Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS211440.roa
File: AS211440.roa (raw, json)
Hash identifier: zaSD1MOjsHaCPlAiucFkxI728Lwjv0Q0tIFxFsU24WU=
Subject key identifier: 1F:99:C7:1C:0C:64:5B:95:0D:DA:A6:2F:82:95:8D:25:FB:54:7B:71
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 365B7D5DFB5A3D2631218AE5E19CACD06595A3C2
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS211440.roa
Signing time: Wed 04 Mar 2026 13:31:08 +0000
ROA not before: Wed 04 Mar 2026 13:26:08 +0000
ROA not after: Wed 03 Mar 2027 13:31:08 +0000
asID: 211440
IP address blocks: 147.125.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 10:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5b:7d:5d:fb:5a:3d:26:31:21:8a:e5:e1:9c:ac:d0:65:95:a3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Mar 4 13:26:08 2026 GMT
Not After : Mar 3 13:31:08 2027 GMT
Subject: CN=1F99C71C0C645B950DDAA62F82958D25FB547B71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:84:c6:fb:78:df:62:a4:05:eb:52:53:04:
42:fb:dc:d0:a4:32:56:05:9d:e9:16:9f:49:87:62:
e8:f2:4e:e3:9a:c6:9c:70:ca:a3:71:ef:ed:15:4d:
38:5c:86:45:c7:43:4a:91:03:32:f7:90:c6:b6:b9:
03:e2:e8:9a:5d:18:c9:b6:56:5e:d8:9b:8e:d4:96:
33:ee:67:77:07:c2:6b:9c:7e:2f:05:b7:55:92:46:
49:1f:98:b3:1f:cf:29:95:2e:96:73:f0:cb:48:e0:
8a:18:03:82:ba:9c:4c:b9:e1:2f:5f:dd:dd:21:16:
03:64:da:be:a5:be:d5:a8:b6:7c:cf:ff:d3:84:70:
20:dd:18:57:77:4a:c9:ec:02:db:40:27:7c:26:20:
8b:fd:be:0a:02:59:02:dc:00:0a:16:52:ce:63:16:
9a:c2:4b:ff:0e:bf:a2:a9:fd:13:85:7b:9e:f7:f5:
a4:86:5a:8a:72:7d:59:d1:8e:a7:b0:41:b9:05:02:
9c:b1:04:e2:03:95:f4:8b:f9:c1:6c:d0:d0:26:df:
ed:36:4d:4c:f0:bd:6b:e6:4a:73:67:23:7c:a8:c2:
fc:61:47:ed:d0:52:db:4d:70:59:43:b0:da:37:a4:
d0:40:07:9d:3a:a3:0c:c6:9d:84:87:75:f3:ac:d5:
ef:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:99:C7:1C:0C:64:5B:95:0D:DA:A6:2F:82:95:8D:25:FB:54:7B:71
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS211440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:42:cd:02:88:d2:96:46:22:29:34:46:a1:16:3b:8b:33:1c:
fa:0c:df:70:c0:d1:d6:52:62:9a:14:ff:52:ec:e4:2e:6f:01:
71:14:a7:e1:8d:9f:b0:88:79:85:f9:39:8f:39:59:48:51:c4:
53:c5:ac:73:60:a8:1e:55:ca:95:5b:64:c2:97:ec:4b:79:83:
aa:ea:fd:6f:19:64:d4:5b:c1:bc:73:8b:1b:74:8e:df:44:d8:
29:37:6e:02:0c:a1:d7:33:a4:98:13:5a:50:f9:15:a7:a5:ac:
ca:01:15:85:a7:fd:94:12:7a:18:a9:65:15:c5:5c:e6:70:74:
ca:f4:f5:30:e1:ce:fe:af:52:7b:d4:81:8a:55:a3:0b:bd:41:
d5:5b:15:b1:94:f6:9b:8d:e1:b4:89:c6:e2:c3:ea:b3:c8:4a:
70:4e:cf:dd:17:24:10:6b:40:6b:ca:82:57:b9:5d:d4:f8:d5:
4c:7a:8c:1c:d3:2c:5e:17:98:07:04:8d:95:02:01:3c:3d:9f:
51:ff:91:68:b7:6a:a3:28:f6:83:ae:5c:32:68:15:a5:94:d3:
1d:ee:ef:79:5d:05:81:70:b6:71:d5:77:ef:18:b3:43:82:10:
ba:ae:67:79:f2:14:5a:1d:43:72:27:37:ef:4b:d3:03:de:9d:
2f:59:2e:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNlt9XftaPSYxIYrl4Zys0GWVo8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjAzMDQxMzI2MDhaFw0yNzAzMDMxMzMxMDhaMDMxMTAvBgNV
BAMTKDFGOTlDNzFDMEM2NDVCOTUwRERBQTYyRjgyOTU4RDI1RkI1NDdCNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFYTG+3jfYqQF61JTBEL73NCk
MlYFnekWn0mHYujyTuOaxpxwyqNx7+0VTThchkXHQ0qRAzL3kMa2uQPi6JpdGMm2
Vl7Ym47UljPuZ3cHwmucfi8Ft1WSRkkfmLMfzymVLpZz8MtI4IoYA4K6nEy54S9f
3d0hFgNk2r6lvtWotnzP/9OEcCDdGFd3SsnsAttAJ3wmIIv9vgoCWQLcAAoWUs5j
FprCS/8Ov6Kp/ROFe5739aSGWopyfVnRjqewQbkFApyxBOIDlfSL+cFs0NAm3+02
TUzwvWvmSnNnI3yowvxhR+3QUttNcFlDsNo3pNBAB506owzGnYSHdfOs1e8tAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUH5nHHAxkW5UN2qYvgpWNJftUe3EwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NjZDM4ODRhLWMzODUt
NGI2NS05ODY2LTRmNjM4MzE3MjY3Mi8wL0FTMjExNDQwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk33W
MA0GCSqGSIb3DQEBCwUAA4IBAQCPQs0CiNKWRiIpNEahFjuLMxz6DN9wwNHWUmKa
FP9S7OQubwFxFKfhjZ+wiHmF+TmPOVlIUcRTxaxzYKgeVcqVW2TCl+xLeYOq6v1v
GWTUW8G8c4sbdI7fRNgpN24CDKHXM6SYE1pQ+RWnpazKARWFp/2UEnoYqWUVxVzm
cHTK9PUw4c7+r1J71IGKVaMLvUHVWxWxlPabjeG0icbiw+qzyEpwTs/dFyQQa0Br
yoJXuV3U+NVMeowc0yxeF5gHBI2VAgE8PZ9R/5Fot2qjKPaDrlwyaBWllNMd7u95
XQWBcLZx1XfvGLNDghC6rmd58hRaHUNyJzfvS9MD3p0vWS5h
-----END CERTIFICATE-----
Generated at Fri Mar 6 02:01:44 2026 by rpki-client