Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211439.roa
File: AS211439.roa (raw, json)
Hash identifier: zmqR5TCyO+oDS5PIqn9tm/cIqXP+weyYLG3wXaR5xrQ=
Subject key identifier: 29:D5:BA:73:E0:F8:D8:57:B8:91:48:8D:95:4F:08:00:C8:8A:BD:CB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 32ADCEA3A6893182B11883CEE44318EFE4E2A3C4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211439.roa
Signing time: Tue 24 Mar 2026 11:45:43 +0000
ROA not before: Tue 24 Mar 2026 11:40:43 +0000
ROA not after: Tue 23 Mar 2027 11:45:43 +0000
asID: 211439
IP address blocks: 140.150.153.0/24 maxlen: 24
140.233.185.0/24 maxlen: 24
150.241.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ad:ce:a3:a6:89:31:82:b1:18:83:ce:e4:43:18:ef:e4:e2:a3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 24 11:40:43 2026 GMT
Not After : Mar 23 11:45:43 2027 GMT
Subject: CN=29D5BA73E0F8D857B891488D954F0800C88ABDCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:16:e2:4b:e7:69:db:c4:7a:ec:b6:c7:09:
ed:ee:f7:71:ee:a6:9c:02:a0:32:1b:ec:7f:ab:db:
a4:2f:e6:fa:56:3e:09:6f:3d:d0:8a:87:56:6c:c2:
fb:11:b3:10:4c:e0:21:eb:e3:c2:70:ad:ff:f1:26:
96:17:b5:b5:12:1f:6a:7f:22:aa:25:f7:77:fb:2f:
6f:d0:f7:74:d6:47:9d:8d:9a:7f:2a:f8:30:67:02:
e4:ab:bd:ce:dc:19:e8:28:91:47:1e:30:41:a9:9a:
79:ec:65:4c:b3:da:ff:08:8b:ce:84:4f:7c:e0:bb:
a6:e3:23:0c:77:dd:47:ab:d0:2d:b1:3f:8b:ab:fe:
51:6d:f7:f2:91:15:9c:f8:99:b6:ca:21:25:b5:2c:
0f:90:a0:07:c3:86:c1:e1:2b:68:52:7e:9f:c3:16:
f2:fa:57:31:ed:c9:56:de:24:ea:a3:7a:71:e0:2e:
17:ba:f3:27:d4:6c:2f:7b:ba:30:18:8f:a5:1d:b5:
2e:f6:15:22:84:7b:36:8d:1b:3c:fe:2a:67:0f:94:
c6:8b:4f:67:1f:42:4f:9a:dd:75:97:0b:3e:12:e5:
5f:6d:53:de:7e:f5:36:33:1b:e2:af:15:0e:ad:28:
d2:ae:5f:9b:f9:b9:ee:ad:b8:c6:01:35:63:59:dd:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D5:BA:73:E0:F8:D8:57:B8:91:48:8D:95:4F:08:00:C8:8A:BD:CB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.153.0/24
140.233.185.0/24
150.241.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2b:be:88:0e:28:ec:6c:66:2c:4a:5a:c6:dc:94:af:51:8c:
e9:1b:73:ad:91:9a:90:2b:53:6d:97:79:14:90:8d:fb:e4:61:
02:59:14:f9:c0:40:dc:85:4f:08:30:3a:33:07:f0:a4:35:81:
61:7e:e5:23:c8:7e:cc:60:e0:b9:c3:ad:6d:1c:66:db:a3:b3:
fd:42:92:1a:ad:24:c5:ff:71:88:f1:a6:8f:8d:87:30:d9:99:
1f:7b:9b:c6:ef:9c:51:d7:f9:67:27:c7:3c:32:48:3f:70:f3:
1d:26:8c:dd:97:21:9d:e3:b7:40:30:20:d6:4a:fc:94:8e:4f:
51:bb:68:b2:43:5c:0b:29:cf:48:3a:6d:47:87:0e:90:89:14:
f4:84:19:31:ec:0a:c4:3d:ab:1b:43:56:c6:b0:f7:0a:bc:82:
6b:67:21:e9:4a:13:fd:6c:e0:51:43:f9:37:8b:b1:f5:14:a4:
62:a7:3b:43:fe:a5:a0:38:e5:c2:11:02:90:9c:e0:36:83:90:
ff:47:d6:cd:14:c5:a4:05:be:76:dd:c1:72:80:fc:01:f5:7b:
4e:76:f6:14:83:13:41:55:fb:84:1d:e0:63:ab:4e:a8:9a:1c:
ab:34:ca:86:41:79:b0:3b:2c:0b:ca:a2:49:b5:11:52:4d:01:
ba:e5:51:2a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUMq3Oo6aJMYKxGIPO5EMY7+Tio8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAzMjQxMTQwNDNaFw0yNzAzMjMxMTQ1NDNaMDMxMTAvBgNV
BAMTKDI5RDVCQTczRTBGOEQ4NTdCODkxNDg4RDk1NEYwODAwQzg4QUJEQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoBbiS+dp28R67LbHCe3u93Hu
ppwCoDIb7H+r26Qv5vpWPglvPdCKh1ZswvsRsxBM4CHr48Jwrf/xJpYXtbUSH2p/
Iqol93f7L2/Q93TWR52Nmn8q+DBnAuSrvc7cGegokUceMEGpmnnsZUyz2v8Ii86E
T3zgu6bjIwx33Uer0C2xP4ur/lFt9/KRFZz4mbbKISW1LA+QoAfDhsHhK2hSfp/D
FvL6VzHtyVbeJOqjenHgLhe68yfUbC97ujAYj6UdtS72FSKEezaNGzz+KmcPlMaL
T2cfQk+a3XWXCz4S5V9tU95+9TYzG+KvFQ6tKNKuX5v5ue6tuMYBNWNZ3ZVvAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUKdW6c+D42Fe4kUiNlU8IAMiKvcswHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjExNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjJaZ
AwQAjOm5AwQAlvHnMA0GCSqGSIb3DQEBCwUAA4IBAQBPK76IDijsbGYsSlrG3JSv
UYzpG3OtkZqQK1Ntl3kUkI375GECWRT5wEDchU8IMDozB/CkNYFhfuUjyH7MYOC5
w61tHGbbo7P9QpIarSTF/3GI8aaPjYcw2Zkfe5vG75xR1/lnJ8c8Mkg/cPMdJozd
lyGd47dAMCDWSvyUjk9Ru2iyQ1wLKc9IOm1Hhw6QiRT0hBkx7ArEPasbQ1bGsPcK
vIJrZyHpShP9bOBRQ/k3i7H1FKRipztD/qWgOOXCEQKQnOA2g5D/R9bNFMWkBb52
3cFygPwB9XtOdvYUgxNBVfuEHeBjq06omhyrNMqGQXmwOywLyqJJtRFSTQG65VEq
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:40:05 2026 by rpki-client