Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211413.roa
File: AS211413.roa (raw, json)
Hash identifier: TVM2ocwAHwvLzzUMWWeTk8zMrVDNPI8UyXnwQz93BIs=
Subject key identifier: 8F:A8:7E:57:DB:9A:58:2B:18:30:D3:0E:8C:72:77:A0:F4:04:CC:51
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 74B5B988654ACCE969DCEABA15022EEE046F06C4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211413.roa
Signing time: Sun 05 Apr 2026 13:33:34 +0000
ROA not before: Sun 05 Apr 2026 13:28:34 +0000
ROA not after: Sun 04 Apr 2027 13:33:34 +0000
asID: 211413
IP address blocks: 181.215.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b5:b9:88:65:4a:cc:e9:69:dc:ea:ba:15:02:2e:ee:04:6f:06:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 5 13:28:34 2026 GMT
Not After : Apr 4 13:33:34 2027 GMT
Subject: CN=8FA87E57DB9A582B1830D30E8C7277A0F404CC51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:f9:26:31:d5:83:cf:ba:36:70:90:98:51:
f6:e8:78:65:8e:83:bd:a6:5b:af:1e:5e:e8:ca:20:
8c:d7:6a:cc:d2:bb:e1:98:65:88:99:05:31:0e:02:
58:b7:65:93:51:ac:1c:ff:39:c1:24:41:ef:f9:b0:
34:26:76:2d:bc:eb:ea:a1:93:c5:df:49:0c:69:87:
e3:12:26:1b:71:bb:41:30:cd:1e:07:46:e5:22:75:
8e:ef:47:9b:9f:30:d5:6f:c6:68:21:94:dc:d3:6a:
8c:a4:8c:04:21:d5:d9:57:89:06:c4:b4:23:9c:8e:
e8:87:68:60:b4:6d:e5:00:1b:bd:cb:5d:dd:a8:39:
70:45:29:f2:2f:52:a2:57:db:50:de:0f:06:e9:14:
79:eb:ab:a0:74:bb:18:8a:55:19:20:29:86:c9:0e:
63:fb:da:9a:e5:21:f2:f8:dc:60:22:9a:93:1a:10:
6d:4b:96:61:f9:7b:b8:de:a9:4d:5f:e7:c6:93:c3:
37:e5:89:02:b9:4e:4d:e2:42:8c:77:7a:1f:54:f8:
7a:2b:67:1a:87:aa:34:f9:dc:92:90:50:ca:84:f1:
db:97:a9:51:a7:62:62:1a:b9:68:92:e8:a1:9c:68:
9c:4a:ae:c8:65:53:45:f7:c5:66:0d:5a:17:07:7b:
b8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A8:7E:57:DB:9A:58:2B:18:30:D3:0E:8C:72:77:A0:F4:04:CC:51
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211413.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:db:3f:23:41:46:93:a9:6d:d0:31:41:10:f8:e4:0e:81:95:
45:8e:01:a6:5c:84:6f:55:22:7d:49:83:2a:24:06:43:a7:f8:
6f:ce:9b:07:d6:60:15:43:95:e8:48:fb:53:22:08:b1:85:d1:
a4:48:38:58:01:66:1a:91:23:d9:3a:8e:c7:b9:40:61:7c:f8:
84:2a:b1:66:6a:87:34:9e:ce:08:e0:2c:34:48:b2:de:c4:23:
01:52:af:43:da:af:f2:df:a7:90:45:65:dd:c8:d0:d9:7c:0b:
3c:9a:2c:bc:0c:cd:c4:f6:e9:55:d5:e4:f6:e3:6f:eb:67:30:
9b:5a:b3:9a:1f:8b:a2:78:e4:b6:d0:0d:36:8c:53:f9:52:e1:
4c:f1:34:0f:16:0a:66:90:af:69:94:91:65:68:74:b6:b5:7e:
29:54:1a:96:f8:d3:4a:08:7f:d3:18:3e:5b:dd:62:56:25:d0:
04:0d:74:1c:fe:f4:3c:7f:a1:22:ad:d1:e6:65:72:ef:2b:5f:
5b:41:aa:c3:e8:81:d2:ff:74:82:34:9b:cf:d4:eb:03:15:cd:
35:85:b3:bb:68:d1:a7:54:f7:06:8e:40:5a:8b:52:8e:b2:33:
bb:41:05:c1:0c:94:a6:94:e6:35:60:6d:50:4f:88:1d:bf:24:
d9:a9:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:32 2026 by rpki-client