Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211818.roa
File: AS211818.roa (raw, json)
Hash identifier: fq3zz6iS3tPSDQ9new4BLtJlbcKULp83GwKxm/sFSzY=
Subject key identifier: B6:40:CA:7D:93:29:A2:71:9A:6F:B9:B6:FB:4D:34:1E:B8:56:78:EA
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 61E1AA8D0965DBF5FBA0DB3D6D985DF64D679A84
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211818.roa
Signing time: Tue 27 Jan 2026 16:08:35 +0000
ROA not before: Tue 27 Jan 2026 16:03:35 +0000
ROA not after: Tue 26 Jan 2027 16:08:35 +0000
asID: 211818
IP address blocks: 2a0f:85c1:d61::/48 maxlen: 48
2a0f:85c1:dd4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e1:aa:8d:09:65:db:f5:fb:a0:db:3d:6d:98:5d:f6:4d:67:9a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jan 27 16:03:35 2026 GMT
Not After : Jan 26 16:08:35 2027 GMT
Subject: CN=B640CA7D9329A2719A6FB9B6FB4D341EB85678EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:d9:ae:0d:0a:ce:7a:3d:b7:0c:f2:33:bb:
4d:e5:cf:6c:38:02:87:7f:87:22:cb:aa:10:3e:fe:
24:45:d6:d5:a9:32:fd:ba:8f:cb:a1:13:e7:32:5e:
e6:0e:e1:e9:12:20:56:7b:34:f3:4b:20:64:a5:a9:
71:ce:ad:4f:31:7c:88:de:d4:25:5b:6b:0c:95:c0:
c6:4b:15:77:1f:6a:0e:d5:fa:2f:5c:e0:8e:1a:aa:
e7:48:ab:e7:a1:d1:1d:f1:28:7b:8a:a0:cb:b1:9d:
c1:0f:24:d5:b8:34:8a:6d:d4:24:b2:5c:63:45:6c:
a1:33:97:c5:e0:6f:8c:06:f9:19:23:9e:c8:bf:39:
45:64:bb:a5:a3:c2:5a:fb:5a:4c:5f:01:19:be:af:
07:d6:fd:08:eb:ce:d7:ce:2e:5d:60:d7:a8:bf:58:
50:00:12:58:6d:a9:87:95:24:95:d7:6a:f9:e0:ee:
79:9b:ff:38:d7:48:fb:ef:2b:2c:1e:f6:71:23:71:
99:c5:ef:d6:22:02:12:34:8b:b6:48:0f:8a:11:34:
10:91:43:65:1b:fa:e7:2a:aa:15:79:0d:8a:5f:86:
d7:c5:e0:90:6b:ac:eb:e3:44:f9:30:ce:27:f9:93:
35:86:75:92:ac:a9:64:55:da:ac:65:06:2f:0b:ca:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:CA:7D:93:29:A2:71:9A:6F:B9:B6:FB:4D:34:1E:B8:56:78:EA
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d61::/48
2a0f:85c1:dd4::/48
Signature Algorithm: sha256WithRSAEncryption
67:1e:e9:fd:fb:ce:4c:ee:79:e7:cd:5c:44:f2:b8:cd:62:84:
6e:54:c0:b0:94:2e:d6:fb:de:69:7f:4c:25:5c:33:54:c6:ec:
d0:61:8a:9e:27:85:53:a6:0a:c5:d9:d0:e9:38:14:3b:fe:2a:
20:58:8d:5f:23:36:ab:31:ae:b4:c1:2b:f3:7b:79:eb:73:94:
4e:6c:53:93:4d:16:5b:be:dc:e3:46:1d:1c:bd:78:00:4b:c5:
cd:ea:38:c3:52:ed:50:e2:09:4e:40:09:73:11:31:54:48:10:
80:93:6a:6c:06:89:93:87:27:e1:4d:b1:36:9b:ba:a6:63:07:
24:bf:b2:eb:ed:b7:f0:cb:85:f3:7d:f1:38:6e:b3:21:da:63:
e3:25:31:29:4b:b6:ff:a1:68:4a:ca:ce:65:58:0f:bc:84:d1:
58:74:bb:ca:14:4c:f4:62:c2:56:b3:81:64:a3:9d:86:15:b7:
76:8c:54:84:33:f3:4e:5f:2d:34:23:92:24:0f:b1:d0:96:4b:
4d:4e:1e:75:82:40:6e:09:58:7e:94:95:05:90:5f:fc:a6:ad:
19:39:29:69:eb:83:f9:c7:6f:62:21:9d:b4:ea:d1:80:8a:57:
dd:41:6f:3c:5a:f8:aa:60:73:c2:d4:8a:24:b0:18:38:2b:9e:
03:cd:8a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:15:41 2026 by rpki-client