Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211826.roa
File: AS211826.roa (raw, json)
Hash identifier: hwAi1Er+owtLF7z0jg2fqEWpHAbKnzZRcU9+Q1bKCi8=
Subject key identifier: AF:2D:AD:DE:C1:7A:26:64:99:3A:A9:72:6B:98:15:7E:C0:EE:20:6F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3D2572129E3F09B87D5C8B2315EE20DD4631349A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211826.roa
Signing time: Thu 16 Oct 2025 16:37:45 +0000
ROA not before: Thu 16 Oct 2025 16:32:45 +0000
ROA not after: Thu 15 Oct 2026 16:37:45 +0000
asID: 211826
IP address blocks: 46.202.33.0/24 maxlen: 24
95.134.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:25:72:12:9e:3f:09:b8:7d:5c:8b:23:15:ee:20:dd:46:31:34:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 16 16:32:45 2025 GMT
Not After : Oct 15 16:37:45 2026 GMT
Subject: CN=AF2DADDEC17A2664993AA9726B98157EC0EE206F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:29:ab:f5:3f:3c:89:91:0e:72:87:94:aa:
d7:65:57:9c:5e:54:8a:43:ea:fd:c4:3b:81:20:42:
75:f0:28:ad:17:e6:ff:4f:bf:22:a5:16:48:c1:a7:
0a:a5:fe:fb:db:49:5d:26:67:e8:5e:a1:47:0e:f0:
e5:67:06:a8:e6:fb:8c:7a:ed:e9:f0:07:64:74:53:
6a:82:c6:6e:41:03:5e:4c:37:c9:73:bb:c0:8f:cb:
ed:85:8f:70:8b:22:0e:3d:68:1b:01:60:ed:a7:1b:
ed:94:7b:06:36:a3:ba:dd:b3:cf:95:a2:b9:57:89:
b1:d7:56:b6:36:79:67:83:78:a2:b1:1e:7b:20:5a:
f0:86:93:d8:ef:b0:ce:6c:9c:74:7d:53:41:09:3d:
f1:22:3e:a2:5b:db:43:e2:9f:b1:d8:51:b5:00:f7:
23:a8:ba:13:a7:16:ad:d8:a5:77:4d:e8:9d:d3:8a:
0f:1d:42:e3:bd:cb:28:2e:aa:b8:b9:48:3e:0d:04:
fa:8b:ac:65:95:20:4f:a7:03:1f:39:a3:67:a3:85:
41:df:ac:3a:2b:59:88:93:9d:04:59:11:8c:8f:ae:
d5:97:54:9e:22:8c:67:4a:ef:48:43:0f:b9:c8:c1:
36:f9:88:d9:f6:b4:98:dc:11:81:ba:93:c9:a2:ca:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2D:AD:DE:C1:7A:26:64:99:3A:A9:72:6B:98:15:7E:C0:EE:20:6F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211826.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.33.0/24
95.134.31.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a9:46:67:33:f8:00:0f:57:0d:00:4b:5b:26:15:a3:78:57:
ea:2a:89:ca:2d:3a:53:27:e8:cd:e1:d5:d2:e3:c7:ff:9f:10:
65:ec:ea:83:1a:47:60:0e:cd:d3:13:f1:d5:57:c8:22:08:61:
94:89:a3:f9:4c:b3:71:a4:ea:74:0c:36:a6:64:05:ab:80:a1:
4b:df:b4:3b:a2:86:b2:d5:3a:73:86:1b:6c:5d:4e:2b:e9:3c:
96:61:82:bf:3a:09:46:95:c8:75:22:e6:34:28:00:60:17:74:
a0:b0:a4:ad:c2:df:ff:3c:b5:b3:63:a4:38:37:7a:9c:27:b8:
45:bc:9b:4f:75:6a:40:f5:ac:32:c7:a6:a9:fe:79:6f:4f:56:
a6:f7:a2:4d:36:a7:d3:73:3b:7e:e8:88:e6:97:78:9a:6a:ef:
e9:7c:cb:73:8f:ff:53:da:54:28:31:d1:77:fc:1e:59:69:16:
c8:69:11:f0:f1:79:6d:b4:22:e0:b9:fa:84:d9:05:c4:5c:73:
0f:c9:90:17:38:b1:66:cc:85:a9:81:dc:15:67:c5:a3:81:21:
2d:49:aa:50:d0:31:98:ba:60:57:84:fc:ac:f5:3d:78:29:08:
23:3d:a9:b0:ba:66:2d:27:9e:8f:66:22:b2:b7:7a:60:c2:8b:
9d:5e:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 21:36:28 2025 by rpki-client