Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS211695.roa
File: AS211695.roa (raw, json)
Hash identifier: wgL4jjcoJsnO7ZgCmTISoJATV8edzgxHtmhtW3DzAok=
Subject key identifier: 42:59:8F:CA:5D:E6:4B:44:21:CD:E0:1B:AC:8E:EF:C0:65:A6:46:0A
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7098BA254299F45AD71F33888BB903558BCF9E31
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS211695.roa
Signing time: Sun 22 Feb 2026 06:27:57 +0000
ROA not before: Sun 22 Feb 2026 06:22:57 +0000
ROA not after: Sun 21 Feb 2027 06:27:57 +0000
asID: 211695
IP address blocks: 2a14:7581:feb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:98:ba:25:42:99:f4:5a:d7:1f:33:88:8b:b9:03:55:8b:cf:9e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 22 06:22:57 2026 GMT
Not After : Feb 21 06:27:57 2027 GMT
Subject: CN=42598FCA5DE64B4421CDE01BAC8EEFC065A6460A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:c9:9f:32:3b:90:1d:e7:20:fb:14:6e:b5:
fc:5f:6c:74:ba:40:7d:7c:5f:59:70:23:96:db:32:
d3:bc:67:27:33:8f:3d:5d:df:7b:0b:1b:b2:91:de:
b6:42:67:8a:7e:4f:f9:76:8b:1c:27:43:dd:b9:c7:
9f:ad:2d:b3:5f:4b:31:fc:41:e2:cd:cc:44:58:f3:
27:e0:cb:ac:a9:f5:82:a4:4f:41:83:9f:bc:0c:b3:
0a:14:66:cb:3b:60:95:52:05:33:b3:22:24:75:2e:
fd:0f:27:4c:fe:09:33:db:5d:1b:68:7e:b7:b8:64:
42:fc:43:5b:13:d3:dc:a3:a9:ce:1d:b4:f9:fc:7d:
ca:71:93:24:1e:80:21:ab:ab:b1:29:cf:55:57:c3:
b5:67:a7:06:79:d6:28:f9:69:02:1f:46:1f:f6:6f:
91:05:ae:0a:ba:14:f2:4d:79:bd:bf:48:7f:9b:10:
a9:68:f6:b4:b2:5d:6d:1b:27:48:7c:61:cd:62:75:
93:f2:d9:32:a8:94:f4:50:88:7d:21:70:f9:10:67:
9a:87:74:fd:2a:bd:5f:6c:fe:10:40:15:c7:7f:0e:
bc:02:8b:14:81:15:44:c9:b1:ad:5c:de:f5:20:04:
49:2b:a4:b9:3b:53:34:19:58:36:38:d8:02:e0:d5:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:8F:CA:5D:E6:4B:44:21:CD:E0:1B:AC:8E:EF:C0:65:A6:46:0A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS211695.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:feb::/48
Signature Algorithm: sha256WithRSAEncryption
42:f1:85:e5:08:e7:b1:80:39:d0:7e:1e:7b:68:03:95:42:43:
5f:02:55:78:e9:f7:e7:d5:77:34:af:4f:98:2e:58:e3:3f:10:
11:72:de:16:b5:34:47:dd:a8:e4:84:4e:87:9d:ee:0c:69:aa:
2b:30:ee:0e:6d:00:52:d1:4d:66:59:d5:ca:15:58:66:46:49:
4d:38:72:c6:4a:4b:ee:a7:4d:eb:8a:7b:99:1a:82:9f:cb:5e:
b0:8b:7b:e1:48:82:67:d0:97:b0:71:16:4c:02:e9:35:d0:19:
d5:2b:68:d9:cd:3a:af:d6:12:2d:5c:80:89:c6:b9:50:cc:e0:
3b:a9:af:3d:d8:b2:8f:28:8e:17:e7:44:fa:02:e8:2a:c7:33:
e9:19:72:6f:8c:55:a4:e0:f1:16:a1:4d:44:d9:72:fd:a3:dd:
c3:0b:89:7e:b9:a3:0a:95:8d:3f:e4:7e:34:0c:4d:a3:c2:be:
22:29:e5:12:af:53:f0:ec:77:d4:42:c2:60:90:df:83:c9:6c:
c9:20:23:20:b8:5b:30:39:34:19:29:09:2c:9c:2c:82:72:e1:
ca:3d:53:f3:b1:f5:1d:72:59:b1:ae:38:18:42:31:9c:27:5f:
35:b0:58:97:2c:fb:d3:90:b9:7f:ec:df:c0:b8:ea:d6:2c:ac:
04:e9:2f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:14:16 2026 by rpki-client