Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211870.roa
File: AS211870.roa (raw, json)
Hash identifier: Ux10Ce/p1G8k5hUfysWjj3rZm57rz8gQAN6cF28b2A8=
Subject key identifier: D7:59:0F:A4:70:D7:01:53:5D:16:30:E4:6D:1C:41:75:77:4F:5B:56
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 4F2461B85A41613D582D8D4F57BEEF2F3C88CC9A
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211870.roa
Signing time: Wed 04 Nov 2026 20:32:47 +0000
ROA not before: Wed 04 Nov 2026 20:27:47 +0000
ROA not after: Wed 03 Nov 2027 20:32:47 +0000
asID: 211870
IP address blocks: 2a0e:8f02:2100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:24:61:b8:5a:41:61:3d:58:2d:8d:4f:57:be:ef:2f:3c:88:cc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:47 2026 GMT
Not After : Nov 3 20:32:47 2027 GMT
Subject: CN=D7590FA470D701535D1630E46D1C4175774F5B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:5b:5d:54:16:dc:e8:22:4f:f4:b3:ac:db:
6b:5d:df:ba:4a:42:de:4f:6e:8b:dc:b4:7a:0c:02:
bd:8f:2d:f5:07:ec:ab:47:64:9d:80:6c:c2:cd:b9:
0a:35:cd:f1:d3:d1:53:0b:79:47:cc:a3:bd:f7:bb:
8d:cc:be:c1:1e:44:28:de:28:a3:b7:cb:32:b5:c6:
b3:f8:4a:41:e7:5b:74:b3:8f:bc:0a:bf:55:01:17:
9f:3e:bf:40:29:df:b5:8d:7a:1e:41:07:74:ae:3a:
76:3e:66:e2:77:d5:74:ef:55:d0:f7:65:58:4a:cb:
b5:24:7e:21:40:ec:26:66:ed:c1:70:37:d3:79:68:
aa:00:32:6f:10:6b:24:6b:6a:f1:cc:ea:19:e2:63:
8c:f7:21:6c:4f:3b:8f:47:85:36:65:9b:1e:42:85:
d2:f3:89:8c:e7:23:a1:e8:66:65:c5:6d:b8:99:8d:
93:6f:8e:d5:4a:88:6e:35:78:5f:a9:ea:f5:76:f4:
fc:00:a4:6c:24:82:95:09:26:30:ec:fd:5a:48:f1:
c1:ef:97:7a:d4:fc:f4:51:c9:a3:2b:00:3b:0f:d0:
31:bb:eb:2e:5e:76:61:6d:81:b8:57:b8:cf:56:84:
ef:35:ab:04:47:f1:f5:2a:e3:9d:c0:70:3f:c8:e8:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:59:0F:A4:70:D7:01:53:5D:16:30:E4:6D:1C:41:75:77:4F:5B:56
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS211870.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2100::/44
Signature Algorithm: sha256WithRSAEncryption
3b:f8:c2:c5:81:15:02:ce:04:b5:0d:9e:bd:64:b0:24:d0:c0:
ad:b9:ac:0f:a0:23:7e:4f:89:b4:80:d1:da:2d:10:1d:ce:eb:
b1:0b:c8:a6:9d:5f:43:6f:db:df:29:1e:15:41:ae:6b:d1:4b:
00:91:91:c7:5a:e8:83:f6:11:45:ef:d4:c2:fe:49:49:a6:c8:
fc:0f:9c:f9:0e:20:00:63:1d:db:ce:ab:70:37:83:bf:fc:82:
08:73:b6:8f:f7:75:64:8b:dc:e1:32:95:8f:bb:ba:21:1b:83:
57:4f:44:67:cc:f3:fc:cd:29:23:79:00:9e:68:ed:e7:4c:24:
0d:7e:ae:97:4c:ca:31:c5:d4:c0:24:2b:81:e7:e6:1e:35:f5:
28:c8:bf:75:60:b3:b0:e3:ed:90:c4:e0:e5:91:d8:b5:64:ac:
d6:12:69:45:f3:8a:c6:04:2a:23:72:98:45:b2:52:47:19:b6:
f3:7b:b2:99:cf:cc:18:64:07:a9:17:d2:38:83:28:9a:70:07:
d4:0d:82:ed:05:1f:fc:69:e9:bf:34:74:3e:59:2f:8a:bf:a5:
51:aa:c0:c4:ec:44:ec:11:04:ef:b1:4b:5f:69:f2:66:50:22:
06:b1:f0:5b:68:3a:e0:6c:d8:f8:5d:44:05:e3:04:34:8a:d9:
ae:c5:74:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:35:50 2026 by rpki-client