Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210542.roa
File: AS210542.roa (raw, json)
Hash identifier: 5Jh8Bi9jgM1nZLQN6SbMGBCWCsWcBuGBnMAuOcT6G8s=
Subject key identifier: 6A:FD:AA:92:86:87:4E:3C:73:FF:27:26:43:B0:68:76:8C:89:73:DA
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1BD0AB23D834EA58B819C7BF81B1C69CECBFC6BF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210542.roa
Signing time: Mon 17 Aug 2026 00:49:29 +0000
ROA not before: Mon 17 Aug 2026 00:44:29 +0000
ROA not after: Mon 16 Aug 2027 00:49:29 +0000
asID: 210542
IP address blocks: 179.61.173.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.214.185.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.127.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.148.0/24 maxlen: 24
181.215.154.0/24 maxlen: 24
181.215.239.0/24 maxlen: 24
185.173.27.0/24 maxlen: 24
194.53.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d0:ab:23:d8:34:ea:58:b8:19:c7:bf:81:b1:c6:9c:ec:bf:c6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 17 00:44:29 2026 GMT
Not After : Aug 16 00:49:29 2027 GMT
Subject: CN=6AFDAA9286874E3C73FF272643B068768C8973DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:aa:03:69:f2:49:44:58:cd:d4:13:d2:39:
2f:f1:c1:50:ac:da:d3:63:54:01:9f:0e:ea:e0:4c:
b7:19:27:e7:dc:b6:f7:cd:fe:8a:6c:7a:df:6e:06:
c7:b0:4b:b9:42:63:00:e6:09:8c:8f:be:c3:0f:06:
e8:1d:4c:80:10:2b:4c:c1:f1:99:9e:6f:21:18:5a:
df:a4:c9:ea:fe:52:ad:f4:75:03:12:5e:97:64:16:
64:4f:9a:a8:05:6c:cc:a6:1a:22:fb:3a:6d:07:19:
43:2a:2b:40:60:88:8a:af:95:87:05:fe:48:c8:32:
d6:7b:7c:72:ec:5d:dd:21:ba:67:94:1f:8d:5a:66:
f8:93:af:82:bb:54:b4:df:8d:f3:6b:a4:f4:b4:d6:
d1:d4:1d:45:f4:eb:5e:5e:5f:ad:ef:22:ba:4e:a5:
ec:6b:b7:28:3e:07:d5:05:0c:e7:99:ac:72:37:df:
88:6f:ea:17:df:47:cb:02:ae:3c:fd:8f:38:ec:2c:
16:b3:81:10:11:ed:5a:5e:37:53:10:51:c1:f0:e9:
b3:46:8c:75:ab:87:73:2f:f2:70:e9:d4:b7:8c:56:
4a:f4:99:4d:19:ed:f2:19:99:51:2e:d6:ca:7d:6e:
4c:e8:c9:0f:6b:be:d3:9e:ce:5a:b0:d8:2a:8a:33:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FD:AA:92:86:87:4E:3C:73:FF:27:26:43:B0:68:76:8C:89:73:DA
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.173.0/24
181.214.33.0/24
181.214.75.0/24
181.214.185.0/24
181.214.250.0/24
181.215.127.0/24
181.215.136.0/24
181.215.148.0/24
181.215.154.0/24
181.215.239.0/24
185.173.27.0/24
194.53.142.0/24
Signature Algorithm: sha256WithRSAEncryption
94:48:6c:c0:07:da:0e:8d:f5:b0:76:21:e8:bd:47:3c:89:d6:
48:bb:b7:77:bc:46:96:1a:f1:5b:94:64:1c:26:fa:ff:59:e7:
bf:6d:aa:2a:50:b8:4e:e2:38:de:ad:0b:fa:68:5c:b7:c7:44:
d0:dc:85:dc:ba:ce:c9:b0:6d:aa:a5:03:d7:00:6c:a6:4c:9c:
9b:64:eb:67:3a:67:0c:44:58:80:4b:9b:a9:69:2d:6b:7e:40:
1e:7e:2d:ab:3a:d5:66:cd:65:e1:a8:a2:68:24:e6:63:c8:29:
b4:8d:99:e7:53:32:91:06:88:cf:75:9e:b0:ca:71:0c:c0:38:
22:53:82:9b:67:45:8a:e9:9a:50:32:48:ac:05:91:c4:b0:dc:
00:db:59:82:12:c4:61:f6:71:44:91:f5:41:e4:1a:25:eb:a1:
d9:f8:77:e3:d5:c0:e5:98:92:5b:a2:0a:6d:f7:19:1c:fa:d1:
dc:f1:f0:95:14:5c:bb:eb:70:16:eb:cb:45:ff:76:69:4a:e5:
50:42:c1:55:f6:73:5d:06:12:2b:3e:f6:44:b4:26:5e:98:af:
d5:0d:96:ee:74:3d:a9:81:95:61:af:8f:b1:c4:cc:a8:24:ac:
30:2f:1d:82:17:40:98:af:d8:58:fd:23:06:ee:34:10:ce:48:
67:a3:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:11:46 2026 by rpki-client