c4:
1a:34:07:98:82:77:3a:25:ec:5f:aa:de:f9:6f:43:12:fb:2c:
e3:2b:56:80:57:f8:23:57:ce:b4:01:72:53:55:f3:ab:ae:bd:
a4:a5:98:a3:6a:e9:9f:40:cd:16:2f:0d:6b:38:b7:a9:e7:13:
67:fc:24:9a:14:51:13:df:f3:8b:92:f1:91:b7:51:e5:5a:d3:
13:0b:73:9b:0c:59:b1:1d:7d:29:e0:e1:d3:22:bd:6b:4f:89:
df:be:d4:6a:ba:47:91:51:1a:0f:84:9d:c9:3d:4d:2b:8b:8f:
e5:b3:f9:57:a0:ec:42:1d:ed:67:60:6f:b0:1a:3a:a9:07:6f:
76:a0:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:57:05 2026 by rpki-client