Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211407.roa
File: AS211407.roa (raw, json)
Hash identifier: 2+gVtxL2VmusNXWyIZ5/4JmNhPpUC2Yvk9BaWuRjtVg=
Subject key identifier: BF:5C:72:63:E8:C0:E4:40:DE:EB:CB:BD:D1:3E:41:D7:D6:CD:D4:9B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 09BBF606CA2018BE6C05A690E66E032F10DD4339
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211407.roa
Signing time: Thu 26 Feb 2026 03:46:28 +0000
ROA not before: Thu 26 Feb 2026 03:41:28 +0000
ROA not after: Thu 25 Feb 2027 03:46:28 +0000
asID: 211407
IP address blocks: 191.101.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:bb:f6:06:ca:20:18:be:6c:05:a6:90:e6:6e:03:2f:10:dd:43:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 26 03:41:28 2026 GMT
Not After : Feb 25 03:46:28 2027 GMT
Subject: CN=BF5C7263E8C0E440DEEBCBBDD13E41D7D6CDD49B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:18:59:bc:ff:f3:5d:d3:08:1a:c3:35:45:
c5:94:d6:4f:1e:22:86:53:00:e5:dc:c2:eb:3d:fa:
51:c4:a8:bf:ab:ef:54:3c:78:26:7f:ae:74:da:82:
a0:d6:6a:0d:e6:90:24:cb:dc:5b:e7:7d:67:84:27:
89:93:7d:df:08:d5:85:a7:79:fb:0a:61:db:0a:9e:
65:e4:ee:57:75:ae:96:24:44:d7:41:de:ac:a5:9d:
8b:6a:a9:3b:a3:8a:7a:fe:ed:06:62:da:6d:6f:f0:
01:70:3a:ea:67:9f:6d:65:b4:dd:df:8a:d0:28:2b:
00:b1:66:b2:b1:63:bd:e4:5c:ba:26:0b:32:fa:c8:
78:ed:17:22:f2:c9:96:ca:69:9e:2a:cd:34:9c:3b:
09:9b:0b:f8:4f:b1:95:55:fe:e2:41:f5:48:fd:65:
dd:d7:b6:15:93:1c:24:58:9b:d1:2b:a2:79:fb:c6:
13:c6:5e:d6:11:8f:c8:25:13:49:ba:d8:ee:92:cb:
08:84:f2:25:88:96:25:d4:2a:ee:99:1b:5c:2f:60:
47:40:d4:6b:70:3b:0f:84:a0:40:43:14:b2:cd:c2:
e5:ec:45:81:32:7d:d3:3f:b7:74:45:ed:e1:e8:79:
ae:92:fa:b9:3f:c4:a1:a8:f8:72:48:e1:27:dd:f3:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:72:63:E8:C0:E4:40:DE:EB:CB:BD:D1:3E:41:D7:D6:CD:D4:9B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.190.0/24
Signature Algorithm: sha256WithRSAEncryption
37:de:9e:8c:a0:3e:07:18:d5:3d:f2:5d:e6:33:a2:52:24:a0:
0f:19:4a:17:b7:c6:ba:0c:c0:8e:a2:2e:c6:c1:41:d5:31:18:
f1:86:2e:0f:d5:e5:14:7c:68:73:b7:bc:17:8a:0b:cd:d2:08:
dc:af:56:3c:3a:d9:97:b6:60:ee:90:94:a5:f2:36:3e:4c:f7:
a8:91:a7:3f:5d:f2:e7:7b:bd:3b:43:68:8f:5b:b3:86:10:a7:
c0:ad:08:b0:15:49:81:59:2f:8a:56:91:17:49:19:ff:db:0c:
07:0b:4d:67:41:93:d5:08:9c:f2:62:90:e8:89:4c:89:fe:26:
ea:f2:97:37:bc:c8:69:b2:57:7f:93:5f:35:63:8e:6e:30:cb:
80:11:4d:f0:9f:aa:fd:a7:5b:29:40:62:86:35:b8:cd:d0:a2:
20:b3:4b:5e:de:82:cf:0e:e1:84:49:aa:0d:81:d3:45:1e:87:
dd:cf:29:46:f7:10:54:b4:73:58:0d:e4:1e:69:48:34:85:0a:
78:9e:4f:74:25:0d:6c:a9:5d:25:90:06:e6:ea:4b:d8:46:eb:
e0:cc:00:a2:20:cf:dd:7f:4b:92:b7:04:d3:c0:6c:3a:1e:de:
7f:d1:93:c6:d7:c4:c3:bd:a1:48:e5:fb:2f:41:d7:32:05:74:
90:af:6d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:34:21 2026 by rpki-client