Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS211575.roa
File: AS211575.roa (raw, json)
Hash identifier: /Ctz/mORvJRokIlwYcPuSxTdE2HN1Ct86SyeLv2+vhE=
Subject key identifier: D4:4A:B0:8F:3A:76:E6:A6:4F:BB:56:1F:0D:07:E2:D4:52:21:79:89
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 497FDBB67D137A902FF34E60A3762A17D1490EFF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS211575.roa
Signing time: Mon 24 Aug 2026 09:19:51 +0000
ROA not before: Mon 24 Aug 2026 09:14:51 +0000
ROA not after: Mon 23 Aug 2027 09:19:51 +0000
asID: 211575
IP address blocks: 188.220.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7f:db:b6:7d:13:7a:90:2f:f3:4e:60:a3:76:2a:17:d1:49:0e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 09:14:51 2026 GMT
Not After : Aug 23 09:19:51 2027 GMT
Subject: CN=D44AB08F3A76E6A64FBB561F0D07E2D452217989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:4f:6d:a9:cd:f8:fa:cb:ed:c8:54:1a:19:
63:07:93:ca:b2:aa:4a:e3:e0:a3:f6:d3:1d:8d:4f:
29:44:6c:01:db:9f:a2:d3:f3:53:5a:ca:13:71:9b:
71:2a:79:68:5a:1c:1e:86:01:0c:22:45:c7:d6:c5:
9a:bb:7c:db:85:de:5f:b2:c6:76:12:fd:f1:bd:7c:
7f:14:71:d1:98:07:2d:59:be:be:9f:7f:e2:f0:da:
af:da:01:52:8e:f0:aa:ba:6a:8b:e8:fc:20:b8:88:
c4:89:b7:81:c4:8a:45:16:6a:f8:28:8b:88:06:96:
ee:bd:75:df:60:00:fc:c2:72:7d:8b:4d:93:f1:0d:
b4:79:0f:e1:c7:b0:a9:5c:5e:a8:d2:12:23:4a:f5:
2e:8a:8c:59:06:4a:77:88:5c:57:03:c2:52:31:04:
b6:63:72:ff:62:3b:e0:78:ec:9a:56:cb:09:13:c8:
6f:a6:7c:d9:ee:39:5b:f9:42:e9:e1:ea:e7:b5:4f:
19:77:46:07:4b:41:f2:06:87:fd:3c:b8:ce:ec:36:
85:ac:5c:ce:3f:85:bc:a4:34:cf:b5:be:14:81:df:
ae:70:14:eb:26:4a:a1:dd:c9:45:2e:3b:aa:ae:48:
0f:d0:36:63:ff:33:8d:09:e9:99:f4:37:52:7c:97:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:B0:8F:3A:76:E6:A6:4F:BB:56:1F:0D:07:E2:D4:52:21:79:89
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS211575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ba:65:3e:da:7c:db:13:3f:13:54:38:5c:2c:46:3d:4b:36:
45:5a:fa:08:17:45:69:34:26:ad:dd:c8:ba:d5:db:dc:61:e0:
0e:c3:fd:fd:f5:8f:d7:55:ee:1d:dc:bc:20:f6:10:67:56:61:
f1:db:5a:46:b1:1e:16:c5:e3:86:45:6c:38:36:25:3c:a1:ec:
be:7e:e0:fe:5f:d9:ae:47:9b:68:db:96:2e:1f:a0:09:79:bf:
f5:db:fd:7e:e1:f1:fc:55:0e:17:49:85:45:15:43:00:df:af:
df:64:cd:f8:a2:99:26:c0:b8:5d:10:1d:1f:06:29:f2:49:8d:
aa:1b:97:1f:e8:e3:fd:ab:c9:c5:c4:1b:16:2f:8b:32:1e:1a:
10:f1:35:28:9b:ae:b8:30:4e:6d:68:34:f4:93:0f:61:ad:23:
fe:c4:9f:23:f9:21:d5:0c:94:4e:d5:38:b8:bd:06:20:73:76:
ec:a8:85:0a:58:82:6e:4a:8c:2d:63:d1:3f:c5:24:5e:db:e2:
e6:06:c5:8e:9f:89:74:5a:57:d6:fa:0d:1b:c0:30:ea:00:ac:
1b:8e:43:db:37:be:56:41:02:22:0c:d8:06:66:16:9a:be:ce:
ae:40:02:90:48:e3:2c:50:71:2b:43:b1:26:e2:1b:b2:34:eb:
21:9e:35:17
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUSX/btn0TepAv805go3YqF9FJDv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjQwOTE0NTFaFw0yNzA4MjMwOTE5NTFaMDMxMTAvBgNV
BAMTKEQ0NEFCMDhGM0E3NkU2QTY0RkJCNTYxRjBEMDdFMkQ0NTIyMTc5ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLk9tqc34+svtyFQaGWMHk8qy
qkrj4KP20x2NTylEbAHbn6LT81NayhNxm3EqeWhaHB6GAQwiRcfWxZq7fNuF3l+y
xnYS/fG9fH8UcdGYBy1Zvr6ff+Lw2q/aAVKO8Kq6aovo/CC4iMSJt4HEikUWavgo
i4gGlu69dd9gAPzCcn2LTZPxDbR5D+HHsKlcXqjSEiNK9S6KjFkGSneIXFcDwlIx
BLZjcv9iO+B47JpWywkTyG+mfNnuOVv5Qunh6ue1Txl3RgdLQfIGh/08uM7sNoWs
XM4/hbykNM+1vhSB365wFOsmSqHdyUUuO6quSA/QNmP/M40J6Zn0N1J8lxjRAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU1Eqwjzp25qZPu1YfDQfi1FIheYkwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjExNTc1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNxB
MA0GCSqGSIb3DQEBCwUAA4IBAQAsumU+2nzbEz8TVDhcLEY9SzZFWvoIF0VpNCat
3ci61dvcYeAOw/399Y/XVe4d3Lwg9hBnVmHx21pGsR4WxeOGRWw4NiU8oey+fuD+
X9muR5to25YuH6AJeb/12/1+4fH8VQ4XSYVFFUMA36/fZM34opkmwLhdEB0fBiny
SY2qG5cf6OP9q8nFxBsWL4syHhoQ8TUom664ME5taDT0kw9hrSP+xJ8j+SHVDJRO
1Ti4vQYgc3bsqIUKWIJuSowtY9E/xSRe2+LmBsWOn4l0WlfW+g0bwDDqAKwbjkPb
N75WQQIiDNgGZhaavs6uQAKQSOMsUHErQ7Em4huyNOshnjUX
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:33 2026 by rpki-client