Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: ikIRVxOnkDx/E8TKnvrv+FbcfqsK6zUdYexbKbB4mSU=
Subject key identifier: 41:33:9E:C0:8D:BE:3B:21:05:06:83:AB:ED:A4:37:C8:1B:C1:D3:AA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4963745FE1D5DC169D4C2B198A2C38990B0FB964
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
Signing time: Fri 09 Oct 2026 00:06:51 +0000
ROA not before: Fri 09 Oct 2026 00:01:51 +0000
ROA not after: Fri 08 Oct 2027 00:06:51 +0000
asID: 10753
IP address blocks: 82.21.210.0/24 maxlen: 24
82.21.216.0/24 maxlen: 24
82.21.234.0/24 maxlen: 24
82.22.250.0/24 maxlen: 24
82.23.19.0/24 maxlen: 24
82.23.20.0/24 maxlen: 24
82.23.23.0/24 maxlen: 24
82.23.24.0/24 maxlen: 24
82.23.59.0/24 maxlen: 24
82.23.60.0/24 maxlen: 24
82.24.66.0/24 maxlen: 24
82.24.75.0/24 maxlen: 24
82.24.87.0/24 maxlen: 24
82.24.104.0/24 maxlen: 24
82.24.124.0/24 maxlen: 24
82.24.147.0/24 maxlen: 24
82.24.173.0/24 maxlen: 24
82.24.180.0/24 maxlen: 24
82.24.202.0/24 maxlen: 24
82.25.225.0/24 maxlen: 24
82.25.250.0/24 maxlen: 24
82.26.234.0/24 maxlen: 24
82.26.250.0/24 maxlen: 24
82.27.210.0/24 maxlen: 24
82.27.220.0/24 maxlen: 24
82.27.250.0/24 maxlen: 24
82.29.239.0/24 maxlen: 24
82.29.240.0/24 maxlen: 24
82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
82.38.215.0/24 maxlen: 24
82.39.136.0/24 maxlen: 24
178.83.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:63:74:5f:e1:d5:dc:16:9d:4c:2b:19:8a:2c:38:99:0b:0f:b9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 00:01:51 2026 GMT
Not After : Oct 8 00:06:51 2027 GMT
Subject: CN=41339EC08DBE3B21050683ABEDA437C81BC1D3AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:dd:11:dc:71:38:35:30:20:a3:be:43:47:
39:b7:9e:62:ac:b4:d6:d6:e5:1c:a4:1f:c6:9b:ee:
20:a6:34:6b:c3:37:b3:eb:3e:7c:08:85:df:de:c0:
79:31:7b:ef:74:3a:8a:b2:f8:fd:dd:de:86:ec:f8:
13:8b:db:e9:50:ec:3d:d5:cd:5b:ca:bf:73:cb:ce:
bb:2e:a9:49:61:08:ef:77:68:c0:10:66:e8:27:8d:
c5:66:de:f2:ea:4e:0d:a6:6c:44:c7:ed:02:c4:cb:
7a:9f:0c:8c:41:0a:81:01:1c:e1:91:d7:80:ea:00:
88:4d:42:fc:53:a1:8b:18:54:a4:cf:1d:69:f8:e2:
51:37:76:c4:4b:b8:07:1b:99:62:ad:ee:52:4e:2f:
38:dc:3b:46:53:4d:c0:65:66:dc:bd:41:80:31:ef:
3b:7b:77:5e:e7:27:6e:e8:5d:e1:1b:b2:ad:7c:15:
af:3f:b5:dd:e0:a7:07:99:a3:01:70:20:89:5c:9d:
26:6a:d8:31:55:fc:4f:98:05:19:3a:d1:41:df:22:
05:92:06:e9:12:23:8d:77:a2:a6:46:e2:a9:91:2e:
2c:fa:23:90:82:aa:cc:8f:2e:b6:62:88:c6:7b:4b:
88:b0:72:01:ba:df:67:e0:c5:c3:82:40:54:ae:d4:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:33:9E:C0:8D:BE:3B:21:05:06:83:AB:ED:A4:37:C8:1B:C1:D3:AA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.210.0/24
82.21.216.0/24
82.21.234.0/24
82.22.250.0/24
82.23.19.0-82.23.20.255
82.23.23.0-82.23.24.255
82.23.59.0-82.23.60.255
82.24.66.0/24
82.24.75.0/24
82.24.87.0/24
82.24.104.0/24
82.24.124.0/24
82.24.147.0/24
82.24.173.0/24
82.24.180.0/24
82.24.202.0/24
82.25.225.0/24
82.25.250.0/24
82.26.234.0/24
82.26.250.0/24
82.27.210.0/24
82.27.220.0/24
82.27.250.0/24
82.29.239.0-82.29.240.255
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
82.38.215.0/24
82.39.136.0/24
178.83.82.0/23
Signature Algorithm: sha256WithRSAEncryption
86:9c:22:39:8d:2c:6b:cb:fc:b8:0c:6d:ba:a8:6f:29:75:46:
0a:c3:6f:6e:2e:d1:7e:5a:53:9c:dd:ff:ba:de:de:32:92:43:
ce:5d:4c:2f:50:66:2f:e1:b9:88:45:86:06:40:68:ed:a5:49:
6f:8c:a5:94:73:55:95:cf:73:f7:02:37:23:53:d5:53:f4:0f:
c6:61:ee:18:03:2d:30:a2:7c:b7:c0:74:9c:c6:d7:de:d6:89:
e0:ec:6f:35:24:b8:d9:11:12:42:7a:d0:af:31:71:e6:99:f1:
23:ba:a4:39:9d:b1:e2:5b:21:3d:4b:cd:fb:54:49:a7:0e:76:
28:f4:8c:98:6d:4b:df:db:73:de:63:6e:db:77:02:94:8e:00:
eb:07:da:8d:5f:c0:b8:32:cd:d6:4c:6e:fc:19:66:22:20:a3:
6c:b7:e6:61:22:ee:22:b3:72:82:4b:58:4f:8e:c8:2b:74:15:
f5:af:e9:01:0e:d9:55:9f:0a:e5:d0:e0:a6:09:b9:6f:18:02:
22:4d:2f:bf:6c:24:5e:92:d1:45:8b:aa:c5:36:7b:ee:22:c9:
7a:d5:0e:a2:4e:39:c1:8b:3b:2c:ca:37:ac:8f:c9:65:bc:57:
55:c3:bf:b5:ce:03:e9:24:52:0d:32:c3:00:d0:5c:bf:3f:bf:
28:a3:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:01:26 2026 by rpki-client