Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210176.roa
File: AS210176.roa (raw, json)
Hash identifier: xVOPjjPVvzK8wBy37BDDIA/gcCekrW7sdbG1SUfh2qM=
Subject key identifier: D2:50:6D:4B:CF:4A:69:6A:D7:83:B3:67:8F:E0:47:21:78:6C:96:EF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 10A8C2DFD1FBF534DE0AA12FCE6B6032D30EEE35
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210176.roa
Signing time: Thu 22 Oct 2026 08:18:11 +0000
ROA not before: Thu 22 Oct 2026 08:13:11 +0000
ROA not after: Thu 21 Oct 2027 08:18:11 +0000
asID: 210176
IP address blocks: 64.239.69.0/24 maxlen: 24
66.132.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a8:c2:df:d1:fb:f5:34:de:0a:a1:2f:ce:6b:60:32:d3:0e:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 22 08:13:11 2026 GMT
Not After : Oct 21 08:18:11 2027 GMT
Subject: CN=D2506D4BCF4A696AD783B3678FE04721786C96EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:02:10:22:64:ff:d3:2a:2a:d2:d5:1a:2d:
28:2f:6f:6a:62:2a:de:ac:fe:fa:7c:77:b2:7c:7d:
00:2d:da:b3:28:eb:25:17:0a:4a:fd:e0:53:97:cf:
6a:e6:83:5e:6e:fe:ed:eb:71:5e:0e:49:84:7b:ec:
ec:32:c1:70:1f:fa:1a:4d:cd:31:93:0e:e2:a3:9d:
d5:ff:21:fc:cd:ab:69:a0:a2:a9:ac:3f:2f:51:af:
86:ee:02:62:03:6a:72:71:6e:96:9c:cc:c8:3c:c1:
18:21:eb:2c:7a:65:b2:2f:fc:71:6a:0f:96:4e:c0:
56:c2:c8:3b:cd:4e:9f:b2:ab:9b:e3:29:1d:b2:20:
ee:53:8c:b7:bf:2a:26:6d:1e:12:6c:a3:30:8a:ce:
1d:92:59:13:15:93:60:fe:ff:92:6c:93:4a:61:34:
d5:e4:16:1f:51:5c:d4:64:7a:47:80:cb:56:d9:80:
c4:01:b8:d3:2f:8e:25:76:91:85:09:92:98:8e:d1:
99:75:46:fe:0e:4f:0a:dc:53:cb:0e:38:9a:3c:e1:
4c:4e:68:f9:a9:9c:34:ce:39:99:db:7d:f9:5c:3f:
79:c5:a3:49:1d:84:bf:f2:22:d4:65:33:66:52:ac:
4a:e2:99:20:8f:bc:9d:cc:86:ee:9b:1f:4d:24:23:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:50:6D:4B:CF:4A:69:6A:D7:83:B3:67:8F:E0:47:21:78:6C:96:EF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210176.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.239.69.0/24
66.132.146.0/24
Signature Algorithm: sha256WithRSAEncryption
33:47:d3:22:4d:88:63:b1:4f:22:8c:c4:3f:23:86:0e:84:fd:
26:6d:ee:65:86:0e:c9:2e:85:5a:13:eb:43:79:36:36:0d:6e:
23:39:c0:d3:0d:1a:48:72:93:85:eb:43:bd:ac:7f:1e:35:ff:
64:02:8b:22:cc:d3:63:46:da:57:91:0b:8c:72:93:4c:dc:e2:
ce:77:49:0f:84:d6:7a:48:e0:ec:82:ec:cb:9d:95:f8:2f:af:
45:72:6c:4f:a1:8b:7b:65:ec:ea:86:ba:a9:07:08:54:93:dc:
b1:70:9b:18:27:6f:00:7c:3a:fe:1f:99:f3:2f:aa:02:66:0a:
1e:21:c9:f2:3a:14:5f:81:b4:86:6f:89:9b:9f:cb:e0:84:5e:
d5:b9:37:75:5a:de:5f:71:86:7a:3d:9e:2e:ee:2f:2f:94:f6:
f7:82:6e:32:2a:89:f6:e0:6b:34:26:ef:5c:7d:0e:bc:a3:fa:
e9:c7:89:e9:5f:4c:bd:22:03:8a:6e:e5:0d:1b:00:7f:e1:74:
12:23:53:0a:b2:a5:3b:a8:05:70:d4:32:53:c3:48:94:79:d7:
ae:ce:a4:6f:ed:f0:0b:3d:6f:a3:e2:e7:6a:58:cf:1d:b7:0b:
3b:9b:6f:11:21:9d:bd:73:37:77:4b:6b:8a:f7:5a:cf:43:76:
25:41:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:10:52 2026 by rpki-client