Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210542.roa
File:                     AS210542.roa (raw, json)
Hash identifier:          BzNd5BlGXe/WNcyf5cnrJ0/0FF87iANfem1HWZwwrNU=
Subject key identifier:   B4:CA:4F:97:B5:FC:B1:43:38:C7:02:BD:E6:C0:79:70:67:03:2E:13
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       6FB0182AD51F78DF107ACC71B73DF031AD7AADE1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210542.roa
Signing time:             Tue 19 May 2026 15:47:15 +0000
ROA not before:           Tue 19 May 2026 15:42:15 +0000
ROA not after:            Tue 18 May 2027 15:47:15 +0000
asID:                     210542
IP address blocks:        146.103.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b0:18:2a:d5:1f:78:df:10:7a:cc:71:b7:3d:f0:31:ad:7a:ad:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: May 19 15:42:15 2026 GMT
            Not After : May 18 15:47:15 2027 GMT
        Subject: CN=B4CA4F97B5FCB14338C702BDE6C0797067032E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5f:15:32:09:aa:40:7d:83:48:99:30:05:9f:
                    c5:5e:51:d9:c0:cf:d8:ca:f9:52:1a:19:fa:66:9b:
                    94:ab:a5:21:14:70:38:50:b4:5a:f4:42:47:7d:67:
                    eb:d9:d5:e4:46:b2:87:83:3a:d9:1f:3c:db:1b:51:
                    23:3d:93:8b:ae:10:61:e6:d9:63:2c:cb:7c:c6:4a:
                    4f:4c:d4:5d:76:18:f4:26:9b:5d:e6:91:8d:b7:9c:
                    f7:f1:95:cf:39:8c:83:11:a7:c4:bd:c0:d0:e8:e3:
                    3b:4a:8d:4a:f4:4b:12:9c:e2:89:ba:6d:60:6b:c9:
                    d5:79:b5:51:41:d0:ba:4b:3b:26:75:a3:91:76:de:
                    71:eb:10:c7:b9:9b:5e:d3:16:f8:87:29:88:d1:01:
                    9c:d2:ae:6e:bd:ea:71:13:65:3c:90:13:ae:de:d4:
                    99:84:ec:10:2a:d5:9d:36:f9:87:33:c9:0f:3b:70:
                    7e:90:7f:2a:cb:cc:8a:3e:b9:64:ce:1c:63:7f:d9:
                    66:bf:84:e3:e5:ba:55:99:6e:ad:75:e1:ee:78:db:
                    3c:f7:da:ea:27:b1:aa:fa:7b:1f:49:d8:5e:4e:b8:
                    bf:a2:32:24:f1:e5:a0:bc:34:7d:68:90:31:58:65:
                    0a:ef:d2:29:7c:7d:0e:04:9f:73:81:54:71:73:c4:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CA:4F:97:B5:FC:B1:43:38:C7:02:BD:E6:C0:79:70:67:03:2E:13
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210542.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.103.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:fc:b1:33:53:57:d5:81:3e:24:a9:c9:76:67:d3:88:bc:
         fa:82:eb:b6:fd:ab:55:9b:9b:89:73:b0:ea:f9:6e:8f:83:10:
         8e:78:57:34:4e:17:92:44:d8:f4:bc:b3:4f:49:2d:04:8d:ae:
         bb:07:7d:37:4a:fd:f9:73:ca:e1:17:34:d1:60:04:57:08:ff:
         be:7d:93:bb:31:da:a9:9e:21:c7:7b:11:19:d0:d0:c0:cf:aa:
         6e:a1:a1:57:2d:de:8e:fd:3c:c6:e2:e4:2a:89:e1:86:d2:b7:
         4d:8a:7f:d6:05:c7:cc:dc:a1:d1:4e:45:0a:e6:eb:e4:a2:42:
         c5:c0:fe:10:68:1c:7c:c7:77:49:1a:d0:07:ce:41:5e:7c:e0:
         37:86:e8:d2:4d:06:75:29:9a:42:b9:15:6f:63:8c:9c:3b:32:
         5b:19:96:02:92:a5:96:0d:cb:a2:d3:7c:78:43:6e:3a:b5:3b:
         c6:0e:35:47:97:b3:ab:f1:f0:01:0b:20:9a:bf:64:95:0c:df:
         b7:ee:16:95:24:df:b7:07:ab:90:69:c8:a4:6c:1e:93:c7:45:
         6d:04:46:e6:67:15:ea:eb:9c:8d:a1:e3:e0:44:94:84:6b:fa:
         c3:f0:19:c9:0c:5e:c7:dc:29:b7:68:cd:b4:cc:b3:25:c2:4a:
         60:41:f8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----