Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS211851.roa
File: AS211851.roa (raw, json)
Hash identifier: fOJkOG296x8Bp2dkHUgTVi+Y6K+1//rl6y0YnLers6w=
Subject key identifier: A0:4A:00:B3:34:92:DA:96:3D:81:05:E5:E5:DE:72:35:E5:E3:78:B3
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 1F6ABBDAD60880CF212EB9954AAF0AA5A27C20B3
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS211851.roa
Signing time: Fri 17 Jul 2026 15:59:09 +0000
ROA not before: Fri 17 Jul 2026 15:54:09 +0000
ROA not after: Fri 16 Jul 2027 15:59:09 +0000
asID: 211851
IP address blocks: 37.221.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:6a:bb:da:d6:08:80:cf:21:2e:b9:95:4a:af:0a:a5:a2:7c:20:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 17 15:54:09 2026 GMT
Not After : Jul 16 15:59:09 2027 GMT
Subject: CN=A04A00B33492DA963D8105E5E5DE7235E5E378B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:45:24:59:11:38:8b:27:96:a3:16:ec:3f:
b6:e4:4a:c0:49:cc:9d:9b:b5:0f:70:60:ce:91:72:
48:d7:59:2a:30:a4:69:65:da:2e:39:22:1a:cf:a6:
56:0c:00:0d:0c:c6:78:0c:c0:e6:e8:a5:e9:b7:5e:
6d:c0:a0:d6:61:b5:77:f4:47:bf:ab:92:1e:21:2c:
21:9d:0f:d5:48:7c:d0:e3:5a:b5:1b:01:18:cf:2b:
a9:32:65:96:1c:a4:33:e3:22:a7:6f:6f:c6:b9:c8:
19:d4:a4:c8:4b:d9:4c:29:fa:86:78:73:b9:e5:3a:
5c:c9:b5:c6:0c:29:8c:78:04:e1:3b:fd:7a:00:74:
f8:2e:4b:df:7f:2f:6f:3e:b5:8a:20:17:9b:bc:5d:
d9:1b:f3:b1:b0:f2:db:b8:67:a1:e2:61:78:6a:bf:
85:9d:11:b1:15:2c:70:79:6a:db:8d:2e:16:40:12:
d6:45:a9:0e:fa:0a:dd:3e:b8:d1:5f:3d:b0:90:0a:
e0:16:27:84:0e:01:2c:da:23:7c:ab:ec:be:7a:57:
92:88:88:9c:a9:85:35:19:2c:1a:84:7c:2e:f2:7a:
4b:67:54:1a:78:fd:97:a4:99:5a:8a:7c:54:1c:6d:
c6:fc:25:05:c8:80:fd:76:7b:07:61:23:38:cf:1a:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4A:00:B3:34:92:DA:96:3D:81:05:E5:E5:DE:72:35:E5:E3:78:B3
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS211851.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4a:5d:3e:46:6b:83:e8:5f:b1:70:f2:6e:dc:8d:52:3f:df:
fe:e3:53:a6:84:e9:1b:fc:ee:78:ff:43:11:95:dc:69:cb:18:
af:02:ef:49:c4:46:1d:80:d1:36:7a:f8:71:62:64:b9:6d:55:
95:6e:17:b1:78:bf:91:77:37:f6:7f:87:3c:25:b3:85:b8:74:
61:49:17:e9:3f:5b:28:d3:e3:d1:9b:e8:2e:43:18:bc:17:4f:
d0:4b:67:47:5d:b6:f7:20:61:1f:32:d2:97:c1:3e:c3:4c:b7:
2a:68:c9:b6:e5:5d:d5:c8:a5:b7:e2:9d:1b:4f:23:fd:09:fa:
23:cc:e1:b5:fd:36:f4:f7:92:08:b0:37:46:6e:23:82:4d:95:
68:a2:c4:de:93:6f:b5:b5:ae:40:3e:62:05:99:f5:69:e8:7e:
b0:25:0e:9e:b4:52:28:ff:a8:7a:ab:9f:e9:ca:d6:c0:81:89:
f8:80:75:3d:79:26:47:eb:75:40:47:d4:7d:4f:83:de:7d:27:
2c:a6:fc:05:0c:c7:4e:b1:bf:2a:d4:77:98:7f:29:43:4e:d0:
f8:52:8b:53:87:4b:11:f0:1c:de:0f:d2:0d:20:6b:fb:6f:f9:
6d:b3:25:e2:11:c6:8e:93:c9:43:07:f4:50:6e:e4:74:92:ff:
ad:a0:0d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:01:20 2026 by rpki-client