Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211581.roa
File: AS211581.roa (raw, json)
Hash identifier: /hbtyHpPrgqRwjyRIwi60iG6L69dH6Ca+lSi8QdV71Y=
Subject key identifier: 78:5C:03:B8:BA:4B:9C:31:FE:1B:D8:59:12:77:4F:EB:E4:DD:49:E1
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3B30479672D6D064DD344E02C07C3BC45D824C7C
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211581.roa
Signing time: Wed 04 Nov 2026 20:32:54 +0000
ROA not before: Wed 04 Nov 2026 20:27:54 +0000
ROA not after: Wed 03 Nov 2027 20:32:54 +0000
asID: 211581
IP address blocks: 2a0e:8f02:f020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:30:47:96:72:d6:d0:64:dd:34:4e:02:c0:7c:3b:c4:5d:82:4c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:54 2026 GMT
Not After : Nov 3 20:32:54 2027 GMT
Subject: CN=785C03B8BA4B9C31FE1BD85912774FEBE4DD49E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:59:48:0b:35:c9:79:7f:65:dc:4c:17:3d:
94:10:5a:70:05:a0:3d:28:01:32:6e:75:99:18:7b:
59:a9:19:f0:14:e2:80:42:ec:a0:04:6a:19:bb:e0:
36:52:b2:6c:f0:14:15:d4:d4:81:6d:c8:57:89:50:
7d:5b:46:53:df:ba:ff:41:d2:70:b4:c1:e1:4d:20:
a9:2c:b6:ef:b9:89:b9:cc:ea:69:06:db:aa:5c:9b:
3a:25:04:e5:08:6d:41:72:ca:1d:ec:38:4c:04:43:
d3:a3:69:d5:cd:a9:a6:c8:ed:ef:3d:72:7a:9b:3c:
4e:55:c4:0d:d2:1c:e7:05:d0:93:d1:2a:e5:f0:89:
53:d6:a5:35:cb:ed:32:b3:7f:f0:cd:31:79:a7:f6:
eb:44:03:c9:6c:3a:bc:49:49:0d:76:45:29:11:ba:
f8:fa:c0:70:5b:00:96:f1:c2:49:58:dc:8b:5f:81:
70:f1:78:55:4a:d8:37:cd:ef:9a:6f:29:88:14:32:
88:05:05:7f:c0:df:f9:5d:73:e3:c1:c6:8e:6d:e5:
81:29:1c:e5:e7:b7:75:3b:32:1a:a4:aa:fe:c8:37:
57:a1:e3:b6:9b:7c:34:b2:76:f8:70:15:bb:11:39:
ab:19:a2:f8:0d:60:fa:76:d3:2a:50:d6:bd:a6:31:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5C:03:B8:BA:4B:9C:31:FE:1B:D8:59:12:77:4F:EB:E4:DD:49:E1
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f020::/48
Signature Algorithm: sha256WithRSAEncryption
77:2b:d0:0e:3e:3b:e8:df:9c:af:c3:65:84:ff:23:42:15:ab:
86:97:72:df:3b:5d:41:00:81:79:28:18:ec:48:22:63:96:23:
4b:4d:4b:f8:6e:76:50:70:e8:fb:42:a5:1a:29:cd:c9:2a:fd:
5a:6e:ee:34:3d:35:c8:22:1e:b1:df:40:80:82:bc:e2:7b:aa:
51:ee:92:84:67:b4:e9:99:dd:6f:0f:e7:73:f9:b2:dd:1e:a8:
e9:c5:bc:6c:31:2f:db:60:b7:89:20:1b:74:55:fd:72:7c:ac:
2d:b0:b8:64:a4:9a:a9:e9:1a:37:c9:ca:08:8f:d3:ff:dc:71:
12:2b:c0:62:f0:2e:68:ea:4c:ba:1b:0c:16:88:15:b0:2d:83:
c3:fb:a7:37:41:85:20:81:ce:af:40:24:10:aa:2a:48:0f:7c:
65:1d:1b:66:06:84:b5:ec:d8:bf:be:4e:5f:9d:47:ad:8a:2d:
79:2d:04:32:db:fa:5c:be:4c:ff:83:e8:ee:b7:34:45:c8:62:
1f:6a:ee:d7:3e:bd:0e:0b:bd:30:b5:ec:54:0a:68:4c:4d:d3:
3a:bd:ee:8c:37:ec:54:3b:ca:03:51:d8:d3:ec:c6:eb:67:03:
c2:39:82:bc:b6:64:b2:20:89:04:c7:79:03:40:05:a2:02:76:
45:c7:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:00:10 2026 by rpki-client