Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211414.roa
File: AS211414.roa (raw, json)
Hash identifier: wlxJeMCzKIOxgtDwj7ILvMPtfdDq0OG6lspgaXeqMQU=
Subject key identifier: 7C:72:35:B1:EF:CF:1F:27:61:57:83:3B:39:1F:CA:2F:6C:93:27:96
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 1362BADB4FF57EE01CE0B28D18CBFCF7E8C87491
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211414.roa
Signing time: Wed 04 Nov 2026 20:32:55 +0000
ROA not before: Wed 04 Nov 2026 20:27:55 +0000
ROA not after: Wed 03 Nov 2027 20:32:55 +0000
asID: 211414
IP address blocks: 2a0e:8f02:2140::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:62:ba:db:4f:f5:7e:e0:1c:e0:b2:8d:18:cb:fc:f7:e8:c8:74:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:55 2026 GMT
Not After : Nov 3 20:32:55 2027 GMT
Subject: CN=7C7235B1EFCF1F276157833B391FCA2F6C932796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:ef:fa:33:77:87:d9:3f:b3:b4:6f:ae:f2:
8c:7a:1f:c2:30:f3:f7:71:99:7e:2a:33:86:07:1b:
18:a1:ff:be:2e:37:27:1d:f2:1f:5b:e0:70:7f:7d:
74:de:92:b2:22:3a:20:3e:f4:51:01:85:ee:64:05:
71:58:9d:d4:19:98:35:71:59:4e:19:2f:76:da:d6:
d7:a3:cc:25:4b:19:76:7b:12:b1:44:d0:a3:d4:a3:
2f:35:75:e3:d5:53:51:b9:63:8c:8c:24:13:87:07:
20:84:c4:ce:b7:e4:2a:e7:cb:ce:b5:2c:4c:9c:14:
76:86:01:a0:c6:65:85:73:5a:e6:d8:0a:74:47:bc:
ed:fe:89:3a:da:2f:ab:c5:37:d9:4b:66:73:ba:fe:
1b:c3:c1:34:0a:0a:43:31:ee:74:59:f2:ba:64:47:
b4:27:06:ba:df:45:ea:49:aa:a7:a3:b9:07:56:4d:
f4:d4:bc:61:ee:ab:1c:d6:cd:86:5c:99:c4:05:c4:
be:9b:10:53:c5:13:b3:6f:cf:56:6f:39:b4:4d:c9:
1a:96:6f:50:38:ad:92:6d:17:8d:52:a4:bd:c9:62:
a4:05:9e:3c:12:aa:44:5b:4f:aa:d8:db:a7:8d:c7:
1b:4f:d1:24:7b:5d:d1:79:c6:0f:d6:4b:3a:9e:60:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:72:35:B1:EF:CF:1F:27:61:57:83:3B:39:1F:CA:2F:6C:93:27:96
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211414.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2140::/44
Signature Algorithm: sha256WithRSAEncryption
19:3a:27:10:e0:fd:90:96:f2:4a:c2:e5:01:98:52:4d:b6:33:
5d:14:67:14:2b:31:33:0a:5b:60:41:65:2d:e5:0e:2c:2c:55:
03:9e:2e:0c:4e:f2:3e:f8:69:58:c5:7d:a4:4b:1e:fd:d3:5e:
ce:3f:2d:34:cc:23:4f:2a:30:24:9a:62:3d:4c:bb:3e:cf:66:
71:a7:86:0d:e9:a7:08:75:dd:6e:aa:f4:62:82:71:f9:8a:72:
14:29:16:9b:98:d2:79:61:b6:47:5b:db:d6:28:c1:74:7e:18:
ce:74:68:bb:ce:28:d5:d7:f7:8a:47:14:50:5f:11:4f:93:4f:
63:17:e7:75:c3:53:af:87:b8:d3:2c:b8:42:a8:06:63:53:ab:
db:8e:0f:d2:25:40:54:8a:d1:86:81:8b:ac:56:60:06:ec:f2:
1f:84:f7:93:1d:37:87:f7:07:fc:b9:db:13:95:2a:a7:ba:a1:
d9:6d:7f:f9:6f:d9:5e:64:c1:86:32:c3:89:96:57:87:c9:e5:
b1:1c:9f:de:62:30:13:2a:22:9a:e9:c4:79:36:9c:18:f0:3a:
c6:98:ba:a7:8d:44:38:05:46:1b:5d:85:17:0f:ef:64:f3:5f:
37:4c:4f:c4:91:60:8a:bd:39:19:b3:81:03:fb:14:6c:e1:44:
77:9d:64:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:11 2026 by rpki-client