Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210542.roa
File: AS210542.roa (raw, json)
Hash identifier: kMJG6Ziwfcpwpxcx9Qvur2g7+aWIvAFKQxV5no8p20U=
Subject key identifier: CB:0C:CD:59:3B:97:2D:55:D4:93:7D:18:97:23:1F:20:3F:16:4A:79
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 393EDEFC8613F07F1F47EB8F8FF40F8CA7E773A0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210542.roa
Signing time: Tue 15 Jul 2025 00:01:59 +0000
ROA not before: Mon 14 Jul 2025 23:56:59 +0000
ROA not after: Tue 14 Jul 2026 00:01:59 +0000
asID: 210542
IP address blocks: 179.61.173.0/24 maxlen: 24
181.214.25.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.214.130.0/24 maxlen: 24
181.214.185.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.110.0/24 maxlen: 24
181.215.127.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.148.0/24 maxlen: 24
181.215.154.0/24 maxlen: 24
181.215.190.0/24 maxlen: 24
181.215.239.0/24 maxlen: 24
185.173.27.0/24 maxlen: 24
194.53.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3e:de:fc:86:13:f0:7f:1f:47:eb:8f:8f:f4:0f:8c:a7:e7:73:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 14 23:56:59 2025 GMT
Not After : Jul 14 00:01:59 2026 GMT
Subject: CN=CB0CCD593B972D55D4937D1897231F203F164A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:03:be:33:e3:4f:ba:cf:d8:1b:6c:51:b9:
65:08:b2:ee:96:3b:7a:c7:5d:45:b0:a5:89:bc:42:
df:d6:fc:54:5a:47:1e:71:22:29:f5:6c:15:79:08:
13:51:dc:74:92:92:ad:2a:1b:2e:df:e7:ca:28:f5:
5d:65:c5:00:8d:e6:43:9b:44:dc:b4:93:93:34:50:
e9:65:6d:ca:be:3d:6c:1d:18:8e:98:54:b4:a1:4b:
22:22:17:fb:ca:82:dd:40:a6:68:db:75:32:4f:7e:
08:ea:8a:7a:e1:cb:19:96:00:30:8c:d0:7e:34:c3:
98:4b:80:44:29:59:d2:70:07:fd:71:47:31:a4:8e:
1a:ab:2a:cd:6a:a8:36:37:f2:d1:ea:49:3d:70:51:
85:cb:d7:ad:4c:cc:58:dd:96:29:68:bd:b9:47:91:
b7:49:56:9b:cc:4a:67:0f:57:bb:05:1b:6c:d5:8f:
63:a8:c5:37:e1:94:21:74:fd:eb:99:7d:81:45:0b:
0a:79:49:47:5f:9c:d4:eb:9a:69:d2:46:56:1b:72:
b9:83:6d:9a:42:29:d8:10:c6:44:9e:fb:8f:26:4a:
d9:75:d4:dd:f0:0d:31:93:01:c5:84:58:5d:2f:36:
c8:91:2a:85:47:da:cd:bc:8d:0f:64:27:ee:98:2a:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0C:CD:59:3B:97:2D:55:D4:93:7D:18:97:23:1F:20:3F:16:4A:79
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.173.0/24
181.214.25.0/24
181.214.33.0/24
181.214.75.0/24
181.214.130.0/24
181.214.185.0/24
181.214.250.0/24
181.215.110.0/24
181.215.127.0/24
181.215.136.0/24
181.215.148.0/24
181.215.154.0/24
181.215.190.0/24
181.215.239.0/24
185.173.27.0/24
194.53.142.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3e:ed:1c:13:09:cb:27:c8:2d:c5:24:4c:46:59:0b:96:75:
cd:d6:d2:fb:41:2e:1f:c9:0f:23:21:fd:7d:a9:e9:fa:f9:8d:
53:a5:b6:4f:13:19:fb:aa:38:1a:a2:9b:a9:b8:ad:0f:52:b3:
bb:b9:85:c8:60:b9:a8:f1:13:6f:b0:a5:3b:05:d4:e9:97:3c:
19:e6:0c:49:e2:33:14:13:0c:e4:8c:79:4c:db:c0:92:a1:fc:
e1:b3:ca:e6:48:a4:f6:f3:57:f9:96:78:57:b4:48:2f:2f:bc:
a0:84:fc:78:6b:6f:f9:dc:b6:de:eb:c7:28:28:6e:eb:a6:5c:
73:b2:5e:bf:ba:84:b1:fe:ca:c1:3a:78:11:88:62:16:41:28:
da:b5:9e:92:b1:50:d0:c4:6c:27:81:e1:11:a8:28:f9:d8:1d:
44:36:fd:97:c3:24:3b:e9:dc:69:1e:c6:74:61:6e:d8:57:85:
3c:f6:8b:77:55:fd:a5:91:2e:60:3a:b4:5c:d1:f2:b7:ee:5a:
da:9f:9e:8c:36:92:99:f9:22:fa:ec:3c:32:1c:f6:df:66:3e:
a0:2c:26:b4:b3:6b:80:dd:81:43:92:f5:73:98:f0:79:90:3f:
d7:f5:9e:5a:78:d0:2b:a2:16:b8:a6:af:18:0a:1b:e3:aa:d9:
15:24:da:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:07:45 2025 by rpki-client