Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211057.roa
File: AS211057.roa (raw, json)
Hash identifier: 06ZSZqfTvT06JEiABmkXdu9P5w7SCIm9Wm36t3m6Bpw=
Subject key identifier: C0:E7:45:8E:06:2D:BA:60:82:E6:F0:1A:65:FC:8F:FD:DA:2E:53:E4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5F186A86EE6F03FA05B074FB2C3BC4FF1B5FC411
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211057.roa
Signing time: Sun 18 Oct 2026 12:41:54 +0000
ROA not before: Sun 18 Oct 2026 12:36:54 +0000
ROA not after: Sun 17 Oct 2027 12:41:54 +0000
asID: 211057
IP address blocks: 82.38.112.0/24 maxlen: 24
82.41.159.0/24 maxlen: 24
82.41.211.0/24 maxlen: 24
82.41.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:18:6a:86:ee:6f:03:fa:05:b0:74:fb:2c:3b:c4:ff:1b:5f:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 18 12:36:54 2026 GMT
Not After : Oct 17 12:41:54 2027 GMT
Subject: CN=C0E7458E062DBA6082E6F01A65FC8FFDDA2E53E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:4e:8f:bb:e8:d3:b0:46:35:7a:9b:60:27:
fc:eb:c8:5c:a6:d1:30:75:a5:27:75:09:41:06:1a:
3d:df:5f:54:ce:75:8d:3c:d7:8a:11:17:2c:25:b8:
16:82:28:e7:b4:ef:08:9d:e4:85:33:16:af:09:48:
fe:a6:83:da:69:2a:fe:af:ee:b9:62:3f:d2:03:63:
6e:f2:66:25:44:ef:40:b5:6e:43:bc:55:76:0d:dd:
5f:56:98:00:90:f4:26:9c:0c:90:41:7a:ae:32:ec:
7d:54:72:eb:43:24:23:e2:cb:36:23:01:06:5f:bf:
ba:32:ef:03:68:82:cd:f7:5c:40:de:42:d6:82:e5:
5d:a5:28:89:36:71:8e:6f:44:6c:46:b8:00:a7:0e:
b1:02:f6:4e:16:1e:75:5a:f8:e1:7d:ad:94:83:4a:
fd:d1:c4:2d:d2:f3:a5:ce:30:ae:f5:0c:35:cf:84:
3b:07:b1:05:74:b3:11:38:e2:1f:57:a7:6f:5e:37:
9c:1a:7d:10:a2:43:8f:0e:4b:10:af:27:8f:75:d2:
ab:aa:8c:d6:3b:b9:87:91:4f:36:3a:90:d0:03:ab:
d2:11:36:89:2a:dc:41:b8:8e:2a:4a:7d:fa:ec:22:
0d:56:61:af:f8:a6:63:02:a3:21:d3:4e:58:ee:ed:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E7:45:8E:06:2D:BA:60:82:E6:F0:1A:65:FC:8F:FD:DA:2E:53:E4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.112.0/24
82.41.159.0/24
82.41.211.0/24
82.41.221.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d9:f6:e2:81:d2:41:24:25:aa:80:6d:a1:30:4e:98:8a:27:
b6:0d:5c:ed:72:83:3a:34:e7:87:d4:4d:19:b0:cd:5c:6e:b9:
4e:80:4b:80:25:86:63:35:a5:28:01:53:5b:36:90:83:96:d5:
e4:b9:4e:4b:94:54:0d:2a:39:a1:8f:c8:e6:6b:79:c2:b6:8c:
2c:34:f6:36:3b:f2:07:e3:4c:67:3b:0e:47:0d:83:9b:f9:ab:
ea:1a:73:31:c6:91:94:61:6d:09:bb:07:f4:c0:77:d7:78:0f:
6d:69:27:99:c8:da:c1:98:41:93:be:1a:12:79:cf:ce:77:a3:
5d:e2:df:01:76:7a:b9:f5:bc:8c:08:a9:04:b9:0f:7f:c7:dd:
52:18:e1:a9:95:67:6a:95:53:b0:c0:6b:04:af:ad:05:8a:bd:
0f:3c:38:f4:61:5c:96:9f:b1:27:82:5c:aa:c6:b9:b7:ca:68:
41:00:62:5b:07:8e:fe:35:d8:ed:cf:9b:2e:b9:a4:a5:eb:cc:
7b:65:95:56:97:41:55:61:e0:16:af:45:16:40:60:34:f2:d4:
45:d1:e7:d1:9d:2a:ea:28:70:c1:01:97:9a:8e:91:d5:ef:d4:
d5:b0:8e:25:2c:eb:26:c1:e3:37:43:14:2a:e6:4a:3b:b9:30:
98:15:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 04:22:30 2026 by rpki-client