Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210734.roa
File: AS210734.roa (raw, json)
Hash identifier: ln0rMXVWOfeUHvhUxJHEQtRVOTRzlMizhIfooiPeUsU=
Subject key identifier: 78:60:3F:89:2C:CD:CA:2E:33:73:87:CD:F4:8C:89:8B:77:4F:AC:E8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5E37BDE8A5EEC5694AEA0F3EFADC94B9F5962F0D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210734.roa
Signing time: Sat 19 Jul 2025 07:36:21 +0000
ROA not before: Sat 19 Jul 2025 07:31:21 +0000
ROA not after: Sat 18 Jul 2026 07:36:21 +0000
asID: 210734
IP address blocks: 146.103.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:37:bd:e8:a5:ee:c5:69:4a:ea:0f:3e:fa:dc:94:b9:f5:96:2f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 19 07:31:21 2025 GMT
Not After : Jul 18 07:36:21 2026 GMT
Subject: CN=78603F892CCDCA2E337387CDF48C898B774FACE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:85:75:c1:8f:dd:02:27:cf:46:e0:ce:09:
c5:64:9f:c2:55:15:a7:e3:bf:a4:a9:96:94:01:1c:
4a:00:4e:c8:82:0f:16:c5:52:6b:ff:49:6a:52:9c:
64:ce:36:bf:02:25:9b:c1:e6:4c:b9:54:45:c8:50:
b7:2a:13:fc:26:9a:ab:de:7f:0a:93:52:e5:c3:53:
6d:7b:74:f4:8d:79:e1:41:73:f4:a1:e3:ce:8e:09:
f4:af:ed:2b:28:fd:b0:a8:50:ef:d8:ff:00:75:52:
7d:14:aa:61:7a:f7:6e:3a:ef:56:6a:11:ff:e9:9a:
9c:32:31:3d:55:94:aa:ac:ec:ee:18:c1:8b:e0:58:
c4:8c:91:be:47:ac:52:19:e2:bc:a9:94:10:dd:65:
62:c1:ee:f4:58:32:3a:55:d6:68:a0:30:e4:1e:3d:
83:35:37:51:17:c3:70:04:4b:38:54:17:d2:69:2a:
e3:84:34:67:60:ca:78:6f:20:70:65:0c:f5:c8:8e:
ce:24:5b:f4:99:7a:33:71:92:42:c9:22:ab:c9:87:
38:fc:d7:c7:47:fe:27:0f:01:35:4a:bf:31:b1:fd:
93:36:99:bf:9f:c7:c1:1a:d4:3e:d1:ff:66:69:c8:
76:9d:97:f4:9c:86:1d:e7:24:bd:0d:89:e4:ce:eb:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:60:3F:89:2C:CD:CA:2E:33:73:87:CD:F4:8C:89:8B:77:4F:AC:E8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.49.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:64:0a:d5:91:8d:0a:a7:25:10:66:f6:5e:9a:4d:f0:1f:03:
20:dd:60:d7:ae:7f:d5:ac:b7:8d:73:69:73:a7:5c:29:ac:e7:
4a:5d:77:a7:ed:a4:1e:52:13:cd:04:61:7a:dd:4e:d2:f9:08:
98:f1:14:28:d1:2f:f6:d4:59:76:9d:b5:dd:cd:45:9a:be:e1:
41:1a:f1:51:8b:42:b8:84:54:b6:6c:ee:4a:45:a7:35:c3:bb:
49:e2:9e:17:fe:6f:9a:70:04:a9:b4:4a:11:32:5a:a0:67:9e:
ca:dc:2b:76:68:74:63:71:47:c2:7f:38:42:9e:ea:47:9f:09:
49:d5:1b:74:57:c4:31:f0:c1:12:23:59:b0:fe:74:8e:1a:71:
12:8d:87:de:b5:1f:50:0c:28:0a:bf:77:56:6c:b8:6a:0b:e2:
12:64:54:68:13:43:a6:bb:76:b7:7c:33:d3:ad:3b:92:7e:d8:
86:dc:1f:eb:1d:54:0c:42:87:88:9b:e9:f1:37:fc:d2:b1:48:
de:26:26:24:00:a4:63:61:6b:bb:eb:55:e6:3b:3f:db:f5:dc:
d6:7f:14:77:31:83:23:68:d1:83:de:f5:b3:18:70:4e:c9:d0:
24:0d:50:75:c2:f5:ac:98:fe:89:f5:f4:42:6d:17:16:9f:2d:
75:b7:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:00:38 2025 by rpki-client