Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa
File: AS211484.roa (raw, json)
Hash identifier: 2DbhctSp+KIKKxCXDbJEJUU4mxpiwt86JsorLuVAQTY=
Subject key identifier: 93:5B:4E:5E:08:1F:DD:24:C2:21:CA:48:E4:F3:E3:53:75:F0:BE:82
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4E8F5911B73413CE22FAC079761209C39C5F94A2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa
Signing time: Thu 23 Oct 2025 19:43:26 +0000
ROA not before: Thu 23 Oct 2025 19:38:26 +0000
ROA not after: Thu 22 Oct 2026 19:43:26 +0000
asID: 211484
IP address blocks: 95.134.201.0/24 maxlen: 24
95.134.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8f:59:11:b7:34:13:ce:22:fa:c0:79:76:12:09:c3:9c:5f:94:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 23 19:38:26 2025 GMT
Not After : Oct 22 19:43:26 2026 GMT
Subject: CN=935B4E5E081FDD24C221CA48E4F3E35375F0BE82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:c2:1d:0a:e8:6c:2f:f2:43:a2:dd:31:57:
13:41:0d:73:c1:84:0a:97:57:81:f8:9e:cb:ed:2c:
e7:89:3d:f8:80:22:e7:14:a0:19:db:3f:19:b4:8b:
e7:86:a7:f5:bd:27:d6:be:0b:f8:c5:29:c9:08:c2:
5a:0a:ce:17:d7:36:28:a1:db:92:2e:33:b1:c0:0e:
ea:42:d0:7b:8a:53:2b:28:2a:22:64:f0:c6:02:0a:
a6:12:9e:b2:fa:9e:90:cd:21:37:61:8c:a4:5e:c1:
f4:50:ed:fe:a2:dd:18:76:38:eb:1f:19:d8:b6:06:
76:bb:e5:5b:ed:be:b6:b1:4a:0a:0a:05:26:85:26:
be:a4:81:7d:f2:c8:e3:70:47:f4:4a:24:0b:38:fb:
c6:ee:b2:2a:fc:4f:d5:31:6a:5d:2e:3f:20:03:e8:
14:61:3f:f8:27:e5:d0:85:74:de:00:d5:fa:c3:e0:
91:9a:89:6e:88:b2:1a:f9:04:cc:08:ed:75:4d:e0:
29:5b:8c:1a:9b:26:2a:a2:b4:53:06:ed:52:1e:5c:
b0:e6:e4:9a:f3:07:26:75:74:69:a7:7b:4b:0c:ea:
65:44:47:e4:23:b6:6e:aa:e7:53:15:03:2f:fc:23:
66:7e:d0:04:4e:61:28:2f:28:50:68:e9:c3:0e:2c:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5B:4E:5E:08:1F:DD:24:C2:21:CA:48:E4:F3:E3:53:75:F0:BE:82
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.201.0/24
95.134.220.0/24
Signature Algorithm: sha256WithRSAEncryption
13:14:ee:86:d1:4e:71:e1:45:2a:dd:c6:45:f1:fd:88:31:9d:
6d:50:c4:e9:72:71:36:85:94:7b:8c:6f:dd:f8:e2:1c:a6:cb:
a3:a3:04:fe:d4:74:0a:32:4b:7c:5e:4e:23:7f:cb:58:38:62:
f6:22:9f:13:73:f1:db:f7:94:ca:66:1b:7f:e7:15:86:46:44:
b6:78:0e:69:f1:e0:4d:7d:98:7a:01:b2:1a:96:3e:5f:1b:1d:
c8:85:2c:d6:b2:a7:d1:7c:ae:85:b5:46:79:a0:fb:2c:19:73:
e4:79:de:58:b9:54:f4:a1:71:fd:cf:aa:1d:53:b4:9e:0e:86:
e5:f4:c9:9a:15:5f:d0:7a:3d:eb:02:00:ca:6d:49:7a:13:69:
f0:da:f4:4d:7c:48:24:b9:bc:d7:a2:69:8e:eb:6b:07:a2:b3:
72:50:83:09:c8:d8:70:52:19:d2:6a:8e:bc:f7:5c:bd:9d:41:
be:77:77:b5:06:13:55:5f:1c:3b:6f:bb:bc:56:7b:75:e9:cd:
ed:82:d9:59:11:3c:da:ab:39:27:1d:4c:37:0b:70:c7:41:cd:
31:55:ff:6b:68:a5:df:f5:61:f3:c5:db:85:5b:14:06:a1:2a:
64:c7:77:11:08:36:f4:b3:4b:49:89:f6:2b:e7:21:02:28:5e:
00:3a:4c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:48 2025 by rpki-client