Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211484.roa
File: AS211484.roa (raw, json)
Hash identifier: uIxMtDWHIRHtX4sQUuFnWqIbIglPpT4NsqjzwP+lN2c=
Subject key identifier: 2F:31:68:C0:44:45:96:D1:E1:A3:9E:DB:56:92:00:EE:B3:1A:E8:D3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3799D701970FBD36191C158BDC6E6A0D062ED6B6
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211484.roa
Signing time: Tue 21 Jul 2026 08:11:59 +0000
ROA not before: Tue 21 Jul 2026 08:06:59 +0000
ROA not after: Tue 20 Jul 2027 08:11:59 +0000
asID: 211484
IP address blocks: 181.215.178.0/24 maxlen: 24
185.135.157.0/24 maxlen: 24
191.96.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:99:d7:01:97:0f:bd:36:19:1c:15:8b:dc:6e:6a:0d:06:2e:d6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 21 08:06:59 2026 GMT
Not After : Jul 20 08:11:59 2027 GMT
Subject: CN=2F3168C0444596D1E1A39EDB569200EEB31AE8D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:c7:a9:22:13:1d:6d:76:07:25:9c:3c:fd:
2b:95:3e:72:76:56:4f:fc:51:ce:5d:7b:21:cd:12:
e1:ea:82:2d:77:41:9a:37:71:fb:38:6d:8e:c0:98:
a0:33:7e:4f:13:42:19:2a:a2:b8:d0:f7:0f:a8:47:
7b:d6:40:64:16:e2:5f:77:4c:85:63:90:25:52:3e:
a5:9d:7a:1f:f4:5d:4b:55:ae:c1:eb:24:92:67:43:
28:6d:a2:70:91:d0:0b:67:98:41:0b:20:b4:58:b2:
77:72:fb:fb:e4:af:40:a7:d9:38:86:a7:be:03:0d:
5e:2e:36:04:c0:9a:32:a0:14:26:32:29:73:9d:1a:
e8:b0:0e:e9:33:86:39:6c:3e:2d:ba:74:75:2b:d9:
28:de:0e:81:c5:1f:6f:b5:45:e7:c0:df:32:de:b1:
54:ee:15:cb:3b:0d:b6:9b:23:84:dc:e8:c2:cd:dd:
ce:46:68:a6:80:ed:54:23:97:35:3b:9e:71:7f:11:
3f:87:4d:0f:c8:0b:ff:c4:d3:01:00:22:62:9a:1d:
1a:c0:6c:14:64:a5:51:5d:75:63:95:95:02:6d:b0:
7d:09:47:e1:35:a1:f7:a9:b3:05:0d:ab:2c:fd:dd:
5a:73:7d:98:9f:5e:87:94:63:ec:56:0a:ac:e1:08:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:31:68:C0:44:45:96:D1:E1:A3:9E:DB:56:92:00:EE:B3:1A:E8:D3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.178.0/24
185.135.157.0/24
191.96.100.0/24
Signature Algorithm: sha256WithRSAEncryption
94:94:73:5a:e1:b7:67:f0:ca:45:b6:25:65:8d:00:6f:4c:7f:
a1:e1:77:86:b7:aa:6a:17:3e:17:bc:df:89:de:d5:73:ff:7f:
f5:40:3d:14:f1:ee:d2:3c:20:c7:4b:82:d7:9c:ad:53:d3:a5:
d7:a3:78:7f:b7:cd:e3:53:2a:71:4d:45:b7:d4:ad:f6:e3:e6:
8e:f6:3f:47:ac:db:b0:95:df:91:61:12:b4:9d:b1:bf:23:cb:
a9:95:36:33:fb:59:5b:7b:07:a3:69:ea:7c:0c:2b:1d:98:c7:
1b:d4:1d:49:97:16:ed:f1:d9:f6:f0:04:03:b5:34:c2:1c:bb:
9a:3c:d1:be:ef:01:8a:68:25:d7:ce:7c:20:cd:15:df:cd:85:
0d:2b:2f:0b:6a:59:48:b9:e9:93:6d:a2:4a:87:ec:5d:48:7e:
aa:a0:7f:f1:b5:6b:c5:99:91:5e:ef:d7:45:47:15:c8:6d:6f:
9f:0f:40:1c:93:a7:48:21:0a:84:3e:75:0a:69:5d:b4:bd:57:
bb:3d:96:a7:c7:c3:4a:8c:9f:ad:34:c1:56:04:13:74:ae:33:
ab:58:98:cd:b8:21:b2:b0:7c:92:f6:6a:6b:78:a8:6c:a7:f5:
18:05:79:72:a1:57:aa:45:56:f0:ee:a5:c5:a5:59:7a:eb:15:
fc:c7:3a:52
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUN5nXAZcPvTYZHBWL3G5qDQYu1rYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA3MjEwODA2NTlaFw0yNzA3MjAwODExNTlaMDMxMTAvBgNV
BAMTKDJGMzE2OEMwNDQ0NTk2RDFFMUEzOUVEQjU2OTIwMEVFQjMxQUU4RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiz8epIhMdbXYHJZw8/SuVPnJ2
Vk/8Uc5deyHNEuHqgi13QZo3cfs4bY7AmKAzfk8TQhkqorjQ9w+oR3vWQGQW4l93
TIVjkCVSPqWdeh/0XUtVrsHrJJJnQyhtonCR0AtnmEELILRYsndy+/vkr0Cn2TiG
p74DDV4uNgTAmjKgFCYyKXOdGuiwDukzhjlsPi26dHUr2SjeDoHFH2+1RefA3zLe
sVTuFcs7DbabI4Tc6MLN3c5GaKaA7VQjlzU7nnF/ET+HTQ/IC//E0wEAImKaHRrA
bBRkpVFddWOVlQJtsH0JR+E1ofepswUNqyz93VpzfZifXoeUY+xWCqzhCBZpAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQULzFowERFltHho57bVpIA7rMa6NMwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjExNDg0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAtdey
AwQAuYedAwQAv2BkMA0GCSqGSIb3DQEBCwUAA4IBAQCUlHNa4bdn8MpFtiVljQBv
TH+h4XeGt6pqFz4XvN+J3tVz/3/1QD0U8e7SPCDHS4LXnK1T06XXo3h/t83jUypx
TUW31K324+aO9j9HrNuwld+RYRK0nbG/I8uplTYz+1lbewejaep8DCsdmMcb1B1J
lxbt8dn28AQDtTTCHLuaPNG+7wGKaCXXznwgzRXfzYUNKy8LallIuemTbaJKh+xd
SH6qoH/xtWvFmZFe79dFRxXIbW+fD0Ack6dIIQqEPnUKaV20vVe7PZanx8NKjJ+t
NMFWBBN0rjOrWJjNuCGysHyS9mpreKhsp/UYBXlyoVeqRVbw7qXFpVl66xX8xzpS
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:11:55 2026 by rpki-client