Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211826.roa
File: AS211826.roa (raw, json)
Hash identifier: u3K3tVRjJXvwA/tViKMOYhfGQz2XfRq7zevEAk+EFPY=
Subject key identifier: 0C:DA:58:15:F6:46:8C:32:7A:5D:DF:7B:F5:A9:1C:E4:FA:52:8D:62
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4CADF25A7DFCC3682C79E6F49725EBCB9354BDB3
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211826.roa
Signing time: Mon 02 Nov 2026 22:49:39 +0000
ROA not before: Mon 02 Nov 2026 22:44:39 +0000
ROA not after: Mon 01 Nov 2027 22:49:39 +0000
asID: 211826
IP address blocks: 45.153.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ad:f2:5a:7d:fc:c3:68:2c:79:e6:f4:97:25:eb:cb:93:54:bd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 2 22:44:39 2026 GMT
Not After : Nov 1 22:49:39 2027 GMT
Subject: CN=0CDA5815F6468C327A5DDF7BF5A91CE4FA528D62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:fa:d5:e1:ed:89:05:d7:f8:3d:b3:39:5c:
bf:77:b6:73:af:d5:0d:b1:77:0a:86:df:2a:17:19:
1f:87:73:2c:38:80:c5:8a:8a:c5:be:d4:ac:0a:7c:
34:2f:f8:11:77:a4:fa:19:70:02:03:01:b7:8a:91:
b8:13:bd:c9:9c:fb:78:5b:4a:93:c2:e2:f1:6e:af:
e6:74:c5:d2:c6:f3:fc:84:ab:9d:f2:38:61:cb:67:
05:7e:e7:7d:6f:65:db:6d:3a:10:f7:43:4d:4f:67:
31:43:3e:4c:d7:02:51:b5:f6:ae:1e:1a:36:00:06:
f4:b2:18:f2:71:77:4f:f7:4c:f2:ca:83:77:be:57:
87:97:4b:ed:f0:6e:e5:23:10:e2:7f:a2:0c:11:89:
a8:b9:7d:88:89:6f:aa:68:f0:d6:40:d2:a7:12:f1:
73:e9:55:bd:3c:cd:6a:10:4d:e3:f0:98:58:bf:aa:
83:c5:5c:30:d6:38:ac:f2:13:de:14:14:8a:5a:76:
b0:9f:1b:d2:b6:ff:7f:00:19:ca:02:7e:be:01:0c:
eb:6e:db:62:65:8e:d3:69:92:6b:b4:83:cf:b6:b3:
8b:a5:8f:a0:e4:62:31:43:95:b1:17:59:1b:bb:22:
7f:1e:88:c3:ed:d5:ea:e7:13:15:0d:6d:87:11:a1:
dc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DA:58:15:F6:46:8C:32:7A:5D:DF:7B:F5:A9:1C:E4:FA:52:8D:62
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211826.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.4.0/24
Signature Algorithm: sha256WithRSAEncryption
82:70:80:75:f8:e5:60:46:60:0c:c7:56:a0:06:7c:ce:54:5d:
8f:5a:e6:10:b1:a3:35:cc:db:4b:bd:a8:48:a3:d3:cd:3f:7f:
cc:64:ac:e5:6a:64:ca:cc:ce:52:16:a5:37:a9:62:d6:53:c7:
83:ee:7b:9a:f2:66:db:fa:b3:39:e6:c9:fb:38:f6:75:e6:65:
f4:cf:c5:df:93:e4:8e:b6:98:1f:e5:7b:aa:39:b1:6b:c3:ac:
b1:ae:a9:92:10:30:d7:68:c3:b3:1e:0e:94:d2:6e:03:35:83:
e0:a8:52:fc:a3:0b:b1:58:c6:f2:d9:37:43:ad:63:30:5e:92:
77:07:86:df:65:22:34:0f:bb:8e:fc:7a:19:f5:d1:f9:43:60:
3c:9a:36:93:77:5a:38:60:02:4f:8d:65:f6:b5:f6:77:ed:55:
3b:1a:d0:20:dd:eb:2b:c3:7e:ec:e4:80:e1:b5:cd:60:bd:f1:
a0:1a:1e:b4:76:79:d9:6b:00:29:88:b4:30:85:58:82:3d:0c:
39:89:52:05:68:f9:1c:6a:46:a3:be:71:3e:86:bc:cd:77:58:
75:fc:27:8a:6f:6e:1d:d7:19:0d:2e:50:13:57:91:2f:d3:fc:
3d:28:d6:a6:66:59:cb:07:6b:31:97:79:3b:e9:e7:d7:8e:eb:
c1:40:0a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:24:47 2026 by rpki-client