Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211480.roa
File: AS211480.roa (raw, json)
Hash identifier: RxJGG6tMoO8OQCfQdmGNXoU5jxDzlQP6lplR/9zelaI=
Subject key identifier: AD:64:3D:DE:49:04:72:DF:59:DB:02:B4:04:C7:EC:4D:C3:96:11:9C
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3E67EF87EAB4C24394FAD01F384856DE185F29EE
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211480.roa
Signing time: Wed 04 Nov 2026 20:32:53 +0000
ROA not before: Wed 04 Nov 2026 20:27:53 +0000
ROA not after: Wed 03 Nov 2027 20:32:53 +0000
asID: 211480
IP address blocks: 2a0e:8f02:f026::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:67:ef:87:ea:b4:c2:43:94:fa:d0:1f:38:48:56:de:18:5f:29:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:53 2026 GMT
Not After : Nov 3 20:32:53 2027 GMT
Subject: CN=AD643DDE490472DF59DB02B404C7EC4DC396119C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:f2:d1:c7:cd:16:85:12:65:01:ae:75:53:
62:33:c7:a4:f2:c0:d3:77:a2:e3:77:f9:08:fd:4c:
77:35:b2:19:e5:46:43:d4:02:2a:a5:c4:b6:24:db:
03:7d:3d:cf:07:6b:1b:90:a6:b2:9e:0e:b4:0f:8e:
7e:23:e5:5e:d8:1e:57:2e:2b:dc:73:6f:28:ef:79:
fc:35:fb:91:c9:38:a4:f1:07:0d:0e:0d:c3:ca:fe:
8a:aa:a0:71:fa:9e:b1:25:ca:a6:3e:84:ae:eb:03:
69:7d:08:8a:52:65:e9:32:d9:74:21:2f:f8:d5:1c:
0d:19:c3:c7:06:01:47:59:3c:d4:27:ed:1f:ab:46:
17:16:b4:27:12:13:80:06:36:4e:4b:f4:88:d7:66:
44:d3:ff:09:96:a3:f7:db:51:98:9b:6d:6a:8f:d5:
6f:71:6e:ea:96:6b:3a:31:6d:05:bb:8a:87:8b:83:
55:3e:2b:2d:4c:d2:d0:4d:3a:af:a8:75:23:e9:74:
8d:45:57:e4:fe:95:1b:1d:e2:d0:5a:ba:b9:a8:80:
a7:56:74:3d:d5:77:77:6b:e0:0e:fc:b3:b5:90:30:
67:d1:62:32:5c:49:3f:34:78:fa:bc:5c:b1:87:44:
37:d7:6b:31:da:24:fe:6e:12:21:d5:a3:08:79:26:
ce:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:64:3D:DE:49:04:72:DF:59:DB:02:B4:04:C7:EC:4D:C3:96:11:9C
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211480.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f026::/48
Signature Algorithm: sha256WithRSAEncryption
78:ef:a6:c9:9e:86:50:52:a3:30:c5:cf:3c:dd:75:f7:b1:84:
cb:52:bc:1b:fa:0c:a8:a9:4d:ad:f7:69:dd:57:45:0d:59:c8:
90:b5:4e:0c:2f:77:da:10:19:e7:58:e8:d4:57:99:31:f8:b6:
7e:9e:43:78:61:8f:f8:03:7c:0b:94:df:8d:81:0d:64:7d:af:
c6:26:8f:21:a0:44:16:ba:14:aa:71:bc:45:c4:37:8a:a7:39:
d9:a7:df:87:21:b2:30:a7:97:86:fc:19:ea:e0:a6:87:4f:29:
52:d9:b4:95:fe:f5:a4:c0:e2:a3:e3:ab:74:c4:de:29:1e:89:
5f:37:09:8f:df:da:66:19:f1:ae:52:01:ab:ee:90:9a:8b:e5:
c3:48:58:92:f3:ce:10:9c:24:de:3e:24:02:6b:4b:81:a3:1c:
26:5b:4e:25:21:5f:34:95:93:36:1d:39:18:70:2b:75:46:2b:
1c:af:bf:f3:94:bb:71:97:a2:af:5b:93:ff:54:5d:0c:0f:09:
b0:e5:bd:b6:56:69:dd:bb:15:3f:87:3d:27:00:86:7e:52:aa:
1d:55:cb:3e:73:30:5d:f4:eb:ae:2c:e2:9e:4b:69:36:db:7b:
47:39:fb:de:07:a8:ea:11:73:53:31:24:54:f2:72:18:cf:96:
e2:58:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:00:08 2026 by rpki-client