Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211192.roa
File: AS211192.roa (raw, json)
Hash identifier: CByA3lwBzOkdUuIFRR1k1xKVGRWFbrvC7CtETY2lcs4=
Subject key identifier: 01:B9:59:AD:26:79:77:83:5E:0F:C7:4A:C7:35:E8:17:A8:3B:AE:04
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4C8E8C9DE4785DE6A73E8FB76A53B281E4267522
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211192.roa
Signing time: Wed 25 Feb 2026 16:46:28 +0000
ROA not before: Wed 25 Feb 2026 16:41:28 +0000
ROA not after: Wed 24 Feb 2027 16:46:28 +0000
asID: 211192
IP address blocks: 82.21.177.0/24 maxlen: 24
82.21.178.0/24 maxlen: 24
82.21.179.0/24 maxlen: 24
82.21.181.0/24 maxlen: 24
82.21.182.0/24 maxlen: 24
82.21.183.0/24 maxlen: 24
82.26.90.0/24 maxlen: 24
82.26.92.0/24 maxlen: 24
82.26.101.0/24 maxlen: 24
82.26.105.0/24 maxlen: 24
82.26.106.0/24 maxlen: 24
82.26.117.0/24 maxlen: 24
82.26.138.0/24 maxlen: 24
82.26.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8e:8c:9d:e4:78:5d:e6:a7:3e:8f:b7:6a:53:b2:81:e4:26:75:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 25 16:41:28 2026 GMT
Not After : Feb 24 16:46:28 2027 GMT
Subject: CN=01B959AD267977835E0FC74AC735E817A83BAE04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:99:d8:c7:7d:8c:8d:bb:8e:6a:94:6d:62:
50:34:44:61:18:50:12:3a:ac:90:3e:cc:35:0b:78:
11:2c:f1:af:d0:44:4e:14:5b:00:a4:d3:83:47:d4:
c8:f5:b9:bc:04:ac:13:a1:b3:d7:25:73:e6:d6:0d:
bb:c7:6c:97:72:6a:c5:71:e6:37:35:20:c4:65:b3:
44:59:61:66:b8:23:c1:9e:01:29:e9:73:be:2d:5b:
84:e1:33:f3:f1:d2:c1:47:16:82:ef:d3:da:44:a1:
12:c8:93:f5:95:39:67:1a:c2:3e:d0:ba:74:96:06:
f2:c0:8f:21:f4:94:6b:0d:d5:bc:31:d7:a2:60:a8:
60:79:02:83:bb:8b:e5:ab:a3:31:65:de:e9:f0:07:
53:5a:13:64:7a:d8:8c:3f:0a:27:36:b1:48:15:bb:
bd:96:6f:72:18:bb:46:50:17:d9:22:86:79:19:19:
a7:01:bf:17:95:34:a8:89:be:bc:43:df:c2:98:80:
3c:1e:dc:a2:a3:a4:1f:2f:61:8e:fb:6d:95:df:e0:
50:76:d6:d8:f1:00:18:71:fc:96:eb:42:7a:75:fd:
18:fc:5a:e6:b8:4a:d2:70:f2:9e:4e:4a:6f:e4:68:
d8:ac:0a:23:69:56:b1:9d:fd:4c:d0:9f:17:06:de:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B9:59:AD:26:79:77:83:5E:0F:C7:4A:C7:35:E8:17:A8:3B:AE:04
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.177.0-82.21.179.255
82.21.181.0-82.21.183.255
82.26.90.0/24
82.26.92.0/24
82.26.101.0/24
82.26.105.0-82.26.106.255
82.26.117.0/24
82.26.138.0/24
82.26.145.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:7d:69:23:71:9b:9c:7b:cf:83:16:06:83:0c:25:28:26:8c:
88:7f:ec:db:3e:d2:4c:12:5b:23:e4:60:f5:17:c8:0d:1a:c0:
e9:93:52:11:85:40:03:c3:c0:cc:a7:ae:bf:88:63:9e:50:21:
5c:26:93:b7:d7:c3:aa:6e:99:c0:fa:cd:3e:14:12:a2:b2:0f:
bf:df:ff:33:73:37:f1:3c:05:2e:8d:57:e3:5c:a0:14:49:5d:
f4:50:31:95:03:54:31:6c:63:32:8c:95:7e:17:ea:0d:08:23:
b4:0f:0e:14:a1:a2:f7:df:af:33:26:25:a5:7c:8d:dd:a3:99:
a7:e9:be:b9:fe:24:cb:7a:b3:0d:1c:dd:ca:81:9e:a8:10:62:
c1:92:c8:e8:3f:2e:c3:51:c6:f7:45:d6:1b:29:5f:41:27:e3:
70:91:44:11:85:1a:24:e1:0d:96:b9:cb:51:fe:4f:eb:4a:64:
f9:7c:5a:9e:af:f2:00:50:57:81:a3:4e:4a:7a:2a:6c:4f:42:
cb:33:00:b4:e4:85:6a:c9:9a:08:3b:0c:2b:54:a6:9c:a3:d6:
75:74:29:4f:2e:ac:83:c0:c6:c2:8b:39:4a:8b:94:57:2a:8b:
5a:5d:c0:d0:c5:fa:d5:c2:fa:92:e4:2a:c8:77:92:44:b5:44:
07:d4:76:35
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUTI6MneR4XeanPo+3alOygeQmdSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAyMjUxNjQxMjhaFw0yNzAyMjQxNjQ2MjhaMDMxMTAvBgNV
BAMTKDAxQjk1OUFEMjY3OTc3ODM1RTBGQzc0QUM3MzVFODE3QTgzQkFFMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCJnYx32MjbuOapRtYlA0RGEY
UBI6rJA+zDULeBEs8a/QRE4UWwCk04NH1Mj1ubwErBOhs9clc+bWDbvHbJdyasVx
5jc1IMRls0RZYWa4I8GeASnpc74tW4ThM/Px0sFHFoLv09pEoRLIk/WVOWcawj7Q
unSWBvLAjyH0lGsN1bwx16JgqGB5AoO7i+WrozFl3unwB1NaE2R62Iw/Cic2sUgV
u72Wb3IYu0ZQF9kihnkZGacBvxeVNKiJvrxD38KYgDwe3KKjpB8vYY77bZXf4FB2
1tjxABhx/JbrQnp1/Rj8Wua4StJw8p5OSm/kaNisCiNpVrGd/UzQnxcG3tbJAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUAblZrSZ5d4NeD8dKxzXoF6g7rgQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjExMTkyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOMAwDBABS
FbEDBAJSFbAwDAMEAFIVtQMEA1IVsAMEAFIaWgMEAFIaXAMEAFIaZTAMAwQAUhpp
AwQAUhpqAwQAUhp1AwQAUhqKAwQAUhqRMA0GCSqGSIb3DQEBCwUAA4IBAQBPfWkj
cZuce8+DFgaDDCUoJoyIf+zbPtJMElsj5GD1F8gNGsDpk1IRhUADw8DMp66/iGOe
UCFcJpO318OqbpnA+s0+FBKisg+/3/8zczfxPAUujVfjXKAUSV30UDGVA1QxbGMy
jJV+F+oNCCO0Dw4UoaL3368zJiWlfI3do5mn6b65/iTLerMNHN3KgZ6oEGLBksjo
Py7DUcb3RdYbKV9BJ+NwkUQRhRok4Q2WuctR/k/rSmT5fFqer/IAUFeBo05Keips
T0LLMwC05IVqyZoIOwwrVKaco9Z1dClPLqyDwMbCizlKi5RXKotaXcDQxfrVwvqS
5CrId5JEtUQH1HY1
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:00 2026 by rpki-client