Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211241.roa
File: AS211241.roa (raw, json)
Hash identifier: iJrcNRYDFXyAjinvhXc4KA4oSKncoBg6fwtgrSRiw44=
Subject key identifier: 2C:57:4E:0B:20:37:B7:7B:E1:A1:16:86:BD:99:42:5D:2D:79:7C:BC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: D4B6F2433FE039D63CBE6E718413EFE42220CA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211241.roa
Signing time: Wed 11 Mar 2026 13:08:29 +0000
ROA not before: Wed 11 Mar 2026 13:03:29 +0000
ROA not after: Wed 10 Mar 2027 13:08:29 +0000
asID: 211241
IP address blocks: 2a0f:85c1:bf9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d4:b6:f2:43:3f:e0:39:d6:3c:be:6e:71:84:13:ef:e4:22:20:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 11 13:03:29 2026 GMT
Not After : Mar 10 13:08:29 2027 GMT
Subject: CN=2C574E0B2037B77BE1A11686BD99425D2D797CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:d4:7a:6b:8d:59:11:7d:bf:2b:6a:ff:2c:
f5:e4:f5:f8:f7:c4:7b:3f:9a:9c:51:21:56:93:f3:
0b:55:5e:bb:cc:66:80:fc:60:96:e1:ad:51:47:13:
31:5c:cd:d1:29:a0:d3:ee:00:81:25:8e:15:5d:90:
1a:69:9b:79:11:95:a6:9b:c0:86:ab:2c:f4:31:14:
0b:73:1e:f7:48:68:70:a8:3b:dd:96:bf:06:dd:f4:
50:ff:ba:56:a5:a1:0f:a4:3c:e9:1c:db:fd:d8:ce:
bd:bc:a7:68:72:10:6a:60:fd:6a:6e:74:7a:02:d4:
6e:f5:92:c7:36:d6:27:4d:22:75:9a:74:e1:15:25:
2b:54:bf:2d:5b:23:23:20:16:29:71:74:4e:82:9d:
10:e8:ea:d6:ca:03:6d:a3:0a:d0:16:e0:51:39:be:
7c:41:7a:26:84:da:b3:1a:57:d2:76:ce:a8:9a:0f:
7b:7f:ce:b9:28:9c:1f:f3:b2:aa:11:7f:c4:c5:1a:
15:8f:21:95:f9:1a:56:a6:af:a7:b7:33:ac:19:6e:
8c:ab:f3:44:5b:de:33:a3:0f:da:c5:44:17:fb:3e:
e3:79:35:b4:d9:2a:b5:4e:d0:38:4e:df:57:c3:dd:
b9:51:25:53:4f:02:b4:48:be:f3:90:e6:a7:4c:c5:
a4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:57:4E:0B:20:37:B7:7B:E1:A1:16:86:BD:99:42:5D:2D:79:7C:BC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211241.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bf9::/48
Signature Algorithm: sha256WithRSAEncryption
44:34:1d:2c:bb:77:93:1d:c9:ad:5e:02:ac:35:c2:8a:99:33:
58:68:18:1d:49:26:d9:ac:76:8b:5a:bf:00:db:37:e3:8d:22:
0d:e4:2e:d7:13:30:3f:7c:5e:b2:90:59:1c:f5:42:8a:fe:da:
fa:90:ee:1c:9d:e2:8e:ff:f0:fd:13:ee:43:c9:66:b2:ef:a5:
7a:ca:0b:1f:30:3e:e3:ae:2c:34:e2:02:01:9e:4a:cf:24:e7:
2d:3c:4c:36:cf:61:20:38:4a:ca:32:ec:8f:5a:aa:9d:ad:6e:
ca:3f:fe:b4:21:56:c4:17:46:7a:60:a2:e0:2d:f5:0f:17:23:
a0:a9:15:50:a8:ca:ff:75:01:0d:6b:64:a2:87:cb:39:5f:47:
ca:c1:ed:f8:e1:ac:48:cc:61:6f:18:7e:2c:01:c5:4f:40:66:
08:79:98:79:e2:4b:2f:60:f7:b1:ed:47:77:9f:55:96:03:6d:
11:e4:09:91:b9:62:23:38:e0:f6:4b:b1:63:29:4a:00:f6:31:
fa:d0:e9:e4:d0:51:65:37:7b:4c:aa:9a:3b:d4:61:9e:42:14:
ca:74:bc:08:d0:51:eb:11:a1:be:fb:1b:7d:83:1b:98:94:3f:
67:c4:ad:26:64:65:99:9f:6b:3d:d0:e5:0c:ee:87:2e:b7:c5:
fc:56:48:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUANS28kM/4DnWPL5ucYQT7+QiIMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjAzMTExMzAzMjlaFw0yNzAzMTAxMzA4MjlaMDMxMTAvBgNV
BAMTKDJDNTc0RTBCMjAzN0I3N0JFMUExMTY4NkJEOTk0MjVEMkQ3OTdDQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8INR6a41ZEX2/K2r/LPXk9fj3
xHs/mpxRIVaT8wtVXrvMZoD8YJbhrVFHEzFczdEpoNPuAIEljhVdkBppm3kRlaab
wIarLPQxFAtzHvdIaHCoO92Wvwbd9FD/ulaloQ+kPOkc2/3Yzr28p2hyEGpg/Wpu
dHoC1G71ksc21idNInWadOEVJStUvy1bIyMgFilxdE6CnRDo6tbKA22jCtAW4FE5
vnxBeiaE2rMaV9J2zqiaD3t/zrkonB/zsqoRf8TFGhWPIZX5Glamr6e3M6wZboyr
80Rb3jOjD9rFRBf7PuN5NbTZKrVO0DhO31fD3blRJVNPArRIvvOQ5qdMxaTlAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQULFdOCyA3t3vhoRaGvZlCXS15fLwwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjExMjQxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQv5MA0GCSqGSIb3DQEBCwUAA4IBAQBENB0su3eTHcmtXgKsNcKKmTNYaBgdSSbZ
rHaLWr8A2zfjjSIN5C7XEzA/fF6ykFkc9UKK/tr6kO4cneKO//D9E+5DyWay76V6
ygsfMD7jriw04gIBnkrPJOctPEw2z2EgOErKMuyPWqqdrW7KP/60IVbEF0Z6YKLg
LfUPFyOgqRVQqMr/dQENa2Sih8s5X0fKwe344axIzGFvGH4sAcVPQGYIeZh54ksv
YPex7Ud3n1WWA20R5AmRuWIjOOD2S7FjKUoA9jH60Onk0FFlN3tMqpo71GGeQhTK
dLwI0FHrEaG++xt9gxuYlD9nxK0mZGWZn2s90OUM7ocut8X8Vkil
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:49 2026 by rpki-client