Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210542.roa
File: AS210542.roa (raw, json)
Hash identifier: WvTzisGijPJPXU9xI4pUz5a196gcrxF7doSfR9YtH3Y=
Subject key identifier: 3A:C0:86:77:D8:F7:99:3E:DE:B5:C2:97:91:7E:A4:3F:44:01:11:EA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5B2AD84E926D6CFDFA5E878EB92F5D1782056997
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210542.roa
Signing time: Sat 08 Aug 2026 09:11:25 +0000
ROA not before: Sat 08 Aug 2026 09:06:25 +0000
ROA not after: Sat 07 Aug 2027 09:11:25 +0000
asID: 210542
IP address blocks: 146.103.16.0/23 maxlen: 24
168.222.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:2a:d8:4e:92:6d:6c:fd:fa:5e:87:8e:b9:2f:5d:17:82:05:69:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 8 09:06:25 2026 GMT
Not After : Aug 7 09:11:25 2027 GMT
Subject: CN=3AC08677D8F7993EDEB5C297917EA43F440111EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:18:1b:41:1c:3e:d6:87:a7:ab:c3:d7:b8:
9f:e5:41:e4:68:46:98:d4:c6:19:57:7a:b8:5b:28:
27:2e:e1:0c:5b:9c:f5:d7:72:f3:ea:6e:3e:bd:1e:
be:5f:86:ca:5b:b4:85:3a:5e:98:e8:67:0d:df:e4:
4f:a3:2d:54:fa:f8:0b:ed:c9:e3:83:f0:81:02:c5:
d3:67:c4:1d:9b:3d:36:42:3a:b8:37:c6:58:a2:a5:
f4:22:cc:6a:8c:0a:8d:fb:54:20:b7:86:b7:dd:29:
be:53:d4:6b:e1:2a:52:d9:6d:89:56:b2:b1:62:c1:
ef:67:5d:17:d1:02:1b:5f:ff:d7:49:4d:90:70:4a:
db:e8:df:9c:98:a8:cd:89:bd:1b:b9:2b:8c:0a:1a:
0a:89:96:f9:2f:c1:8b:96:08:b5:6e:92:99:fd:ba:
d8:bc:ff:ce:ac:fd:b3:19:29:48:1c:a6:8f:eb:c5:
f1:67:ca:a7:8b:20:79:7b:ea:f0:a3:7f:6a:2c:a2:
da:cb:f6:70:b2:22:cb:86:fa:05:a9:e9:0a:cd:ab:
1a:0b:d7:f1:2a:1a:1d:af:a6:b7:b5:54:7a:44:30:
6a:cc:e8:06:7e:78:9b:fd:71:40:c1:98:51:7c:41:
07:cf:19:2d:6f:ec:96:a7:7f:77:29:b5:79:b8:db:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C0:86:77:D8:F7:99:3E:DE:B5:C2:97:91:7E:A4:3F:44:01:11:EA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.16.0/23
168.222.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:03:d0:c9:b4:c4:a3:df:f0:d8:8b:cf:e0:77:1e:e6:49:38:
02:76:52:d4:8d:3a:f3:eb:c2:a9:4a:bb:aa:a5:9f:f8:c3:35:
b5:95:9d:5b:c7:90:44:0d:ad:4e:79:16:59:2e:94:26:8b:ab:
07:6e:7c:e7:eb:57:b7:f8:f5:6f:4e:13:a6:cd:9e:70:18:25:
08:b6:e3:12:12:c9:49:46:1b:08:75:d1:45:26:ad:39:1d:63:
0c:b7:5f:cc:da:31:d6:4b:78:ad:a9:68:98:1a:73:fc:8b:e2:
e8:3c:ce:ec:6f:9b:d5:bf:8f:c8:bf:71:51:4a:7d:6d:87:ff:
e7:22:5c:66:98:bd:40:f6:e0:d2:e8:52:64:79:5c:b0:ae:f9:
4e:53:94:4b:33:48:d1:4f:2a:05:80:80:1a:df:b0:55:73:51:
c6:d5:05:92:29:2a:88:87:7f:b2:b4:76:16:f5:38:09:fb:ca:
41:e8:e8:77:22:14:0b:06:53:14:f6:2e:83:74:11:11:95:07:
6f:a6:71:14:de:f9:66:38:b1:1e:93:a2:49:51:17:12:59:09:
d9:95:82:93:ce:20:72:37:12:5f:b2:5f:28:15:38:2d:f3:0a:
8a:98:29:bf:77:41:e3:e3:d1:da:45:90:0e:d2:10:66:48:74:
9e:9a:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:39:38 2026 by rpki-client