Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211869.roa
File: AS211869.roa (raw, json)
Hash identifier: tcRwGTXsNgRuxsBNfY8Mq3McNohoUg2Mn6eoI2JUrIU=
Subject key identifier: 5C:67:AB:69:DD:56:6B:5D:0A:59:04:AD:C9:52:6B:E6:74:18:A5:75
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3422FF312EA921CACFDB610AA6860F7640E06493
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211869.roa
Signing time: Wed 04 Nov 2026 20:32:53 +0000
ROA not before: Wed 04 Nov 2026 20:27:53 +0000
ROA not after: Wed 03 Nov 2027 20:32:53 +0000
asID: 211869
IP address blocks: 2a0e:8f02:2150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 11:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:22:ff:31:2e:a9:21:ca:cf:db:61:0a:a6:86:0f:76:40:e0:64:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:53 2026 GMT
Not After : Nov 3 20:32:53 2027 GMT
Subject: CN=5C67AB69DD566B5D0A5904ADC9526BE67418A575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:2b:7e:8b:17:c1:ad:bd:0c:92:14:30:e2:
58:33:a5:06:cb:3a:7b:79:71:8e:cb:da:19:48:b3:
06:d8:c7:5b:10:9a:ad:a0:49:bc:52:d1:49:84:9f:
38:d2:ea:2f:91:d5:52:8c:a1:6e:09:a5:10:c7:1e:
99:53:51:a6:2f:26:1f:58:4f:de:85:cf:ff:55:0a:
ff:de:d0:3a:e7:9f:84:c7:5f:5c:db:0c:5c:6e:8f:
d1:54:15:8c:34:e7:de:1d:59:f7:fc:48:33:ce:87:
3b:2a:17:e0:ed:0a:dc:66:33:12:34:e6:aa:21:61:
22:cf:fa:64:08:c2:97:04:7a:61:ca:55:bf:30:2f:
13:ae:13:ef:8a:d3:07:a9:80:f6:b7:4d:2e:e1:13:
ec:93:d9:3e:9b:48:37:48:9a:7c:d9:cf:21:0e:fe:
3c:f0:98:67:b7:c7:4d:6a:3b:de:f7:6c:bc:71:29:
3c:32:5b:6e:5a:db:2c:01:31:1d:ce:9b:77:84:4f:
db:24:36:83:18:be:83:27:a2:ca:d1:6a:ec:b2:ec:
a2:d0:e9:d7:c2:6e:5a:c0:d1:b2:8e:47:4e:e8:4a:
52:cd:2b:b5:95:5b:e2:3e:70:98:ba:f6:22:e2:d8:
c3:d0:1d:54:ee:3e:fd:ab:6c:d3:ff:fd:7c:62:d1:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:67:AB:69:DD:56:6B:5D:0A:59:04:AD:C9:52:6B:E6:74:18:A5:75
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211869.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2150::/44
Signature Algorithm: sha256WithRSAEncryption
ac:03:99:8f:17:6b:54:3e:67:fb:14:90:29:e3:20:a6:25:b4:
77:99:f1:81:cb:c0:48:8b:21:c8:b1:91:e2:98:05:b6:4c:a3:
af:7d:d0:bd:ff:94:e1:ba:53:66:80:c9:25:fe:c2:d1:34:2a:
2a:b1:1a:f0:2a:6e:e3:fc:68:45:d5:28:7b:09:c1:e0:c9:aa:
7b:a3:4b:cd:20:bd:71:c0:c9:e9:6b:23:bb:2f:43:88:42:b4:
32:8f:1a:ef:45:61:aa:78:f5:51:1f:65:df:81:3a:70:cb:9c:
d0:b3:73:92:2b:95:25:d5:2a:df:35:fd:2e:47:7d:97:3f:cb:
e6:fa:e4:0c:42:bd:32:09:9d:5c:a5:18:a9:af:8e:6c:77:ef:
fb:47:8b:b1:1f:d9:3a:91:b2:42:28:ac:e2:71:00:88:2d:32:
1d:fe:d7:fd:05:1c:8a:3a:8d:8b:b9:45:42:6d:a7:32:84:c6:
b2:76:0c:6e:23:1e:57:0c:f9:cd:b8:f0:18:6d:a8:d2:4a:a8:
6f:a0:7b:f7:30:e5:26:6b:dd:e7:ef:d6:fd:67:68:00:0a:ed:
74:10:0c:58:87:c3:d1:cd:95:d0:e8:fa:c6:7e:22:92:86:5f:
b3:0d:00:ec:83:4d:f1:9c:fa:17:d2:07:aa:ac:97:10:10:ba:
7c:51:8c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:56:40 2026 by rpki-client