Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa
File: AS211484.roa (raw, json)
Hash identifier: HN4hYCjBlErg/2pZ+GoyTZjKdFefmOGSslxaedhlEAo=
Subject key identifier: 19:E3:B1:F0:8B:CA:F2:DE:41:01:CA:A6:47:FC:12:A5:90:BF:47:D9
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7FFF5BEB322CE819EE98D68FE9F3F98617A1932F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa
Signing time: Fri 05 Sep 2025 21:34:44 +0000
ROA not before: Fri 05 Sep 2025 21:29:44 +0000
ROA not after: Fri 04 Sep 2026 21:34:44 +0000
asID: 211484
IP address blocks: 95.134.135.0/24 maxlen: 24
95.134.201.0/24 maxlen: 24
95.134.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ff:5b:eb:32:2c:e8:19:ee:98:d6:8f:e9:f3:f9:86:17:a1:93:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 5 21:29:44 2025 GMT
Not After : Sep 4 21:34:44 2026 GMT
Subject: CN=19E3B1F08BCAF2DE4101CAA647FC12A590BF47D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:e6:01:45:d9:27:ab:64:1b:80:5f:9f:96:
09:65:e3:c9:e2:3d:5c:61:9b:e2:39:10:d2:d1:a8:
b0:4f:1f:24:69:a2:e8:0e:1a:7c:f9:15:1e:b2:22:
1e:6f:d4:22:00:df:a4:59:60:54:71:fc:ab:1a:86:
a8:63:02:03:6f:c5:98:af:e7:0f:e6:b1:61:26:9d:
c6:8d:f8:63:1d:c5:08:f8:81:71:bb:62:15:52:94:
95:c3:46:3b:bc:e0:9d:84:99:97:b6:aa:e6:d7:cc:
af:a7:d2:d8:3f:41:b9:e2:53:cd:a6:0f:8e:12:47:
27:ac:20:29:b8:9d:3b:a8:5c:34:91:c8:fc:d9:47:
0d:a6:66:b5:78:bc:b0:25:94:6f:b4:f2:5d:fe:4b:
a7:42:8e:9d:90:bc:76:44:24:d2:26:9f:ba:5d:a6:
14:c1:94:e7:8d:c9:16:2c:ca:7e:96:1e:69:cd:9d:
4f:94:a5:3b:d0:57:cd:3a:04:80:79:ee:fa:35:e9:
fe:94:f3:3b:79:c2:c1:e0:b5:4e:18:c8:00:fc:1e:
99:fe:08:20:8e:0d:9b:bd:00:22:99:fe:fd:bd:86:
6b:a5:34:ef:ce:19:00:a2:81:01:72:00:99:bf:72:
9b:2e:c4:e2:0e:25:06:b9:95:8a:17:6b:20:8e:51:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E3:B1:F0:8B:CA:F2:DE:41:01:CA:A6:47:FC:12:A5:90:BF:47:D9
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.135.0/24
95.134.201.0/24
95.134.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5e:28:5b:15:f8:68:39:e9:3a:e3:21:f8:9b:b7:b1:7b:60:
bb:8c:d8:1f:a1:d3:be:85:dd:96:c1:d9:70:e7:01:f3:54:91:
89:23:d9:8a:eb:fc:f4:32:57:e6:db:17:7c:a4:73:e0:d2:c7:
ec:1f:94:49:73:41:9d:1b:4c:68:3f:fe:11:49:a5:ca:de:de:
0e:bc:ee:22:de:38:4d:d7:ca:fa:73:6e:16:f0:ec:84:8c:63:
26:85:1b:74:b0:4b:98:17:64:1a:44:25:2a:dc:50:6e:cc:c3:
fe:95:41:0c:49:14:a5:52:1c:62:9f:ce:61:70:3b:47:8f:21:
0f:55:5b:ac:f1:5d:34:e5:73:c3:b4:34:70:44:31:89:da:c8:
3e:cd:71:7a:40:13:d8:12:41:7a:33:45:f9:28:d9:6b:4c:aa:
4c:5c:67:78:5a:58:be:9e:8d:5c:39:ed:95:78:76:cd:4b:09:
09:d6:5e:0d:33:50:6a:5d:60:d1:1c:e9:ef:41:24:22:58:6c:
a4:92:94:cc:9a:c4:9f:4b:4f:40:24:fe:74:ac:02:4b:07:3b:
a5:43:24:9e:a1:6b:e1:e0:87:85:b7:a9:aa:d0:95:51:78:39:
b9:dd:c7:ab:51:ab:c6:de:18:9a:37:ca:75:58:c8:05:89:1f:
8f:e8:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:33:31 2025 by rpki-client