Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211439.roa
File: AS211439.roa (raw, json)
Hash identifier: zN358P9etpcdZ7Ct11i+Cre/gJtjCkmRqvxOFT7MZcA=
Subject key identifier: 18:BB:95:A1:31:A5:31:B3:9E:01:91:52:3A:94:1C:55:DA:5C:FF:92
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 03E08B75EB9393994C6AB9A15E0BDC0032EB434B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211439.roa
Signing time: Wed 28 Oct 2026 17:49:39 +0000
ROA not before: Wed 28 Oct 2026 17:44:39 +0000
ROA not after: Wed 27 Oct 2027 17:49:39 +0000
asID: 211439
IP address blocks: 194.113.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e0:8b:75:eb:93:93:99:4c:6a:b9:a1:5e:0b:dc:00:32:eb:43:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 28 17:44:39 2026 GMT
Not After : Oct 27 17:49:39 2027 GMT
Subject: CN=18BB95A131A531B39E0191523A941C55DA5CFF92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:91:89:24:6e:60:5d:01:25:82:13:cc:33:
73:74:8c:0a:e6:9c:5f:a6:9a:ca:6d:29:11:26:4a:
03:cc:77:13:20:29:01:90:2b:3c:c0:1f:d8:55:38:
ca:4b:f2:3c:87:13:d3:6d:9d:9b:98:e3:6f:2b:3a:
84:fb:0a:cd:9d:07:f5:1b:11:ff:93:ce:67:1a:b4:
10:a3:b3:25:c6:44:18:9d:21:60:70:f5:97:d2:05:
be:75:10:45:c2:6b:6f:0c:98:ee:b6:71:82:58:47:
f9:74:b1:b1:d0:3b:7c:4e:3b:72:d2:76:51:a0:f7:
96:8e:86:2a:21:95:ab:e4:f9:46:c4:17:56:8a:94:
4e:53:9a:54:1c:74:8b:42:72:99:14:34:54:cf:62:
a4:8c:a3:9b:3e:ad:5c:5c:ed:c0:d7:82:e4:4a:23:
93:36:14:5e:3d:4c:55:4f:28:d9:dd:0f:ce:84:5f:
c6:91:6e:30:c3:e6:21:fd:df:b2:1d:69:56:1a:06:
d3:1b:13:9c:bc:6c:d2:34:36:26:cc:8a:f2:ce:34:
55:46:a0:98:cb:59:e1:3b:05:6b:03:c4:ba:fa:56:
6f:3d:fc:e5:d6:ef:ce:5f:39:89:ea:2c:b7:66:89:
9d:8f:2f:ca:88:f2:a8:c1:59:4f:5b:f9:6e:b4:b5:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BB:95:A1:31:A5:31:B3:9E:01:91:52:3A:94:1C:55:DA:5C:FF:92
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:68:17:bf:8a:ee:02:33:f5:ef:a9:e3:8b:b9:34:3f:e5:a7:
2d:9c:db:fe:42:29:a2:5c:46:ee:48:7c:4b:37:0b:bd:f8:cf:
b6:79:93:bd:f1:57:fb:f8:2a:c3:f8:0a:1d:4e:f3:8f:bf:d6:
be:32:a2:a8:b1:e6:ab:45:4d:18:9d:f0:93:87:ed:e6:10:d3:
52:e8:bc:83:cd:07:b1:51:0c:78:1c:2b:d2:58:e6:a1:97:b8:
47:88:62:61:10:b3:f2:26:12:0e:e6:eb:fe:79:11:e0:6a:80:
77:52:86:f5:8c:2f:b5:cb:93:9c:2f:2b:60:89:5f:60:a4:09:
25:fa:7f:59:90:21:14:a2:26:28:01:42:11:58:64:20:82:69:
58:7e:c3:0f:a1:98:c8:c5:f7:d8:13:b4:44:db:38:73:f5:d7:
eb:b2:e3:c4:d4:1a:eb:1b:cf:24:a5:6d:bf:5d:69:c5:7a:27:
e4:2d:68:0a:b9:99:40:90:e3:cf:fc:5e:4f:40:67:55:b6:72:
40:de:79:8b:a8:ee:42:00:d2:65:94:7a:11:bd:15:07:93:ce:
4f:14:09:4c:d5:e9:25:17:5f:72:9b:3d:62:b6:67:6c:dd:cc:
15:79:20:a6:5b:c8:21:4d:56:eb:23:56:7d:11:5b:dc:bf:a8:
d8:2a:f5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:15:24 2026 by rpki-client