Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210773.roa
File: AS210773.roa (raw, json)
Hash identifier: DTqzsaacDtZxxWRCeZYYLzKRQ0eIi3OL5loWujXgkVA=
Subject key identifier: FA:3E:47:74:17:FD:71:DE:DE:ED:E1:F8:C0:4D:E3:B1:DD:6F:A0:4F
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5BCEC11FB6E24DEE6358FE3973396FEDD647C5AB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210773.roa
Signing time: Wed 16 Jul 2025 05:20:01 +0000
ROA not before: Wed 16 Jul 2025 05:15:01 +0000
ROA not after: Wed 15 Jul 2026 05:20:01 +0000
asID: 210773
IP address blocks: 2a14:7581:3800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ce:c1:1f:b6:e2:4d:ee:63:58:fe:39:73:39:6f:ed:d6:47:c5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 16 05:15:01 2025 GMT
Not After : Jul 15 05:20:01 2026 GMT
Subject: CN=FA3E477417FD71DEDEEDE1F8C04DE3B1DD6FA04F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:80:c2:4a:20:3a:90:49:08:0f:10:5a:1a:
7d:2f:5b:54:84:fd:39:80:c6:9f:20:ed:5a:aa:d2:
2b:80:70:85:9c:12:9f:17:6d:1d:bf:66:66:78:11:
df:54:7d:c2:ce:a0:3a:06:b6:be:c8:6d:99:e0:99:
80:e0:4b:1c:2e:be:82:c6:fc:37:bd:98:00:8f:03:
3d:5a:2c:75:00:e2:ab:eb:1a:1a:d6:fc:67:5d:1b:
68:cd:79:0e:e9:22:20:aa:3e:ff:1c:da:e7:9b:f3:
b4:b0:8b:62:3b:df:ae:1f:e6:9f:c9:52:21:e2:31:
1b:41:66:02:22:8b:ec:5f:58:39:df:09:9e:78:10:
6a:b0:99:d3:e0:35:03:ca:99:8c:65:e2:b8:76:8f:
62:2f:a8:d7:16:d9:a8:2b:a6:d3:2e:a6:4f:c3:a3:
3b:f6:14:bc:89:d2:d3:7e:63:ad:d1:00:a8:fa:cc:
fd:02:ca:07:23:28:ed:10:2b:e2:66:00:2f:3d:c3:
09:5d:05:6f:86:1d:24:ae:03:b1:4b:ff:19:80:81:
9e:0b:6c:48:bb:7a:f9:13:40:27:b8:e5:f6:c0:86:
2a:d7:89:27:7d:11:18:54:1b:9d:be:6c:76:3b:2c:
54:1d:c5:1c:c3:f8:95:6d:1e:cc:95:c2:d0:9a:4c:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3E:47:74:17:FD:71:DE:DE:ED:E1:F8:C0:4D:E3:B1:DD:6F:A0:4F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3800::/40
Signature Algorithm: sha256WithRSAEncryption
01:5d:51:9b:e2:b9:d0:c7:0b:7b:96:7f:57:fc:03:e8:2a:e7:
7a:ef:83:48:b9:5a:9a:55:4a:4d:9d:e6:14:2f:96:b3:1c:30:
c7:5c:20:7c:6c:d3:9a:b2:65:04:29:86:1a:05:84:86:aa:90:
f1:e3:fd:cd:4d:23:a5:17:64:85:02:64:c1:be:2f:02:0d:5a:
cb:03:3d:89:51:06:6f:3b:5c:fe:ed:f8:54:0a:ea:71:75:b8:
d1:c6:94:83:63:77:f9:e4:e2:29:81:88:7e:1f:21:78:aa:b9:
f5:67:81:af:e4:f3:80:44:99:d1:61:b1:2a:86:d0:ee:d6:9f:
34:61:09:33:2d:f7:05:8f:9b:08:9f:3a:bc:02:b3:81:b6:8f:
b3:cf:78:80:94:ce:4d:19:d4:90:00:68:0b:c9:88:79:2e:8b:
ba:50:f4:9a:49:43:ff:65:58:cb:4c:8a:da:46:fd:a2:c1:54:
94:bf:f6:a5:e0:48:13:33:4e:dc:d0:8c:d7:0a:bd:f8:61:e6:
fc:1f:a1:e6:c7:d3:17:e8:58:79:8c:aa:81:f9:3f:4e:1b:71:
ab:39:6b:68:59:b0:14:65:e2:f7:46:60:7e:bc:f2:eb:a9:f2:
7e:08:82:f8:a9:6e:ce:13:7a:eb:68:56:ad:24:60:e1:6f:3e:
f4:1e:e1:bd
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUW87BH7biTe5jWP45czlv7dZHxaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTA3MTYwNTE1MDFaFw0yNjA3MTUwNTIwMDFaMDMxMTAvBgNV
BAMTKEZBM0U0Nzc0MTdGRDcxREVERUVERTFGOEMwNERFM0IxREQ2RkEwNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYYDCSiA6kEkIDxBaGn0vW1SE
/TmAxp8g7Vqq0iuAcIWcEp8XbR2/ZmZ4Ed9UfcLOoDoGtr7IbZngmYDgSxwuvoLG
/De9mACPAz1aLHUA4qvrGhrW/GddG2jNeQ7pIiCqPv8c2ueb87Swi2I7364f5p/J
UiHiMRtBZgIii+xfWDnfCZ54EGqwmdPgNQPKmYxl4rh2j2IvqNcW2agrptMupk/D
ozv2FLyJ0tN+Y63RAKj6zP0CygcjKO0QK+JmAC89wwldBW+GHSSuA7FL/xmAgZ4L
bEi7evkTQCe45fbAhirXiSd9ERhUG52+bHY7LFQdxRzD+JVtHsyVwtCaTDQlAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQU+j5HdBf9cd7e7eH4wE3jsd1voE8wHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEwNzczLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1
gTgwDQYJKoZIhvcNAQELBQADggEBAAFdUZviudDHC3uWf1f8A+gq53rvg0i5WppV
Sk2d5hQvlrMcMMdcIHxs05qyZQQphhoFhIaqkPHj/c1NI6UXZIUCZMG+LwINWssD
PYlRBm87XP7t+FQK6nF1uNHGlINjd/nk4imBiH4fIXiqufVnga/k84BEmdFhsSqG
0O7WnzRhCTMt9wWPmwifOrwCs4G2j7PPeICUzk0Z1JAAaAvJiHkui7pQ9JpJQ/9l
WMtMitpG/aLBVJS/9qXgSBMzTtzQjNcKvfhh5vwfoebH0xfoWHmMqoH5P04bcas5
a2hZsBRl4vdGYH688uup8n4Igvipbs4TeutoVq0kYOFvPvQe4b0=
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:15 2025 by rpki-client