Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211358.roa
File: AS211358.roa (raw, json)
Hash identifier: RZmIS0CHvLwAJXvhGiFLmvGHjes2TBwVnZsLlSWP/h0=
Subject key identifier: BB:83:FD:C2:6F:50:55:8A:E6:8B:E2:49:9D:DF:00:EB:D8:0C:E3:FF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 66F5AEB865FC3533D4D7FD1E539B086DE4F21AFD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211358.roa
Signing time: Sat 27 Jun 2026 11:48:43 +0000
ROA not before: Sat 27 Jun 2026 11:43:43 +0000
ROA not after: Sat 26 Jun 2027 11:48:43 +0000
asID: 211358
IP address blocks: 2a13:9500:49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f5:ae:b8:65:fc:35:33:d4:d7:fd:1e:53:9b:08:6d:e4:f2:1a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 27 11:43:43 2026 GMT
Not After : Jun 26 11:48:43 2027 GMT
Subject: CN=BB83FDC26F50558AE68BE2499DDF00EBD80CE3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:4d:fd:8a:8d:60:21:ce:68:c7:46:14:f0:
6c:12:dc:52:11:0a:22:25:46:62:92:81:73:56:8e:
a5:14:50:2c:e6:58:3e:50:61:23:a6:70:87:84:2d:
08:0a:3e:44:15:2e:d5:47:c0:91:5b:b7:be:af:c4:
5b:25:6b:b9:9f:ca:df:20:b6:18:f9:c8:b5:eb:fc:
25:3f:dd:a2:c0:b9:8e:8f:53:32:b6:47:a2:d4:94:
80:a8:3e:90:71:51:67:8f:04:fb:24:4a:94:e9:7e:
fb:ab:d1:6a:80:a4:9b:4c:9e:5e:ee:89:c6:3c:8a:
47:02:a3:42:0a:5d:93:49:0f:b3:4f:e5:1e:a3:6e:
04:90:2f:db:23:be:1a:ae:7d:d6:91:43:c5:c8:e3:
8e:28:63:ad:12:32:5d:dd:63:62:ef:0e:0c:ec:8f:
8f:c1:df:bb:d9:4c:de:cf:55:e2:46:69:21:9d:42:
cd:13:42:1b:08:2b:a8:d4:b9:e6:91:16:3d:d9:42:
73:3b:b8:92:67:55:02:eb:93:91:51:ad:51:8a:50:
b5:7b:c5:de:61:65:a6:0c:07:da:3a:ff:64:da:df:
a8:ab:51:f8:58:20:93:2d:57:8c:48:87:97:0f:61:
ea:c2:b1:5f:59:00:09:8d:81:b4:23:d0:e0:15:d8:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:83:FD:C2:6F:50:55:8A:E6:8B:E2:49:9D:DF:00:EB:D8:0C:E3:FF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211358.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:49::/48
Signature Algorithm: sha256WithRSAEncryption
74:55:4f:98:78:66:11:2a:91:16:ee:39:7e:09:4a:32:58:80:
3d:25:33:67:22:98:65:e9:4b:89:a8:d3:38:5f:48:2b:54:66:
d0:e2:20:c4:c0:f1:2c:9d:8c:73:07:cc:19:80:b7:c9:b3:d0:
a8:89:1d:22:43:dd:61:70:4f:b5:6c:e6:b1:f4:52:26:83:4a:
8c:23:b8:db:cb:3b:06:f4:35:ef:5e:a5:c9:08:5a:fe:54:45:
f7:02:41:68:29:b7:45:83:5a:f4:f0:11:dd:8e:da:5d:8d:73:
a3:d6:ce:95:39:a1:47:e3:67:78:7d:76:9c:54:54:d9:39:2e:
c1:07:93:44:3d:cd:07:f4:b6:bf:93:4b:8d:af:f7:01:43:82:
12:1b:76:d3:2b:92:92:a4:2b:86:20:c0:ca:51:d0:57:8b:29:
7b:82:10:27:39:3a:1b:6e:55:98:05:ec:61:55:35:18:61:d3:
5a:bd:51:89:d0:96:d8:51:b7:cc:4c:1c:1e:38:76:f7:14:42:
04:0d:2b:bf:6c:2e:ad:67:bd:2f:ff:5f:ff:62:a3:cd:bf:d6:
77:1f:d5:80:4f:03:06:3e:54:51:46:f7:ba:b1:89:39:ba:ba:
b4:7e:f7:c0:ba:45:9e:f1:0f:4f:05:a8:e7:96:14:c7:e7:a3:
1d:25:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:55 2026 by rpki-client