Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211440.roa
File: AS211440.roa (raw, json)
Hash identifier: 0yLnBPDUeRhuUEMEbpWzbGzkgc2no3OSi5zveVi84pg=
Subject key identifier: F7:F5:F2:B5:60:BD:2D:4B:EE:D0:F9:0F:16:B5:E4:5F:A7:EC:10:5F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0B0EC0344862461D2A9D2FBDDC828E6474007348
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211440.roa
Signing time: Wed 16 Sep 2026 18:42:10 +0000
ROA not before: Wed 16 Sep 2026 18:37:10 +0000
ROA not after: Wed 15 Sep 2027 18:42:10 +0000
asID: 211440
IP address blocks: 147.79.6.0/24 maxlen: 24
147.79.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:0e:c0:34:48:62:46:1d:2a:9d:2f:bd:dc:82:8e:64:74:00:73:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 16 18:37:10 2026 GMT
Not After : Sep 15 18:42:10 2027 GMT
Subject: CN=F7F5F2B560BD2D4BEED0F90F16B5E45FA7EC105F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:d8:f6:73:3c:82:7a:f7:a4:79:06:bb:82:
47:af:ae:d8:30:fb:8e:7c:43:5c:17:b1:c6:db:d6:
20:60:55:e4:c7:85:17:89:d7:be:f5:75:e6:89:1b:
62:c7:64:47:f2:b3:d9:5c:b6:46:bf:f5:a4:2a:ab:
c2:d9:c6:52:1d:3c:6d:49:76:95:8d:2a:7c:72:c6:
02:d5:ba:9f:c5:8a:6e:81:80:d2:f3:5d:fa:5a:15:
9c:65:13:f9:79:9d:38:e5:77:73:61:55:5f:b2:e3:
85:0a:21:ea:f0:32:a5:24:d0:77:e9:20:95:2e:81:
e2:e7:eb:61:a9:c3:17:5e:4b:28:27:49:19:b4:72:
69:b7:37:1c:ab:ac:37:74:da:28:c1:23:23:3d:ad:
e4:b5:d9:4f:f7:a2:9e:36:16:2c:f0:81:c6:00:3d:
39:4a:fb:08:79:6d:8c:3c:72:c8:f2:60:b5:67:de:
1f:6e:fa:2b:cb:98:bd:29:89:fd:a2:dc:ee:d7:e1:
6e:9b:68:68:6a:47:7a:2a:71:66:2a:71:71:92:f2:
33:1d:7f:86:20:5d:90:75:40:d6:93:15:0a:99:12:
c9:1e:b0:e3:1f:41:f4:1d:c0:7a:26:0c:95:e2:ab:
58:2c:88:15:6c:96:b8:9b:ea:5b:90:04:9d:a5:83:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F5:F2:B5:60:BD:2D:4B:EE:D0:F9:0F:16:B5:E4:5F:A7:EC:10:5F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.6.0/24
147.79.9.0/24
Signature Algorithm: sha256WithRSAEncryption
99:bf:e0:9c:c5:51:e0:54:98:a6:2c:12:7a:27:cf:bc:1e:4d:
b2:72:84:06:e8:8c:ef:7d:56:21:ad:46:8e:5e:f5:89:d6:ac:
ab:f5:44:5e:76:88:5b:f8:66:b8:2b:50:ce:a2:6a:a0:cd:a1:
48:92:b8:8f:57:28:38:8d:8d:0d:59:ce:c2:f8:a0:60:9c:1f:
92:9f:33:da:e9:5c:fd:a4:25:ac:fa:3a:38:3d:38:d3:85:db:
c5:4b:a1:32:66:9f:04:90:5f:92:89:78:f1:97:45:ec:57:f3:
12:07:02:e4:83:fc:0e:8f:fa:2e:59:f7:a1:ab:76:49:d2:50:
51:5f:05:17:63:d7:65:a0:15:d1:59:6b:9d:cd:9c:e2:a1:f2:
9d:67:40:c2:9d:9f:d5:88:d2:23:58:0f:c8:dc:37:10:29:e1:
72:36:3c:db:18:d4:23:e8:58:c0:63:16:73:17:1c:cd:35:f4:
3c:d3:b5:ca:db:4b:8e:97:df:2c:9d:95:e1:b8:6b:03:c3:16:
ec:90:85:59:19:d7:14:cb:0a:ad:ce:da:70:51:f8:2f:67:f7:
f0:77:d4:90:c1:c9:03:1d:2e:1a:2a:45:d4:d5:66:d7:a1:6e:
68:28:91:c8:42:93:28:44:29:25:a3:75:5e:ae:ef:54:a0:bf:
0b:c1:c5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:59:03 2026 by rpki-client