Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS211415.roa
File: AS211415.roa (raw, json)
Hash identifier: MmFCOQ53Aw15SqMku0Lsq6g4/LplDwGGqEcepJjRdjU=
Subject key identifier: 9B:EE:20:7C:B3:D6:49:77:EA:54:81:09:13:E9:99:5C:86:1F:BC:41
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5CA6C05C1B72B490ACC46A68D10D425FBA8E8279
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS211415.roa
Signing time: Wed 16 Sep 2026 18:43:07 +0000
ROA not before: Wed 16 Sep 2026 18:38:07 +0000
ROA not after: Wed 15 Sep 2027 18:43:07 +0000
asID: 211415
IP address blocks: 51.241.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a6:c0:5c:1b:72:b4:90:ac:c4:6a:68:d1:0d:42:5f:ba:8e:82:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 16 18:38:07 2026 GMT
Not After : Sep 15 18:43:07 2027 GMT
Subject: CN=9BEE207CB3D64977EA54810913E9995C861FBC41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:dd:d6:0a:72:0b:98:37:fe:d0:4b:c7:d7:
92:49:2b:2f:85:82:c6:f8:b8:e6:41:2d:fb:f3:cc:
ec:b7:bd:ae:14:7e:fb:4c:04:88:2f:8f:72:46:e5:
2a:82:8e:36:35:bb:ec:67:f0:1b:6c:54:78:8c:e0:
9a:14:fd:ea:31:a5:a0:4f:d6:94:d7:89:ac:49:6f:
00:4b:33:3c:9b:f7:ee:f2:74:f6:0f:1d:4b:99:17:
91:f1:1a:af:5d:cf:c2:05:60:ff:16:64:76:4a:19:
8f:bb:27:19:13:f6:e0:10:3c:bd:67:ed:13:e3:13:
a6:29:30:7d:9a:9f:e2:87:1c:39:f3:fa:85:f8:39:
b9:8c:41:ef:f9:b5:d3:8b:d8:5c:03:61:e2:36:bf:
3e:dc:94:66:9f:b3:14:61:3a:42:5c:aa:0d:20:10:
d1:41:cc:5a:d5:34:c1:22:2a:5e:c8:6a:c7:1f:2f:
95:34:62:5f:4e:b9:0e:40:2f:33:e5:c5:7e:45:2b:
f4:7d:5f:a1:10:47:ca:af:fb:15:0d:0e:65:6b:cf:
f0:b1:33:ed:d4:0a:fe:9f:6c:5f:d1:51:2e:a0:1e:
eb:04:0f:b2:fd:60:0e:3f:04:06:b3:26:24:0f:b2:
87:16:8f:36:da:4c:9b:e6:dc:c4:4d:ee:2e:44:a4:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EE:20:7C:B3:D6:49:77:EA:54:81:09:13:E9:99:5C:86:1F:BC:41
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS211415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.107.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c9:ed:90:25:c2:02:35:78:08:ba:25:35:f0:77:31:53:94:
f3:1c:cf:42:1b:33:a5:0f:15:c8:a2:ca:de:b0:87:ef:ff:ec:
a9:bb:1f:1e:c7:0b:34:f4:e7:68:3d:b8:d0:55:7d:ab:e5:e5:
38:f3:4d:0f:e3:30:bf:0a:49:a0:73:27:92:2d:d1:d8:cb:fd:
a6:32:89:33:76:be:c6:ca:a4:11:5d:91:e0:03:33:37:04:f8:
84:8f:8a:ed:74:94:6a:77:a8:b3:1e:9a:05:32:0e:50:ca:92:
8f:43:98:eb:ff:ba:31:99:39:6f:5a:8a:0a:0e:9b:07:72:19:
af:d1:37:46:d7:5c:58:d1:18:e5:5e:41:2b:fd:49:d3:b9:49:
94:f5:d0:3e:58:b9:7b:7d:2a:14:23:c8:72:f8:e8:25:6b:c2:
e5:32:20:c0:00:90:22:e4:4a:9b:f2:3f:0e:65:34:71:50:9c:
9a:61:b0:1d:70:e4:e1:24:a2:2a:74:cf:b9:ce:ab:77:90:32:
30:7b:a0:bf:1a:be:85:4f:d4:02:4e:1c:8f:e6:d5:f4:25:85:
31:82:d3:0b:b0:d2:33:d1:4a:06:6e:4c:b9:d7:b9:13:e9:01:
31:61:f7:8a:e7:05:4b:53:cc:72:56:c4:48:8f:3e:6d:82:d9:
06:35:8a:19
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUXKbAXBtytJCsxGpo0Q1CX7qOgnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MTYxODM4MDdaFw0yNzA5MTUxODQzMDdaMDMxMTAvBgNV
BAMTKDlCRUUyMDdDQjNENjQ5NzdFQTU0ODEwOTEzRTk5OTVDODYxRkJDNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyM93WCnILmDf+0EvH15JJKy+F
gsb4uOZBLfvzzOy3va4UfvtMBIgvj3JG5SqCjjY1u+xn8BtsVHiM4JoU/eoxpaBP
1pTXiaxJbwBLMzyb9+7ydPYPHUuZF5HxGq9dz8IFYP8WZHZKGY+7JxkT9uAQPL1n
7RPjE6YpMH2an+KHHDnz+oX4ObmMQe/5tdOL2FwDYeI2vz7clGafsxRhOkJcqg0g
ENFBzFrVNMEiKl7IascfL5U0Yl9OuQ5ALzPlxX5FK/R9X6EQR8qv+xUNDmVrz/Cx
M+3UCv6fbF/RUS6gHusED7L9YA4/BAazJiQPsocWjzbaTJvm3MRN7i5EpDrDAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUm+4gfLPWSXfqVIEJE+mZXIYfvEEwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjExNDE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAM/Fr
MA0GCSqGSIb3DQEBCwUAA4IBAQBGye2QJcICNXgIuiU18HcxU5TzHM9CGzOlDxXI
osresIfv/+ypux8exws09OdoPbjQVX2r5eU4800P4zC/CkmgcyeSLdHYy/2mMokz
dr7GyqQRXZHgAzM3BPiEj4rtdJRqd6izHpoFMg5QypKPQ5jr/7oxmTlvWooKDpsH
chmv0TdG11xY0RjlXkEr/UnTuUmU9dA+WLl7fSoUI8hy+Ogla8LlMiDAAJAi5Eqb
8j8OZTRxUJyaYbAdcOThJKIqdM+5zqt3kDIwe6C/Gr6FT9QCThyP5tX0JYUxgtML
sNIz0UoGbky517kT6QExYfeK5wVLU8xyVsRIjz5tgtkGNYoZ
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:39:28 2026 by rpki-client