Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211936.roa
File: AS211936.roa (raw, json)
Hash identifier: RFIIDaJq7SX6xndrLGEcQi9jf/0wBCmE5aTfBbHWW8Q=
Subject key identifier: 2A:A5:CC:CC:C6:BD:7A:80:73:26:21:F0:EF:C8:10:67:8A:40:F3:6E
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5ED51C3AD29B0198A56492C9C9D3DB36F23B1C69
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211936.roa
Signing time: Wed 13 Aug 2025 00:54:13 +0000
ROA not before: Wed 13 Aug 2025 00:49:13 +0000
ROA not after: Wed 12 Aug 2026 00:54:13 +0000
asID: 211936
IP address blocks: 141.11.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 19:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d5:1c:3a:d2:9b:01:98:a5:64:92:c9:c9:d3:db:36:f2:3b:1c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 13 00:49:13 2025 GMT
Not After : Aug 12 00:54:13 2026 GMT
Subject: CN=2AA5CCCCC6BD7A80732621F0EFC810678A40F36E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:15:bc:09:b0:b3:02:22:7d:cc:7a:89:5a:
e8:71:cd:a6:d9:63:6b:f5:2d:04:5a:08:2f:1c:0d:
ac:93:1a:cd:2e:7e:11:50:65:06:ae:1e:ca:49:97:
d6:48:8f:44:29:58:75:23:db:8f:c8:8f:e1:4f:1f:
7e:c7:e6:9d:5b:4a:b6:46:9d:df:bc:63:72:d9:22:
b4:33:7d:35:32:6f:24:0a:56:12:29:87:80:eb:ee:
a5:42:64:00:25:9c:70:be:00:ef:16:95:39:4b:94:
48:75:f1:76:b5:bf:e7:3d:7f:a2:61:9b:01:e0:8b:
5a:b4:ea:d6:b7:c1:ee:d9:17:20:58:d2:6e:ef:14:
5e:37:2a:ea:a4:15:27:7e:b9:a0:96:36:a7:77:ee:
6e:db:64:b7:6d:1f:20:a6:a0:62:56:4e:4a:c3:87:
c4:9a:9f:5f:d9:a3:25:d0:a1:76:0d:3e:32:9c:12:
2d:ab:8e:43:9a:a3:d7:ec:68:64:47:39:54:05:fa:
d7:83:9e:2d:68:13:88:e5:3e:50:d2:28:a7:ee:28:
c8:0d:6c:0b:2c:27:48:c4:64:94:00:93:f8:66:1a:
c5:5d:f6:b0:d0:ce:c8:60:0e:44:dd:a6:29:8b:ab:
65:51:92:6b:cb:0c:6f:e5:06:49:56:d9:d5:1c:32:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A5:CC:CC:C6:BD:7A:80:73:26:21:F0:EF:C8:10:67:8A:40:F3:6E
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.222.0/23
Signature Algorithm: sha256WithRSAEncryption
83:9c:b1:76:f3:1e:14:49:19:29:5d:11:dd:c7:44:c8:eb:a5:
06:b6:e6:2b:a9:f5:90:70:b7:36:4e:98:c5:27:1b:d6:13:4d:
b6:31:3c:f9:a7:dc:f9:27:17:e6:cb:90:24:a0:da:84:3c:bf:
3a:6f:85:91:5d:83:6a:3c:52:1e:83:04:24:7d:4e:94:d9:94:
b5:2f:71:ef:d7:d3:dd:0b:72:65:3f:54:85:81:c5:3a:c0:1e:
97:69:a3:58:38:d2:d3:c7:f3:c2:ed:83:86:e1:dd:e5:4c:79:
95:54:46:d9:47:9c:2f:f9:cc:25:42:d7:23:9a:f4:39:ae:b9:
5c:1f:73:3b:75:5e:8f:c6:58:4f:b6:78:68:f8:8f:e7:c1:cd:
0a:e4:46:e6:37:db:9b:97:b3:29:fa:3c:e2:61:b5:90:e4:25:
57:25:d8:57:37:19:de:90:26:ed:cb:08:db:93:52:90:c0:3f:
51:b4:19:5c:12:b1:e7:bb:0b:f6:2e:8e:6b:2a:f2:af:3c:10:
b8:fc:d9:cc:ac:1a:6c:d6:8f:47:6c:d4:5d:9f:15:88:81:0e:
b3:8f:e4:38:f9:c6:10:e0:b9:95:47:f7:3a:06:37:bc:c6:ef:
5e:cf:48:2b:ba:29:9f:e5:26:35:91:b5:7f:b7:95:bc:54:75:
08:1f:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:54 2025 by rpki-client