Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa
File: AS211484.roa (raw, json)
Hash identifier: yrGHwGjxdHvAM0I9+hBw241xrz7b9kLMy92859y8rTM=
Subject key identifier: 87:C2:F1:BA:19:82:AD:28:F4:3B:45:F2:21:4E:92:3D:96:89:9D:6F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 03138CF0FCC58CC7E317BF5C0B3A0BC2306917E2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa
Signing time: Wed 08 Jul 2026 17:50:24 +0000
ROA not before: Wed 08 Jul 2026 17:45:24 +0000
ROA not after: Wed 07 Jul 2027 17:50:24 +0000
asID: 211484
IP address blocks: 95.134.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 02:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:13:8c:f0:fc:c5:8c:c7:e3:17:bf:5c:0b:3a:0b:c2:30:69:17:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 8 17:45:24 2026 GMT
Not After : Jul 7 17:50:24 2027 GMT
Subject: CN=87C2F1BA1982AD28F43B45F2214E923D96899D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:eb:c2:88:89:49:cb:5b:b8:88:b5:46:85:
2d:79:26:6c:c4:6b:5d:ea:cf:a7:68:75:d0:c4:fb:
31:82:18:97:23:9b:5e:9a:1a:f0:c3:eb:88:a7:19:
23:83:79:4f:ec:11:de:49:3f:9c:cb:da:32:c8:b8:
25:88:0d:de:38:fd:a2:f5:86:6f:07:a7:c7:58:ba:
a4:f3:26:45:1c:61:ce:4d:b8:d9:0b:84:fc:e1:75:
6f:3f:79:78:81:af:6e:50:b9:56:c6:cd:96:52:15:
53:67:6c:e6:f5:cb:4a:e9:1c:b5:00:26:84:2c:02:
e6:7d:53:49:0c:3c:57:4c:fa:18:1b:23:6a:fe:60:
26:0f:ad:88:f1:61:1f:35:ab:77:d6:24:fb:12:14:
78:5f:0c:8a:29:0e:f6:5f:7d:3f:0f:c2:b5:f9:3a:
78:7a:9d:e9:f8:f2:e0:18:7a:b5:b0:9a:3b:27:4a:
3d:a5:a7:a2:35:63:ab:a9:9d:ec:7f:ff:96:36:4e:
15:e9:33:ea:9e:eb:1c:f3:59:85:c8:04:f8:89:64:
50:5f:19:c3:f7:2b:28:9c:31:9d:27:3a:12:9f:5e:
cd:f4:84:f7:f3:48:15:7d:d4:96:9a:a4:24:dc:ab:
6f:53:01:a0:cc:57:e0:1e:9d:1c:e6:c3:7c:25:ff:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:F1:BA:19:82:AD:28:F4:3B:45:F2:21:4E:92:3D:96:89:9D:6F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5b:d1:c8:69:2a:59:8e:d5:84:d5:b0:55:26:de:ac:da:f1:
35:39:6b:03:06:dd:e9:4c:d6:73:82:2c:22:fd:f2:df:a0:ad:
9d:ba:57:2e:f4:30:e1:79:33:c2:0e:df:43:d3:46:b8:22:6a:
56:47:97:b5:f1:64:d1:3a:16:72:19:88:2c:79:33:d7:c9:45:
53:8a:d9:69:d2:39:bb:09:c0:a4:a1:d1:97:f4:3d:fb:cb:10:
f7:5f:ad:ce:f8:13:79:60:65:29:29:32:95:b8:c7:99:ce:99:
2b:47:dc:56:17:f1:11:cc:80:46:aa:a0:94:83:e4:b2:bf:8e:
a5:97:a4:17:3c:78:de:14:4b:af:27:d0:77:ac:c3:7c:ed:91:
1b:01:89:01:e4:62:5d:fb:61:c0:da:05:6f:4c:43:7a:f1:a9:
c9:57:eb:80:3c:09:88:9f:8e:cc:34:3d:39:35:6c:46:bd:9f:
f0:3b:52:72:62:d1:aa:04:6c:44:21:ff:61:46:a3:3c:4e:ca:
2f:2e:69:db:0e:fd:66:26:73:9d:3e:42:f3:c3:4e:e7:8d:8f:
48:a0:21:6a:e8:cb:bf:3e:f5:53:c3:71:4b:b5:bb:a2:90:bd:
9f:f1:71:52:cd:ac:96:aa:ca:17:a8:cf:11:ef:7a:14:0a:f6:
d5:9e:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 14:59:14 2026 by rpki-client