Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211484.roa
File: AS211484.roa (raw, json)
Hash identifier: zgTrKgb1M4TMI2fkPo9/GW/x5PgOW3lx7uMotuUJwVg=
Subject key identifier: D8:6F:83:AC:30:5B:E8:0A:50:15:BC:72:7F:FE:29:7B:CE:3C:20:AC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 780528BE5A37ED916332A5B7D3FAB1A382723910
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211484.roa
Signing time: Fri 24 Apr 2026 05:47:05 +0000
ROA not before: Fri 24 Apr 2026 05:42:05 +0000
ROA not after: Fri 23 Apr 2027 05:47:05 +0000
asID: 211484
IP address blocks: 185.135.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:05:28:be:5a:37:ed:91:63:32:a5:b7:d3:fa:b1:a3:82:72:39:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 24 05:42:05 2026 GMT
Not After : Apr 23 05:47:05 2027 GMT
Subject: CN=D86F83AC305BE80A5015BC727FFE297BCE3C20AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:45:5f:8d:97:d7:61:7f:8a:e5:ec:d5:df:
9e:2f:08:15:f8:24:57:ea:46:9f:91:b8:12:c8:84:
ef:75:cf:fd:f6:13:5c:31:70:4a:ef:cf:b3:f6:87:
cd:00:ae:59:95:44:7f:60:54:6a:a7:60:f3:a2:f8:
e4:9b:72:b9:35:55:0c:03:c9:ee:b2:93:71:cd:ff:
71:f1:19:07:8e:d2:2c:cb:9b:06:de:43:58:19:21:
f6:28:6d:69:31:48:bf:e8:a8:e1:53:5a:0e:9c:54:
1b:b1:0a:43:d6:08:de:9e:29:fe:c6:49:05:cb:34:
c4:60:46:f9:ca:9b:2a:7e:8a:0d:76:5b:ef:23:db:
e9:e6:26:55:98:dc:87:99:13:c3:05:e2:84:68:b3:
c1:21:b2:26:d0:df:c6:1a:ea:b8:07:1b:a3:87:3a:
8f:35:29:a1:45:78:fc:2a:4f:2a:f6:3a:d3:94:50:
b3:3b:9a:bf:9c:a3:15:c7:ce:cf:a8:18:c1:2b:0a:
21:3b:20:86:73:4e:f4:99:61:b0:7f:fb:44:d2:92:
bb:64:63:b2:35:e3:c1:26:b1:fe:94:78:93:c6:16:
c1:5d:a0:af:6b:f6:a2:27:14:2b:13:52:c6:a0:43:
9a:6d:bb:99:14:b5:f0:a6:cd:4f:91:5c:5b:d2:27:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6F:83:AC:30:5B:E8:0A:50:15:BC:72:7F:FE:29:7B:CE:3C:20:AC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.157.0/24
Signature Algorithm: sha256WithRSAEncryption
72:71:28:a4:1f:c2:99:10:c7:32:6e:1a:29:42:2d:36:83:58:
3c:a4:2c:8b:64:b3:a1:59:51:42:7c:53:8f:16:f7:26:59:55:
45:db:61:3d:b5:ac:98:1f:c8:5e:bb:4e:5f:01:b4:4e:5a:c3:
f0:a4:0c:e2:e8:b2:2c:98:97:11:d7:14:87:23:ff:91:e2:c7:
8e:2a:07:80:6e:82:40:7b:49:c7:56:ac:6f:dd:f7:5a:49:e7:
c1:20:f6:be:a1:84:d6:5e:f0:41:7a:c3:f9:9e:7e:c3:54:31:
80:bf:34:51:13:c6:58:43:13:0a:53:36:b5:a0:2a:1a:98:0a:
1f:e8:c9:26:7a:1e:c5:41:10:55:a7:0e:e9:af:7d:49:88:0c:
4f:6e:fe:cf:7d:c0:85:26:a1:84:f5:90:ac:3d:50:7d:f2:94:
0e:7c:32:d6:1b:f4:3b:9a:61:70:54:cb:35:f6:9e:d7:bc:b8:
4d:bd:21:6a:e8:fb:6c:5a:7d:c8:9a:a3:50:ad:a5:98:60:8a:
ee:9d:8a:2c:9d:69:79:e8:77:da:c1:3e:bf:c3:0d:cb:78:0f:
ed:eb:6b:cc:36:3a:c8:eb:04:81:cb:f0:f9:62:95:17:3e:ef:
1e:00:ed:52:e5:61:fb:25:f5:07:66:be:cd:9b:db:99:09:ee:
32:4c:4c:a7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUeAUovlo37ZFjMqW30/qxo4JyORAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA0MjQwNTQyMDVaFw0yNzA0MjMwNTQ3MDVaMDMxMTAvBgNV
BAMTKEQ4NkY4M0FDMzA1QkU4MEE1MDE1QkM3MjdGRkUyOTdCQ0UzQzIwQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiS0VfjZfXYX+K5ezV354vCBX4
JFfqRp+RuBLIhO91z/32E1wxcErvz7P2h80ArlmVRH9gVGqnYPOi+OSbcrk1VQwD
ye6yk3HN/3HxGQeO0izLmwbeQ1gZIfYobWkxSL/oqOFTWg6cVBuxCkPWCN6eKf7G
SQXLNMRgRvnKmyp+ig12W+8j2+nmJlWY3IeZE8MF4oRos8EhsibQ38Ya6rgHG6OH
Oo81KaFFePwqTyr2OtOUULM7mr+coxXHzs+oGMErCiE7IIZzTvSZYbB/+0TSkrtk
Y7I148Emsf6UeJPGFsFdoK9r9qInFCsTUsagQ5ptu5kUtfCmzU+RXFvSJxsNAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU2G+DrDBb6ApQFbxyf/4pe848IKwwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjExNDg0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYed
MA0GCSqGSIb3DQEBCwUAA4IBAQBycSikH8KZEMcybhopQi02g1g8pCyLZLOhWVFC
fFOPFvcmWVVF22E9tayYH8heu05fAbROWsPwpAzi6LIsmJcR1xSHI/+R4seOKgeA
boJAe0nHVqxv3fdaSefBIPa+oYTWXvBBesP5nn7DVDGAvzRRE8ZYQxMKUza1oCoa
mAof6Mkmeh7FQRBVpw7pr31JiAxPbv7PfcCFJqGE9ZCsPVB98pQOfDLWG/Q7mmFw
VMs19p7XvLhNvSFq6PtsWn3ImqNQraWYYIrunYosnWl56HfawT6/ww3LeA/t62vM
NjrI6wSBy/D5YpUXPu8eAO1S5WH7JfUHZr7Nm9uZCe4yTEyn
-----END CERTIFICATE-----
Generated at Wed May 13 00:09:10 2026 by rpki-client