Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211489.roa
File: AS211489.roa (raw, json)
Hash identifier: 1kzyseg3qR3ZlVUynPZP8tLYmQFXxIJ/wxldv3ugIoY=
Subject key identifier: 27:64:65:1B:CC:51:2A:35:E1:9D:EF:C2:98:D9:33:D7:68:60:A0:F0
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 713BCAB602E66FDED673C60A14F74C757011D32A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211489.roa
Signing time: Fri 20 Feb 2026 06:08:26 +0000
ROA not before: Fri 20 Feb 2026 06:03:26 +0000
ROA not after: Fri 19 Feb 2027 06:08:26 +0000
asID: 211489
IP address blocks: 2a0f:85c1:bf1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3b:ca:b6:02:e6:6f:de:d6:73:c6:0a:14:f7:4c:75:70:11:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 20 06:03:26 2026 GMT
Not After : Feb 19 06:08:26 2027 GMT
Subject: CN=2764651BCC512A35E19DEFC298D933D76860A0F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:43:ba:3f:84:37:89:ca:43:a3:b5:45:77:
ee:77:85:f9:f9:47:fe:db:04:4b:29:3c:68:d8:62:
4e:65:90:4f:79:0d:e1:9d:2c:92:5d:d9:d7:fb:e1:
85:10:33:d8:3a:c2:8f:2c:a3:33:2c:05:38:87:5f:
3a:2d:50:09:3b:56:cf:5c:9f:48:42:6b:4d:2f:54:
e5:f8:f8:00:8b:8b:48:00:25:1e:2c:85:91:09:b0:
6f:41:5c:18:61:58:d7:e3:0b:62:f6:64:42:6d:85:
19:4c:23:a2:3a:11:27:b5:6a:7b:b3:50:b1:c6:46:
80:53:e1:12:e0:17:f5:ca:78:65:dc:d0:21:a0:0c:
94:d2:b7:06:58:2d:01:86:29:fc:fd:1f:0c:57:2b:
67:84:30:d9:59:d1:01:c7:47:55:b4:98:dc:94:f7:
08:25:72:10:7c:ff:cf:34:35:8a:77:8e:74:e9:3f:
af:0d:bb:d7:51:94:dc:b7:60:b3:5c:9f:e9:71:cb:
f2:f2:17:11:02:6d:b5:d9:33:90:b1:33:57:f0:6d:
e4:19:13:fa:0b:5b:8a:b4:71:73:99:50:54:dc:8b:
87:3b:01:4e:71:6b:18:ab:20:c9:8b:e7:22:3b:5a:
6f:85:d8:4b:43:32:ad:fb:a1:20:60:98:7f:13:46:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:64:65:1B:CC:51:2A:35:E1:9D:EF:C2:98:D9:33:D7:68:60:A0:F0
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bf1::/48
Signature Algorithm: sha256WithRSAEncryption
4e:37:cc:f4:0e:62:53:4c:11:be:ad:e9:a0:12:3f:0a:94:36:
9f:07:8d:45:cf:1f:58:4f:b3:e7:e1:c5:c1:3c:78:a2:0c:48:
2f:b4:81:e6:49:4b:fb:0b:b1:06:ea:3b:44:8f:6b:90:89:14:
19:6b:6a:49:ea:bd:02:30:86:ea:4a:9e:1a:31:b4:7d:1c:1d:
c9:64:a5:b1:34:65:41:1f:b1:30:7d:b0:fb:69:d9:cc:a6:9f:
1c:a4:1c:be:3c:cf:5a:74:02:9f:ed:53:0c:7e:ca:f8:99:0d:
d8:b7:f9:6f:54:9d:28:fd:2e:dd:ad:d9:de:7d:86:63:58:92:
0f:01:fe:4d:5a:e1:9d:05:21:75:ad:69:bf:c4:88:2c:25:83:
f8:62:23:60:40:c4:7c:be:1b:20:89:44:06:27:eb:91:73:87:
a8:ca:22:b6:6f:5c:3a:c8:89:bd:cf:f4:b2:60:a5:7f:be:58:
43:30:12:66:ff:f9:7f:d2:1d:71:e6:98:bc:6c:72:10:43:40:
da:f3:01:86:72:9e:c3:a7:17:7d:6f:14:6b:ff:f9:d2:ef:a5:
be:a4:6e:42:71:2e:42:32:b4:c6:a4:cc:e0:cd:a3:3c:67:10:
e9:8c:bb:65:c6:b7:c5:eb:9f:4a:4b:bb:df:eb:87:67:80:13:
c1:46:c8:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUcTvKtgLmb97Wc8YKFPdMdXAR0yowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjAyMjAwNjAzMjZaFw0yNzAyMTkwNjA4MjZaMDMxMTAvBgNV
BAMTKDI3NjQ2NTFCQ0M1MTJBMzVFMTlERUZDMjk4RDkzM0Q3Njg2MEEwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtK0O6P4Q3icpDo7VFd+53hfn5
R/7bBEspPGjYYk5lkE95DeGdLJJd2df74YUQM9g6wo8sozMsBTiHXzotUAk7Vs9c
n0hCa00vVOX4+ACLi0gAJR4shZEJsG9BXBhhWNfjC2L2ZEJthRlMI6I6ESe1anuz
ULHGRoBT4RLgF/XKeGXc0CGgDJTStwZYLQGGKfz9HwxXK2eEMNlZ0QHHR1W0mNyU
9wglchB8/880NYp3jnTpP68Nu9dRlNy3YLNcn+lxy/LyFxECbbXZM5CxM1fwbeQZ
E/oLW4q0cXOZUFTci4c7AU5xaxirIMmL5yI7Wm+F2EtDMq37oSBgmH8TRgppAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUJ2RlG8xRKjXhne/CmNkz12hgoPAwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjExNDg5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQvxMA0GCSqGSIb3DQEBCwUAA4IBAQBON8z0DmJTTBG+remgEj8KlDafB41Fzx9Y
T7Pn4cXBPHiiDEgvtIHmSUv7C7EG6jtEj2uQiRQZa2pJ6r0CMIbqSp4aMbR9HB3J
ZKWxNGVBH7EwfbD7adnMpp8cpBy+PM9adAKf7VMMfsr4mQ3Yt/lvVJ0o/S7drdne
fYZjWJIPAf5NWuGdBSF1rWm/xIgsJYP4YiNgQMR8vhsgiUQGJ+uRc4eoyiK2b1w6
yIm9z/SyYKV/vlhDMBJm//l/0h1x5pi8bHIQQ0Da8wGGcp7Dpxd9bxRr//nS76W+
pG5CcS5CMrTGpMzgzaM8ZxDpjLtlxrfF659KS7vf64dngBPBRsh8
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:32 2026 by rpki-client