Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211936.roa
File: AS211936.roa (raw, json)
Hash identifier: YMaEiYX30iN8phOQLKh9c3cAPOEtNFL/kn1yK5qrbAY=
Subject key identifier: EF:6D:1F:DB:FC:69:4A:18:F8:C9:83:0C:78:2E:F0:64:0F:F3:2D:3B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 21079741FA2131ABD152482D5FB0CE7E9DB21E57
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211936.roa
Signing time: Wed 15 Jul 2026 01:49:11 +0000
ROA not before: Wed 15 Jul 2026 01:44:11 +0000
ROA not after: Wed 14 Jul 2027 01:49:11 +0000
asID: 211936
IP address blocks: 141.11.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:07:97:41:fa:21:31:ab:d1:52:48:2d:5f:b0:ce:7e:9d:b2:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 15 01:44:11 2026 GMT
Not After : Jul 14 01:49:11 2027 GMT
Subject: CN=EF6D1FDBFC694A18F8C9830C782EF0640FF32D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:8e:b0:c4:f5:d1:88:8c:26:6a:b5:21:71:
03:12:b3:cc:53:5f:ea:f9:85:8d:56:c2:97:ba:99:
37:e1:3c:b7:63:2d:8c:88:ab:a5:cf:d8:0b:99:02:
19:e0:8c:42:6c:2d:f9:01:d7:d5:8c:43:cb:19:92:
f2:e1:a4:1a:e8:c3:1f:44:b2:86:c5:0e:7d:ec:07:
dd:94:dd:eb:21:71:d9:72:26:cf:69:d2:ba:bf:3c:
7d:31:c1:70:4b:0b:e8:6d:69:f0:1b:8c:74:9f:03:
13:fd:83:e8:8e:2b:97:f8:ca:b9:70:e9:24:f4:8e:
86:8e:eb:a5:98:86:91:dc:ec:3d:6f:9a:75:22:67:
b2:b7:cf:7b:c1:d7:c2:fd:e7:2d:2f:f8:b3:31:a0:
bf:c3:e5:86:f4:69:e9:4e:f5:80:43:0a:21:28:07:
92:22:17:38:94:8c:ef:8f:3f:89:d6:5e:7b:ac:07:
a9:31:59:d4:70:03:25:f2:89:57:cf:1b:90:87:b1:
01:fb:26:d9:15:52:e4:01:38:2f:03:54:9a:0c:fc:
03:a8:60:3e:91:ba:18:fe:0c:cc:e8:7c:4a:46:40:
b1:14:38:3c:35:b7:43:dc:8a:9e:59:2d:61:7f:14:
46:99:f3:8c:f3:7c:b7:8d:91:5a:94:6a:02:ba:19:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6D:1F:DB:FC:69:4A:18:F8:C9:83:0C:78:2E:F0:64:0F:F3:2D:3B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.222.0/23
Signature Algorithm: sha256WithRSAEncryption
76:bd:71:a8:7d:f6:14:9c:3b:2d:9f:9b:68:bc:63:8d:ec:a6:
bd:1a:8a:a9:d7:21:bd:f7:70:3d:35:67:8f:83:84:87:5b:3f:
5e:01:01:6c:4c:ab:27:c2:59:a5:89:b4:f7:81:2d:6f:d3:34:
57:85:da:25:65:4f:91:06:95:a7:54:7f:eb:9d:d6:24:96:37:
a7:08:93:01:f9:2d:cd:25:c7:7c:15:5b:81:70:ec:e7:a1:48:
66:d7:11:27:32:c2:fc:38:76:db:01:38:06:ae:cf:fe:de:21:
37:03:28:bd:0b:0d:aa:c1:67:80:4c:7f:c8:77:b9:13:c0:42:
26:10:a1:f6:32:92:c6:8e:e4:a0:26:2a:58:29:93:9b:5b:7b:
cc:7f:37:0c:50:49:2a:4a:fe:9c:d6:fd:53:28:a3:3e:a1:4e:
d0:0b:3c:10:c3:d7:6f:c8:a1:8d:fe:85:51:13:17:e8:4e:01:
3a:31:1d:be:76:1a:28:fe:2f:6b:9e:de:00:79:25:17:28:c8:
55:e6:e3:07:93:e2:9b:a0:d4:1d:14:1e:53:9a:95:87:7e:60:
07:81:f5:83:d9:e2:45:b3:a7:fa:ab:ab:eb:0a:8f:3d:c8:28:
19:91:fe:1a:19:9d:da:77:8f:da:04:4e:01:8a:86:a4:46:2d:
87:9b:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:07:13 2026 by rpki-client