Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211575.roa
File: AS211575.roa (raw, json)
Hash identifier: +O37y+PfkPSrn1kPM7aeTX+F8SPa8U6bLYfSvP5y24s=
Subject key identifier: D4:C2:53:AF:F3:08:E6:6D:D0:BE:A2:C2:7E:07:FF:0F:47:5B:5B:98
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 622CC64CA40BB3C3A005DA410622CB3D43AF69FD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211575.roa
Signing time: Wed 11 Mar 2026 13:08:29 +0000
ROA not before: Wed 11 Mar 2026 13:03:29 +0000
ROA not after: Wed 10 Mar 2027 13:08:29 +0000
asID: 211575
IP address blocks: 2a0f:85c1:bfe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2c:c6:4c:a4:0b:b3:c3:a0:05:da:41:06:22:cb:3d:43:af:69:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 11 13:03:29 2026 GMT
Not After : Mar 10 13:08:29 2027 GMT
Subject: CN=D4C253AFF308E66DD0BEA2C27E07FF0F475B5B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:dd:0b:6b:93:02:e6:44:a9:3e:15:c5:8b:
7d:4d:dc:5e:30:ec:1b:dc:d8:ca:35:7f:2d:99:f1:
00:5a:92:b5:cd:14:55:2f:b9:2a:03:db:c1:c1:73:
22:5f:31:10:f5:fd:d0:32:97:7a:b1:69:9b:27:7c:
0b:0c:27:87:8b:e0:50:cc:42:63:c3:2b:81:c5:11:
44:90:c5:6e:aa:6b:d6:64:47:87:85:1c:6c:78:2a:
c0:75:dc:2d:25:8c:57:c6:ef:67:ce:24:83:e2:ba:
e5:d2:87:b9:96:d4:30:ce:52:56:60:89:c4:d2:0b:
ed:cd:b9:e6:d2:66:ce:65:dc:22:10:ac:86:5b:ca:
1b:0c:6e:eb:0d:ce:2c:5f:4b:98:fd:68:c5:13:86:
61:9c:33:60:9c:68:e2:02:5b:11:77:1b:8c:ca:1a:
81:e9:26:46:94:df:ff:97:d1:10:e8:f9:a3:94:9b:
21:13:79:18:0f:e2:70:f1:89:c1:7d:a2:3d:5f:be:
9c:39:d3:60:da:8c:2d:01:63:7e:d8:bb:fe:5e:c9:
95:98:c2:a6:60:dc:f8:46:ce:55:b0:30:3f:39:53:
97:83:af:4b:42:7b:b4:47:c8:44:d2:3a:b2:1f:bc:
60:d3:86:69:7b:01:e0:67:f4:63:77:ef:8f:e5:07:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C2:53:AF:F3:08:E6:6D:D0:BE:A2:C2:7E:07:FF:0F:47:5B:5B:98
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bfe::/48
Signature Algorithm: sha256WithRSAEncryption
63:67:82:ea:ee:e3:04:ad:2b:b4:c2:3c:12:17:fe:24:b7:26:
f9:7a:cf:11:80:97:90:ca:e5:e2:15:89:5e:20:c3:0d:f0:45:
35:bd:32:15:0b:7a:8e:c0:7e:b6:39:88:05:61:dd:90:69:fe:
85:22:eb:f5:32:58:86:9c:a5:33:1d:09:74:60:a1:c1:56:03:
80:da:5f:3b:0c:1a:87:a5:bf:cf:05:b7:89:82:17:7c:45:3c:
a0:ac:4f:3e:b5:3c:ee:24:db:b1:56:3e:af:80:f7:4f:61:0d:
b3:f1:d5:93:1e:08:34:5b:dc:4a:a8:c9:58:d9:73:8a:c0:02:
e2:50:86:c9:56:f5:d0:00:ab:d3:4f:d2:ef:a7:4f:67:89:d8:
49:6c:2a:f4:f1:64:c7:89:39:5a:09:8c:1d:72:a1:d4:79:7a:
db:c4:19:b2:62:8b:63:ef:ad:d6:8e:fe:bc:81:a2:1b:c6:34:
b6:6b:9c:be:6d:5c:c2:7a:58:0e:be:17:d0:75:4e:3f:30:a4:
96:b1:19:85:c2:d6:51:c9:c9:0f:d7:8d:d2:8a:ea:dc:c5:b5:
4a:ac:48:13:55:da:21:80:a7:e1:28:69:61:2f:17:c6:fc:4e:
fd:e2:24:ca:e1:22:11:dc:af:52:37:c0:fb:05:eb:de:7c:4d:
1e:88:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:42:19 2026 by rpki-client