Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211635.roa
File: AS211635.roa (raw, json)
Hash identifier: x47r1x5eFTyhE7QGAYJ8CtLpRhEsOYnxIsmMSVcDd24=
Subject key identifier: 0B:A2:81:90:1C:49:03:B2:C9:33:44:F5:5E:03:88:26:2A:B1:8A:62
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 7B48F82BFF449CF8BECFB62F9995AE81E44D1F0B
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211635.roa
Signing time: Wed 04 Nov 2026 20:32:47 +0000
ROA not before: Wed 04 Nov 2026 20:27:47 +0000
ROA not after: Wed 03 Nov 2027 20:32:47 +0000
asID: 211635
IP address blocks: 2a0e:8f02:2120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:48:f8:2b:ff:44:9c:f8:be:cf:b6:2f:99:95:ae:81:e4:4d:1f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:47 2026 GMT
Not After : Nov 3 20:32:47 2027 GMT
Subject: CN=0BA281901C4903B2C93344F55E0388262AB18A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:c4:fc:9a:a0:b2:e9:7f:10:07:7c:8e:70:
80:5b:eb:8a:c1:c6:16:84:63:c2:f9:67:4e:56:df:
59:c6:c4:01:9e:e3:f3:3a:b6:ba:82:66:83:92:95:
71:f1:d4:5a:90:a2:a2:0f:1b:de:4d:df:c6:1d:8b:
ae:4e:c9:0f:09:d9:27:93:1e:d1:3b:6c:28:b7:54:
26:da:ed:5c:21:f6:02:74:28:ba:b7:27:f0:62:b0:
5c:bc:8b:1e:15:ef:40:b3:0c:35:b8:0e:56:4a:0b:
9f:32:a8:a2:d1:75:e2:bc:13:e4:9a:4b:21:ee:06:
f9:9e:34:12:26:f9:8a:1a:34:d8:1e:22:71:54:2b:
aa:24:5e:47:c4:bb:87:41:11:1e:b9:4a:45:2b:d9:
42:bd:0f:15:9d:53:ca:58:cb:e8:c1:1c:6e:70:d3:
bf:aa:27:51:45:a8:30:c1:51:27:91:ca:e6:19:f2:
c3:65:12:de:e8:27:c6:a9:26:2c:7a:60:3b:aa:60:
8f:50:2d:6a:c0:4b:a2:21:d3:0f:2a:b4:26:6f:d2:
a5:ac:52:ce:05:ea:3b:0f:6f:f2:81:79:be:fa:c0:
7d:22:8d:1d:af:3e:bc:f7:f9:fe:7c:e6:61:52:b3:
28:bd:24:d4:f8:9f:9c:7a:3d:89:c3:0c:2a:a0:db:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A2:81:90:1C:49:03:B2:C9:33:44:F5:5E:03:88:26:2A:B1:8A:62
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2120::/44
Signature Algorithm: sha256WithRSAEncryption
77:fb:86:c1:c1:db:54:97:7d:5c:5e:61:6f:b0:0d:f1:53:bd:
d1:36:cb:0c:e3:6f:ab:2f:aa:21:39:0b:06:e6:ba:26:e5:ae:
1d:1e:cd:a3:52:cf:6c:7b:cb:7b:49:c1:2d:ea:08:fe:7a:d2:
36:e9:e3:08:48:40:68:c2:2d:6a:13:d3:db:d0:24:eb:2b:21:
bc:7b:7b:a8:49:4e:24:e2:c5:56:5c:4d:3e:02:5d:e5:b3:4e:
98:81:d9:c4:13:6c:9c:05:49:46:c4:80:82:5f:75:96:15:fb:
17:63:cc:37:fe:ee:58:5f:5e:fa:ed:42:de:dc:ae:22:7e:90:
39:96:be:53:32:ee:b6:02:3c:a3:85:5c:3a:94:14:8a:74:bf:
cb:b2:dd:74:f3:0e:bd:ef:80:99:44:9d:df:7f:c4:3e:ad:d0:
8b:e1:24:db:d0:95:4d:10:2a:9f:4d:f7:c7:7c:e9:e0:89:f0:
b3:44:0b:90:70:a7:fc:ac:35:70:91:04:78:bd:80:3c:30:f0:
99:42:3a:51:85:84:2d:e9:9b:2b:93:23:d3:dd:b4:e8:5b:b7:
22:ad:e4:8c:a6:bb:c6:1e:b1:17:5e:7b:40:b5:95:01:4b:20:
77:9c:ee:a8:15:31:b7:40:e9:b1:c0:67:05:c4:cd:3c:f2:5e:
9d:47:94:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:08 2026 by rpki-client