Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211745.roa
File: AS211745.roa (raw, json)
Hash identifier: SWQ0P0UyzZTr7R8m+gkYj2HZGexDGl0yXg7EoCW/gwk=
Subject key identifier: EF:5E:DE:D3:C0:17:A7:87:40:07:F7:4E:6D:03:6F:6B:B7:01:17:D7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 25BBAAB4B907558AEA6EC7BDF54B92CB9691A9BF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211745.roa
Signing time: Wed 10 Jun 2026 21:08:35 +0000
ROA not before: Wed 10 Jun 2026 21:03:35 +0000
ROA not after: Wed 09 Jun 2027 21:08:35 +0000
asID: 211745
IP address blocks: 2a0f:85c1:c63::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:bb:aa:b4:b9:07:55:8a:ea:6e:c7:bd:f5:4b:92:cb:96:91:a9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 10 21:03:35 2026 GMT
Not After : Jun 9 21:08:35 2027 GMT
Subject: CN=EF5EDED3C017A7874007F74E6D036F6BB70117D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a1:f6:f2:1c:ab:2c:ce:b6:13:91:f6:ee:44:
be:19:28:8d:47:b8:65:20:f3:0e:1e:eb:b1:6a:3e:
80:ae:e4:37:f6:e8:f9:56:8e:0d:42:89:ce:7a:f4:
a8:a7:12:14:f9:09:81:2f:af:c0:fb:e1:7c:2a:6f:
4f:12:66:84:a7:6d:83:60:ce:49:fd:87:68:fe:82:
e9:6d:33:2e:35:20:fe:da:10:89:00:c9:19:14:7d:
40:c1:21:ed:38:8d:d6:2b:d1:05:06:68:b0:4f:7f:
50:d5:bd:dd:63:88:65:4b:0f:4f:77:b5:8f:c1:25:
46:fd:e5:76:31:94:57:38:e5:fe:0d:f8:6a:cf:6d:
42:e2:4c:17:5e:f2:76:90:93:3f:ac:7c:a9:07:82:
fe:83:b7:94:6b:41:81:93:cb:7c:cf:de:db:4e:30:
60:b7:f9:21:1f:a3:fa:05:b8:ca:6c:71:99:d1:87:
ed:b6:7e:81:29:16:d4:87:2b:38:ac:2a:91:23:b0:
68:b6:9c:09:9c:56:6a:ff:28:4b:03:a3:b3:fd:87:
5b:7e:51:f7:09:67:2b:fd:cc:c7:ef:06:24:27:19:
8a:5c:89:fd:4c:90:56:65:f1:be:ae:5b:63:5f:c2:
2e:ea:aa:80:06:1f:2c:59:de:cf:89:7d:be:18:b6:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5E:DE:D3:C0:17:A7:87:40:07:F7:4E:6D:03:6F:6B:B7:01:17:D7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211745.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c63::/48
Signature Algorithm: sha256WithRSAEncryption
bb:ac:d2:50:a4:b6:8e:8e:e2:62:f8:1a:6e:dc:a6:2b:a1:ef:
68:35:57:5f:e7:c4:4d:9d:fe:07:e5:a1:97:c8:db:32:5d:92:
85:ad:55:6b:f6:bc:0e:57:50:65:df:4e:6b:2e:38:60:4d:b3:
0f:15:2a:f5:3c:cf:2f:2c:e1:51:84:ea:2e:1b:32:dc:66:dd:
0f:ed:48:34:a0:75:54:7e:c1:f9:87:b5:87:e0:34:60:e8:6b:
f8:50:45:be:29:c0:14:c1:0f:81:e2:dd:fe:95:e2:fb:13:8e:
e4:0f:c3:cc:88:69:a7:ed:ba:4e:49:5f:d7:76:c8:e8:39:fe:
4b:5e:fe:ef:77:2f:82:0e:76:d1:dd:ec:77:65:73:01:42:6c:
7a:30:18:fb:d6:40:0f:f2:96:61:ae:6e:10:9d:a0:e3:bf:66:
6f:c8:17:15:e6:51:37:1e:5b:a6:40:ce:4b:66:dd:be:d4:dd:
40:64:7e:bf:be:92:5c:17:b5:98:d2:f8:fb:df:c7:8d:97:fd:
a3:08:7d:50:3f:1e:6c:76:11:4c:d2:c6:10:a5:f7:d1:93:02:
80:d1:fb:33:3c:39:ad:08:f4:c5:4c:d9:43:08:7c:e9:11:02:
36:ca:0f:ca:d0:9b:36:fa:62:c8:d5:47:74:4f:68:fd:bf:82:
74:c5:39:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:27:24 2026 by rpki-client