Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211314.roa
File: AS211314.roa (raw, json)
Hash identifier: gd7w24DIBcDvDk/pj5H/uurfSbN5TTQBb/ql3xFmtsA=
Subject key identifier: 0A:80:6D:AC:86:4F:DB:9E:EF:DE:8F:CB:E0:29:81:EF:90:1E:2D:5A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0DBD26C778EB2C9700944E766728795F735B0543
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211314.roa
Signing time: Wed 25 Feb 2026 22:08:27 +0000
ROA not before: Wed 25 Feb 2026 22:03:27 +0000
ROA not after: Wed 24 Feb 2027 22:08:27 +0000
asID: 211314
IP address blocks: 2a0f:85c1:bf5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bd:26:c7:78:eb:2c:97:00:94:4e:76:67:28:79:5f:73:5b:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 25 22:03:27 2026 GMT
Not After : Feb 24 22:08:27 2027 GMT
Subject: CN=0A806DAC864FDB9EEFDE8FCBE02981EF901E2D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:a0:3d:c5:5a:60:3e:5a:5c:12:89:22:65:
b3:07:dc:41:30:45:fd:52:12:9c:b3:2b:ab:cf:c0:
da:ef:1b:c5:af:64:ac:62:2d:c0:c4:d2:71:a4:07:
73:59:58:10:ca:5e:a1:0e:aa:65:21:d2:97:4a:34:
16:bd:7d:3a:69:2f:f4:76:a5:cd:a0:39:c8:8d:57:
9f:76:c3:6d:b7:8f:a9:4f:f1:6d:31:c1:b6:36:3c:
76:7c:11:08:28:10:f1:db:06:02:cf:e4:bb:9a:00:
91:12:ba:cf:16:07:d2:fa:c3:75:e3:5a:d5:f1:b1:
2c:89:1f:a1:86:9d:c7:15:70:f8:1c:17:a9:60:90:
f5:ac:5c:c0:5c:2a:68:fd:40:70:73:19:5a:5d:aa:
07:2c:ec:32:f1:57:23:01:5d:a7:4e:ea:fc:4e:e9:
a3:5c:33:4a:bf:e1:40:11:2e:cc:46:51:0d:1c:46:
81:da:07:d6:94:c0:55:01:d5:de:06:a9:52:c0:cf:
66:cd:f3:4a:28:cb:f7:24:75:5f:ad:6c:42:4d:29:
a7:f9:1a:ef:9b:6a:32:47:32:25:d6:6c:15:ec:1f:
41:73:1a:df:c9:15:5f:55:aa:36:2d:bb:2a:99:59:
38:cc:e7:41:c0:18:98:26:29:9c:0b:8a:bc:b9:17:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:80:6D:AC:86:4F:DB:9E:EF:DE:8F:CB:E0:29:81:EF:90:1E:2D:5A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bf5::/48
Signature Algorithm: sha256WithRSAEncryption
4d:00:d2:d3:eb:2c:32:f1:56:17:0a:c4:01:75:83:d3:ac:92:
a6:2a:a1:6f:0f:2b:97:34:28:a0:f3:a1:19:ee:ac:08:ae:55:
b7:95:44:15:f7:d4:83:9f:81:e4:35:b5:4d:70:06:e9:da:61:
87:9b:75:ac:cb:b6:28:e5:42:54:1e:dd:b8:6a:1e:e5:02:d9:
eb:8e:69:f2:9a:de:03:a5:d1:58:1e:d1:2f:fd:2f:b6:13:0f:
ff:cd:34:9a:03:b6:34:f8:cf:bb:aa:8f:e7:24:6c:84:30:2c:
3d:17:9b:07:7d:76:e4:6a:39:4e:3f:61:21:77:5e:a1:c7:c3:
ca:d2:f5:e9:59:73:9e:3a:79:3b:6f:d4:fb:7c:ab:60:5f:62:
76:4f:bb:ae:a7:84:17:94:60:f3:05:61:f8:dd:7e:14:14:e2:
96:e3:d4:34:6c:18:c0:25:68:27:73:ea:ba:fe:20:6e:9d:93:
cd:80:07:33:f5:07:de:58:83:30:23:33:87:a0:30:d1:30:eb:
33:e8:fa:a9:01:89:d3:c9:a2:91:bf:cb:68:5e:c7:52:e5:9c:
5a:2b:1c:f6:10:e7:53:bd:ec:12:99:96:bb:ba:c1:ad:21:90:
6b:4c:bb:db:2f:41:60:f0:95:5d:ee:33:bf:0a:eb:97:09:06:
30:c7:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:10:58 2026 by rpki-client