Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211153.roa
File: AS211153.roa (raw, json)
Hash identifier: HPj+PBMhI1BElyrZZ4p9HBnxhRY+dJ41SfklitLE290=
Subject key identifier: 0B:AD:2D:6E:60:83:7A:4F:AB:80:D6:EE:F6:4F:11:94:B4:50:B4:E4
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3E46C82DC49A1DD630F7CC1B11010BBAEDB3721B
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211153.roa
Signing time: Wed 04 Nov 2026 20:32:48 +0000
ROA not before: Wed 04 Nov 2026 20:27:48 +0000
ROA not after: Wed 03 Nov 2027 20:32:48 +0000
asID: 211153
IP address blocks: 2a0e:8f02:2190::/44 maxlen: 48
2a0e:8f02:f034::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:46:c8:2d:c4:9a:1d:d6:30:f7:cc:1b:11:01:0b:ba:ed:b3:72:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:48 2026 GMT
Not After : Nov 3 20:32:48 2027 GMT
Subject: CN=0BAD2D6E60837A4FAB80D6EEF64F1194B450B4E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:16:16:e6:85:d8:ea:7b:d3:a2:d8:6d:67:
c2:a4:0d:56:a0:d4:c6:9d:6b:c1:ff:88:ef:5c:79:
2e:92:4f:05:c2:2f:11:be:95:b3:65:ae:8b:56:3d:
12:56:bb:c9:8d:f4:0b:bc:2a:10:67:9c:90:dd:32:
1a:75:c2:99:94:ec:4e:46:53:13:85:76:98:cd:2d:
28:7a:31:cc:1f:46:8c:71:62:aa:07:fa:49:bd:bd:
b8:44:0d:e9:69:9a:b1:88:2c:68:61:8b:7e:93:d3:
4c:9e:7b:2b:9d:87:8f:08:bd:70:e0:0d:8c:47:62:
44:8c:b7:d3:fa:04:89:74:58:41:07:68:d8:11:58:
e1:72:d7:4d:ed:1e:dc:ce:9e:e9:b9:0b:19:b1:99:
df:8b:ce:20:f3:61:b2:f5:32:d4:6c:df:f8:c1:73:
c0:29:36:a1:93:07:8f:ec:bc:9b:f4:67:e4:b8:c7:
79:01:e9:d0:ad:dd:7c:db:44:5a:25:f4:80:a2:19:
12:65:c6:ea:2f:c5:9b:75:0b:26:5f:0d:b2:49:0e:
88:57:fa:85:17:20:b7:23:71:eb:e0:6e:b4:d8:b7:
f6:76:23:c4:85:54:3e:72:20:5d:81:a6:cd:46:a1:
32:ef:3e:c6:92:21:d2:1f:69:5e:92:1a:aa:3c:39:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:2D:6E:60:83:7A:4F:AB:80:D6:EE:F6:4F:11:94:B4:50:B4:E4
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211153.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2190::/44
2a0e:8f02:f034::/48
Signature Algorithm: sha256WithRSAEncryption
20:ec:8b:e4:2e:0f:b0:68:1c:05:6d:77:24:28:6e:0a:55:7d:
b0:aa:c7:f7:27:39:5c:00:1a:a1:d4:c3:98:ba:88:76:41:32:
9c:35:9c:5f:62:36:dc:52:52:99:a1:f2:60:dc:c6:34:49:5c:
81:fc:84:08:52:9c:b0:5c:be:38:19:e3:58:6b:9b:ce:27:62:
36:12:d1:81:2e:f8:57:61:80:6a:09:35:5f:d5:ae:78:88:93:
5f:9b:42:c9:4a:13:4f:64:3f:11:3c:ad:b2:99:62:cf:0d:80:
dc:4f:4b:db:d0:fc:0c:30:19:bf:70:9f:d3:d4:2a:dc:c1:ed:
57:37:66:af:26:f9:a1:86:d1:6c:53:8b:5a:64:f6:f7:c8:7f:
6f:da:7b:9d:a5:61:50:e2:d7:fc:32:87:5d:9e:d5:bd:7a:a5:
3d:ab:52:88:22:d9:8c:1d:e4:c9:4a:03:79:08:ca:a8:70:dd:
b7:38:4d:e7:94:48:ec:39:d8:6a:09:7d:58:0f:fe:cf:a2:4c:
5f:4f:63:4f:b7:f4:c8:7d:d6:00:37:25:4a:46:29:2d:64:31:
91:8d:ea:0c:f9:23:f1:d3:e5:57:09:48:f7:2c:46:0f:32:58:
21:2f:83:f4:9a:08:ef:5e:44:a0:32:5b:e5:33:31:ab:ac:8c:
3b:e8:a6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:52:39 2026 by rpki-client