Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211759.roa
File: AS211759.roa (raw, json)
Hash identifier: 5FpaCeIsb/IyL45woDsT8oHxt7SdJtwuE7Q5lbre3BQ=
Subject key identifier: D4:5F:A9:5C:C1:1A:EC:7B:9F:A0:DF:A1:71:01:C8:6B:8F:89:79:E3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 64696F752C7D3825E900BF725A1D958691B416DD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211759.roa
Signing time: Tue 02 Jun 2026 18:47:24 +0000
ROA not before: Tue 02 Jun 2026 18:42:24 +0000
ROA not after: Tue 01 Jun 2027 18:47:24 +0000
asID: 211759
IP address blocks: 2a13:9500:9b::/48 maxlen: 48
2a13:9500:9d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:69:6f:75:2c:7d:38:25:e9:00:bf:72:5a:1d:95:86:91:b4:16:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 2 18:42:24 2026 GMT
Not After : Jun 1 18:47:24 2027 GMT
Subject: CN=D45FA95CC11AEC7B9FA0DFA17101C86B8F8979E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:e6:4e:a6:68:7a:d9:20:71:a6:5f:8b:28:
38:bb:a7:52:da:99:68:51:a1:31:28:52:d0:06:3e:
f0:af:11:df:8f:0e:30:58:3f:08:be:cc:40:e6:43:
19:5b:8d:69:0e:ed:b3:80:b4:48:bb:fe:d7:fa:54:
d0:51:1e:5f:40:0a:25:a6:de:a0:1f:3a:8e:07:0a:
e5:0a:f9:2e:6d:bc:7a:4f:16:d2:c0:04:53:c1:2b:
d2:f9:7d:70:d1:a4:fc:27:e1:d7:14:2f:cc:ec:01:
fc:67:d1:94:fe:f1:8d:02:fb:7f:ef:29:5b:07:2d:
11:62:40:10:67:48:e3:e5:3c:9c:58:88:88:bc:46:
a7:1f:02:d6:a0:22:0d:c6:b9:28:12:71:d3:c3:34:
c4:2f:1b:46:0e:9c:3a:d7:2e:e3:92:c9:5c:87:4f:
9b:e4:38:52:db:ae:1e:01:f5:75:58:cb:2c:b4:a3:
d2:2e:35:1e:20:c4:dd:ec:15:97:09:6d:7e:de:fc:
cd:82:7f:46:c9:e1:3b:54:38:2b:d8:58:10:95:26:
2f:ea:2e:3e:71:a8:a3:9c:83:a8:5e:a4:5e:f5:7e:
39:1a:b9:91:70:43:1f:45:58:7a:6e:3e:da:1c:5a:
6d:15:1f:eb:78:73:8f:97:c3:6e:5d:27:a5:52:e2:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:A9:5C:C1:1A:EC:7B:9F:A0:DF:A1:71:01:C8:6B:8F:89:79:E3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211759.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:9b::/48
2a13:9500:9d::/48
Signature Algorithm: sha256WithRSAEncryption
0b:26:23:9b:b8:76:31:97:82:c7:b9:6f:8c:af:fb:52:ef:de:
6e:ef:46:08:75:3c:1a:f8:4f:4b:e8:3e:0c:3c:69:88:52:6d:
92:51:7e:94:64:08:65:0a:e5:6e:1f:81:a2:84:ca:e3:ae:9e:
7f:31:83:d0:1c:cd:eb:9f:a4:c1:26:d3:cf:68:cf:7b:20:20:
a6:94:d2:2f:8e:99:ef:01:c3:d6:a0:a6:51:06:b5:9b:77:72:
91:c2:6e:e0:3d:86:eb:36:9b:a2:08:ec:09:a0:3d:d9:dc:ab:
c0:f0:93:8b:88:a8:79:ad:78:70:07:b5:e8:30:38:b3:2c:b7:
93:80:bd:21:3a:e5:59:10:46:bc:e1:c7:f6:c8:53:0b:d5:73:
a0:f6:1f:9f:f1:f9:7f:30:ac:4d:a6:0b:ef:75:64:e1:b6:5b:
b1:9a:5c:52:37:3d:a0:93:b7:43:de:c0:0e:25:0b:b6:d5:28:
07:ae:13:cf:20:05:21:0e:f0:8c:6e:58:f6:02:e3:4e:ee:42:
af:d3:a2:e8:a5:59:05:82:19:98:44:d2:4f:c7:a9:e3:1f:a4:
e8:c3:1b:95:62:16:ca:b7:bd:32:43:43:f2:27:12:1a:ea:8e:
e7:54:36:d3:9f:cf:3f:d7:d9:44:22:f7:0b:7f:04:42:e7:3f:
7a:01:a7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:42:27 2026 by rpki-client