Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211722.roa
File: AS211722.roa (raw, json)
Hash identifier: fsPQMnrl4+r+xIywG/zao9IUSxDiFlCjJaDBQiFe5FI=
Subject key identifier: D7:A3:5E:DC:2D:51:06:82:31:4F:2A:E5:FA:B8:B0:CE:57:F9:3C:02
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 25F7EFEE535787F95B24EA9136D803254B78D9CE
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211722.roa
Signing time: Wed 04 Nov 2026 20:32:51 +0000
ROA not before: Wed 04 Nov 2026 20:27:51 +0000
ROA not after: Wed 03 Nov 2027 20:32:51 +0000
asID: 211722
IP address blocks: 2a0e:8f02:2130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f7:ef:ee:53:57:87:f9:5b:24:ea:91:36:d8:03:25:4b:78:d9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:51 2026 GMT
Not After : Nov 3 20:32:51 2027 GMT
Subject: CN=D7A35EDC2D510682314F2AE5FAB8B0CE57F93C02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:10:37:8c:c6:85:43:09:44:69:28:d2:51:
3f:40:f3:d2:31:ab:45:82:4c:04:ee:35:48:2c:c4:
af:e8:75:c4:a6:6d:0c:94:52:24:92:b4:49:0f:fa:
64:59:9c:38:80:78:cb:0e:30:b2:43:4a:30:40:1b:
0c:63:a2:b9:47:fb:8b:57:08:e3:ad:d9:1d:2d:22:
fd:68:b0:f7:a1:fd:2b:6f:64:9f:1d:ff:30:ef:31:
45:d0:9d:98:68:8e:23:61:64:99:b0:a3:1b:8e:05:
25:49:9c:3a:7e:a0:7c:e7:af:54:42:53:f3:1a:db:
55:0e:b4:2c:cc:2f:12:43:99:06:22:fa:18:6d:94:
07:e3:cd:06:8e:ca:a0:76:cf:37:a3:d2:63:7c:8e:
eb:fe:86:15:7f:10:09:96:86:2a:8d:27:3e:e2:66:
8e:58:89:a8:29:1f:72:57:2c:14:99:84:a4:ce:5e:
ef:f8:f8:f9:af:7b:49:8c:27:69:ed:89:a0:f7:0d:
2c:e6:c1:8a:ba:a0:51:c3:78:bd:5f:e1:9f:16:66:
9c:30:5a:e0:b2:2a:04:f5:ac:b9:30:6f:6c:f7:56:
9d:b5:0e:d9:d7:d3:14:93:1b:30:a0:65:c0:b8:bf:
20:a2:df:83:e8:b3:13:58:49:f2:61:ca:f2:00:d1:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A3:5E:DC:2D:51:06:82:31:4F:2A:E5:FA:B8:B0:CE:57:F9:3C:02
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211722.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2130::/44
Signature Algorithm: sha256WithRSAEncryption
5e:8a:72:b5:54:80:79:1d:5d:38:e2:ef:5f:b2:35:3a:5a:ab:
0a:d1:e8:0e:12:00:2d:b8:b4:ee:1c:6f:15:0c:93:b7:23:e2:
8b:23:7c:ac:0d:97:4b:0c:d9:d1:f1:2e:58:0f:68:26:9f:48:
e8:82:10:e9:2e:ec:95:35:e7:d4:59:70:4e:83:6d:8a:9c:b0:
61:38:dc:98:15:e2:d1:44:b8:33:c7:8b:2e:a9:d6:88:7c:c5:
b9:0f:a4:67:78:55:a3:b4:b2:a2:88:e5:53:dd:09:0b:77:8c:
52:dc:d8:83:3b:1e:1f:94:6f:a1:a9:81:f9:54:41:d3:11:5a:
36:31:f1:7d:89:5b:ef:ae:fe:76:95:23:df:08:c6:4c:33:05:
2a:ef:7b:39:8b:e6:90:f2:c2:1d:9c:61:5a:5b:c8:c2:b2:d5:
8c:14:1c:01:d0:ae:31:2d:86:bf:6f:43:38:9a:49:48:5b:b8:
04:37:a6:16:3e:99:ba:51:25:1f:fb:10:d8:6d:50:ab:7c:1c:
6b:f7:99:a8:60:15:cf:73:0d:99:9b:46:c3:80:1a:01:5f:82:
f6:62:64:10:f5:4f:bf:a1:c8:c3:22:d8:d2:6d:eb:5d:d2:78:
7b:2d:b1:05:f1:a8:a0:7d:bd:ad:73:5e:79:76:cb:a6:ba:a9:
ee:0d:77:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:09 2026 by rpki-client