Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210097.roa
File: AS210097.roa (raw, json)
Hash identifier: 5I8XtJIPImVaVvh5Yo71IkBEcqz7zUpwm7ckuaIHT18=
Subject key identifier: 19:17:0B:EE:E7:BC:0A:BF:61:ED:53:F3:EA:E8:41:E1:29:7B:DA:1A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0D3B18B954B9995619CD6D3D6506E362CFECC276
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210097.roa
Signing time: Wed 14 Oct 2026 13:50:28 +0000
ROA not before: Wed 14 Oct 2026 13:45:28 +0000
ROA not after: Wed 13 Oct 2027 13:50:28 +0000
asID: 210097
IP address blocks: 82.24.4.0/24 maxlen: 24
178.83.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3b:18:b9:54:b9:99:56:19:cd:6d:3d:65:06:e3:62:cf:ec:c2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 14 13:45:28 2026 GMT
Not After : Oct 13 13:50:28 2027 GMT
Subject: CN=19170BEEE7BC0ABF61ED53F3EAE841E1297BDA1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9d:5f:43:1c:88:fb:47:fc:14:2b:55:b5:84:
80:80:b7:08:7d:66:71:93:24:2c:b5:d6:00:2f:c5:
03:dc:01:b4:bb:5c:62:b0:32:07:50:fa:36:32:55:
5a:1b:d5:e5:9c:09:b0:04:5b:f2:90:c2:b1:06:d6:
8e:d3:85:8b:5d:1d:33:4e:f7:95:88:ed:d9:bd:60:
b4:25:1b:17:44:8d:c1:86:0d:1b:44:7f:4d:bb:1a:
88:2e:a9:58:fd:46:b8:c8:4c:2a:e5:fa:70:62:47:
15:b8:1c:bd:6a:9f:65:ec:f6:1d:da:45:9f:f5:8a:
6b:10:e5:32:27:6c:2a:dc:c4:72:1e:de:ea:97:a9:
72:e9:68:cc:ea:b6:d2:80:70:da:e0:f0:19:e4:e2:
f7:a7:cc:78:15:4d:8f:46:fc:11:ca:83:72:2f:b5:
6a:42:83:b5:35:d1:d0:2c:9b:f6:3d:82:2c:f1:d7:
8f:f9:a7:98:68:0a:42:a6:72:06:61:d0:3b:2a:01:
ac:45:ab:49:8c:20:56:f3:30:7e:fc:ac:2b:43:64:
a1:15:60:14:98:a0:47:ff:98:ae:70:85:9e:a9:61:
d0:1a:d7:75:cf:79:c3:5d:30:4c:5b:92:ef:f0:3b:
82:d8:1f:5b:8f:f7:2f:a5:7c:90:bf:d7:ec:d7:35:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:17:0B:EE:E7:BC:0A:BF:61:ED:53:F3:EA:E8:41:E1:29:7B:DA:1A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210097.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.4.0/24
178.83.33.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c8:2e:3a:35:ce:99:a4:b1:79:e0:67:61:a7:dd:2b:0d:09:
e4:45:07:ff:69:5c:86:b1:1f:28:b0:da:20:02:65:36:bc:8b:
1f:87:2d:57:22:25:f1:d6:4f:14:f4:fc:1f:e1:26:1f:62:6c:
6c:59:eb:af:d2:f3:9c:19:46:96:c1:42:d9:e3:8b:f5:27:ff:
57:ff:66:ea:fc:51:41:3c:1a:13:aa:b3:26:88:94:40:d5:1c:
f6:29:1e:8b:6a:8a:6b:b4:8e:f7:93:ac:92:2a:7e:9d:88:0e:
7f:43:dc:22:a2:c8:c3:3a:59:93:2c:38:62:94:a0:f3:9b:02:
b6:67:80:eb:83:17:be:d0:e0:74:5f:94:7d:10:8d:d0:ae:ef:
90:26:41:a5:f8:9a:c3:f6:6e:72:6e:37:05:73:7b:06:9e:75:
71:02:2c:08:21:1b:3a:bb:79:68:8e:df:e3:7f:ad:71:59:ae:
70:f7:96:fb:e4:07:d1:f3:98:2c:75:0b:61:2a:a0:01:b7:bc:
85:ee:d4:0e:c9:ea:77:2c:cd:98:45:56:2c:b2:0e:bd:89:bd:
56:51:72:5b:96:f9:5b:d7:45:12:14:64:9b:e6:c8:6f:51:6d:
7c:9f:55:9e:eb:c6:7e:ad:35:0f:d9:f3:92:de:ad:0d:17:e6:
16:d0:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:59:51 2026 by rpki-client