Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211479.roa
File: AS211479.roa (raw, json)
Hash identifier: BAxn/YTZpBGVmKbus1iB9N8R+IVcPdlSaaB1r0uBtIQ=
Subject key identifier: 71:28:57:2D:EF:F3:8F:81:BC:79:63:CD:44:44:0C:C3:BB:38:A9:BB
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 4C6F68B2E1B45663CCD3C3970B636F53AD18C137
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211479.roa
Signing time: Wed 04 Nov 2026 20:32:46 +0000
ROA not before: Wed 04 Nov 2026 20:27:46 +0000
ROA not after: Wed 03 Nov 2027 20:32:46 +0000
asID: 211479
IP address blocks: 2a0e:8f02:f022::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6f:68:b2:e1:b4:56:63:cc:d3:c3:97:0b:63:6f:53:ad:18:c1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:46 2026 GMT
Not After : Nov 3 20:32:46 2027 GMT
Subject: CN=7128572DEFF38F81BC7963CD44440CC3BB38A9BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:dd:c9:78:71:05:6e:09:80:8d:81:70:2f:
b2:2f:01:a1:5c:e0:ef:3d:0b:52:37:4f:51:8f:63:
35:cd:58:72:c8:9f:32:15:1e:f5:b3:da:ec:3f:4c:
00:74:2f:ce:32:49:89:41:8c:be:24:20:95:85:a2:
a9:0d:c0:55:a2:b2:9c:a1:0b:27:03:cd:45:57:30:
e3:fa:cb:82:ec:7a:ba:74:31:00:6d:4c:52:f6:0b:
6f:93:56:69:50:ad:90:a5:6b:1a:1b:60:5a:96:5a:
42:23:ac:a4:47:1e:3d:5a:ef:a9:b7:cf:fc:ec:26:
39:f7:2b:f5:8c:79:24:9d:06:00:bc:50:89:8f:ca:
05:11:d0:2e:c4:35:6b:53:e4:e1:1e:fc:d6:0f:21:
7c:cf:5a:8d:99:18:c9:5e:a5:90:37:51:fd:ed:ff:
2c:3d:d7:ea:7a:4f:e8:06:18:7a:6e:b1:8e:39:82:
4c:49:e2:ae:4f:22:8b:af:49:5d:7f:4d:82:07:f3:
1a:6c:81:a7:78:a8:ee:3c:eb:ef:b7:2a:46:c0:49:
f5:66:ca:77:3d:29:51:27:83:e9:f2:42:4d:12:de:
24:86:dc:ff:26:bc:6b:77:af:82:df:91:6d:a6:21:
e4:d1:e5:f2:00:ca:35:9d:4c:95:a0:af:70:b2:c8:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:28:57:2D:EF:F3:8F:81:BC:79:63:CD:44:44:0C:C3:BB:38:A9:BB
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211479.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f022::/48
Signature Algorithm: sha256WithRSAEncryption
76:57:10:8c:88:9c:14:02:01:d3:fe:17:39:07:f0:0f:b6:8f:
e7:90:30:de:8f:a5:16:ef:05:f3:68:e2:2b:4e:0b:71:d1:da:
af:90:5d:61:74:62:4a:28:a6:c0:44:a9:a1:69:fa:e6:88:13:
96:7c:5f:e7:6f:6e:5c:ea:bc:bd:a2:94:fd:8c:e6:d4:3e:3a:
e1:e2:ab:d1:dd:fb:1e:b9:57:36:d3:0a:2c:41:ae:0e:c9:ad:
bc:ec:fb:9f:23:f7:04:51:51:a5:25:87:08:29:77:09:de:c2:
bd:b5:fa:b6:65:60:28:ec:d8:e3:c2:ef:12:42:6e:fc:8a:82:
0f:ed:3e:65:25:e9:bc:39:cc:82:38:c6:a0:e9:34:10:db:a3:
86:e6:f6:5c:05:e7:7a:e5:09:ee:2d:c3:6f:c3:4b:78:bb:0e:
82:00:88:1f:ea:bf:20:31:a5:0a:cc:34:01:36:4c:93:d9:4f:
2c:b0:e9:5b:c2:85:69:5e:d3:17:b0:51:0a:a2:6a:b3:80:66:
9b:07:21:87:99:ac:de:db:b9:2e:99:50:84:33:67:55:89:63:
c8:65:68:97:6c:fe:86:6e:b0:c5:e7:6b:22:83:47:81:c9:09:
72:d2:cc:05:bd:0b:0c:48:38:62:19:97:d0:42:51:e5:b8:04:
d1:4f:d2:d1
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUTG9osuG0VmPM08OXC2NvU60YwTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NDZaFw0yNzExMDMyMDMyNDZaMDMxMTAvBgNV
BAMTKDcxMjg1NzJERUZGMzhGODFCQzc5NjNDRDQ0NDQwQ0MzQkIzOEE5QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnd3JeHEFbgmAjYFwL7IvAaFc
4O89C1I3T1GPYzXNWHLInzIVHvWz2uw/TAB0L84ySYlBjL4kIJWFoqkNwFWispyh
CycDzUVXMOP6y4Lserp0MQBtTFL2C2+TVmlQrZClaxobYFqWWkIjrKRHHj1a76m3
z/zsJjn3K/WMeSSdBgC8UImPygUR0C7ENWtT5OEe/NYPIXzPWo2ZGMlepZA3Uf3t
/yw91+p6T+gGGHpusY45gkxJ4q5PIouvSV1/TYIH8xpsgad4qO486++3KkbASfVm
ync9KVEng+nyQk0S3iSG3P8mvGt3r4LfkW2mIeTR5fIAyjWdTJWgr3CyyPaZAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUcShXLe/zj4G8eWPNREQMw7s4qbswHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIxMTQ3OS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoO
jwLwIjANBgkqhkiG9w0BAQsFAAOCAQEAdlcQjIicFAIB0/4XOQfwD7aP55Aw3o+l
Fu8F82jiK04LcdHar5BdYXRiSiimwESpoWn65ogTlnxf529uXOq8vaKU/Yzm1D46
4eKr0d37HrlXNtMKLEGuDsmtvOz7nyP3BFFRpSWHCCl3Cd7CvbX6tmVgKOzY48Lv
EkJu/IqCD+0+ZSXpvDnMgjjGoOk0ENujhub2XAXneuUJ7i3Db8NLeLsOggCIH+q/
IDGlCsw0ATZMk9lPLLDpW8KFaV7TF7BRCqJqs4Bmmwchh5ms3tu5LplQhDNnVYlj
yGVol2z+hm6wxedrIoNHgckJctLMBb0LDEg4YhmX0EJR5bgE0U/S0Q==
-----END CERTIFICATE-----
Generated at Sun Nov 8 06:51:12 2026 by rpki-client