Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211301.roa
File: AS211301.roa (raw, json)
Hash identifier: RXuTuY+MWausYp1eXxbaOYMVZKt9nMSLfFGZluW4RG4=
Subject key identifier: 20:EC:14:86:E7:99:31:85:E2:6E:1A:81:F0:FA:EA:BF:92:B8:55:2F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 18A7AC02786F34E7E87EA6DC6F1BA08AFDEC2187
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211301.roa
Signing time: Mon 08 Sep 2025 12:26:43 +0000
ROA not before: Mon 08 Sep 2025 12:21:43 +0000
ROA not after: Mon 07 Sep 2026 12:26:43 +0000
asID: 211301
IP address blocks: 179.61.138.0/24 maxlen: 24
179.61.221.0/24 maxlen: 24
179.61.251.0/24 maxlen: 24
181.214.99.0/24 maxlen: 24
181.214.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a7:ac:02:78:6f:34:e7:e8:7e:a6:dc:6f:1b:a0:8a:fd:ec:21:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 8 12:21:43 2025 GMT
Not After : Sep 7 12:26:43 2026 GMT
Subject: CN=20EC1486E7993185E26E1A81F0FAEABF92B8552F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:29:2b:a7:1d:e4:45:d2:52:7a:b9:3b:8a:
b4:92:7d:b7:5f:76:b8:db:fe:1f:f1:22:3f:79:95:
ae:77:0b:c2:2c:97:4f:48:a5:e4:c6:10:cb:30:67:
05:47:a9:cf:24:02:30:1b:1f:dc:d1:c0:7e:e5:61:
46:08:31:30:7d:51:30:60:29:b7:1f:93:8c:94:bd:
d4:2a:dd:e9:87:22:c9:d9:13:a6:5b:f1:31:7a:20:
00:3a:b0:b8:8a:74:4f:cc:7a:65:5a:49:a1:28:b6:
a9:f5:67:6e:e0:14:01:33:a0:a7:d3:5d:fa:c2:c6:
6e:8e:c4:fc:34:4b:ba:9b:8f:7d:32:11:a5:1e:4d:
4c:5a:26:a4:fd:01:2f:36:13:36:f0:11:aa:10:55:
69:15:c8:41:af:70:ae:1e:dc:81:da:7e:83:b3:8c:
8b:57:d2:d2:1d:01:37:ba:f5:22:79:f1:40:64:0e:
ce:ec:46:f1:fe:df:f3:b7:00:de:19:92:a7:5e:56:
50:9b:df:e7:66:7d:5e:1e:36:4a:2d:17:7f:89:94:
5a:72:ab:56:eb:13:5a:2b:a3:17:32:1a:28:c8:d8:
29:68:38:cd:c5:14:56:44:14:12:8b:7c:20:4d:58:
b9:46:41:aa:31:d9:77:94:d9:8a:b7:40:7a:b9:bd:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:14:86:E7:99:31:85:E2:6E:1A:81:F0:FA:EA:BF:92:B8:55:2F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211301.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.138.0/24
179.61.221.0/24
179.61.251.0/24
181.214.99.0/24
181.214.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9e:c6:ac:1e:d9:3f:60:cf:28:e7:d9:df:bf:73:af:26:a6:
d4:c9:bb:48:78:8a:bd:92:65:dd:e6:4d:f3:15:a3:7a:32:b4:
fd:af:c3:0a:b1:47:23:e6:1e:a8:0f:c5:c2:2a:8d:92:f3:9b:
d5:fb:cb:f9:e9:a3:a2:10:84:04:1d:c8:2b:62:4d:4b:63:0d:
86:30:0f:44:c9:d8:e8:4b:ef:a2:b3:11:b7:a9:52:b9:6f:13:
06:1d:86:8e:30:66:2b:95:45:b1:d6:7f:17:9e:74:a9:59:86:
72:be:8b:d8:e3:9e:46:4e:f0:30:bb:a0:8c:9b:a3:9f:46:b9:
af:03:81:26:a5:38:82:b6:5d:e6:c5:ee:11:04:7e:25:31:76:
be:d6:27:60:c2:fa:7d:18:56:8c:12:50:8c:2b:52:c3:dd:7f:
c5:00:ee:3f:16:1d:15:72:24:d4:2a:5f:5a:92:69:ba:9c:28:
66:6c:69:8a:0a:12:a4:ae:01:8e:c3:c7:d5:aa:32:c0:97:f7:
a8:36:c6:a1:4d:35:42:f0:bf:36:8a:86:40:01:cb:90:92:a8:
fb:25:e1:88:47:53:b6:a3:a3:b9:f2:b1:a5:02:67:a7:ba:0f:
de:84:fb:25:c5:9c:c5:a0:75:27:5c:34:43:65:37:99:06:a3:
56:44:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:01:12 2025 by rpki-client