Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210732.roa
File: AS210732.roa (raw, json)
Hash identifier: /MqKnKup0myrJeKM+9a+B5eTlAt4EhoXSszXjwqsclk=
Subject key identifier: B1:D0:F5:83:73:D5:FB:CB:25:41:46:EC:9C:3C:C7:42:A5:D8:74:A6
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3202E1FF0098ACF93E240456059CABB52E4B5A2A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210732.roa
Signing time: Fri 03 Jul 2026 20:49:06 +0000
ROA not before: Fri 03 Jul 2026 20:44:06 +0000
ROA not after: Fri 02 Jul 2027 20:49:06 +0000
asID: 210732
IP address blocks: 191.96.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:02:e1:ff:00:98:ac:f9:3e:24:04:56:05:9c:ab:b5:2e:4b:5a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 3 20:44:06 2026 GMT
Not After : Jul 2 20:49:06 2027 GMT
Subject: CN=B1D0F58373D5FBCB254146EC9C3CC742A5D874A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:4a:db:c4:fb:c0:5d:e2:5c:f2:d1:c7:24:
b4:60:72:86:c1:0b:8a:b3:95:07:81:44:b8:f3:64:
8b:a6:a3:e3:12:49:fe:5d:77:e9:a7:5e:90:bd:e8:
4d:e4:68:1b:cf:0b:b4:7f:46:1e:be:04:c9:e5:59:
3f:2f:b8:ae:5a:54:a8:7e:ab:ad:79:8d:96:d5:94:
2b:2f:80:f0:83:fa:c7:b1:3d:3e:42:ba:1f:5d:a3:
c7:d4:e8:ba:10:f0:4e:83:f9:62:57:8a:9a:91:f9:
f0:08:31:38:cb:e5:39:aa:09:50:e2:23:97:ed:c2:
df:9e:41:ba:53:e9:f9:c6:6a:53:28:35:59:a3:74:
ab:51:8b:6a:31:cb:63:d9:0a:01:77:c8:c6:51:27:
c4:12:06:88:5e:ce:d9:95:fc:d2:d6:e5:7e:93:e1:
af:96:b1:58:79:df:f6:67:e0:d0:0b:3c:a8:34:13:
10:59:4e:9b:42:4b:0a:86:48:d8:6c:e8:92:f8:83:
6a:ec:1f:91:6e:b4:9b:be:ca:ad:dc:20:b2:dd:20:
85:d3:16:1a:1f:d6:fb:6b:72:23:51:b1:77:36:9f:
52:c9:07:f5:22:a9:12:38:8b:95:8c:66:88:dc:a7:
b8:c3:21:4f:28:dd:ca:13:8b:ec:f3:6f:9a:00:34:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D0:F5:83:73:D5:FB:CB:25:41:46:EC:9C:3C:C7:42:A5:D8:74:A6
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.5.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c5:53:b9:f1:0c:55:f6:19:e5:3f:f6:f6:cb:06:ef:a0:30:
83:5b:f9:ae:32:fe:8e:0d:49:3f:39:49:88:4a:2e:41:1c:3b:
84:5d:01:6e:60:44:7b:50:1b:77:5c:a3:ee:58:1b:d2:7f:ab:
a1:8c:67:29:5b:ac:d6:d2:c2:09:ac:c6:ee:25:3b:b5:73:63:
7a:d6:a8:96:ba:46:48:1c:2a:c8:2b:cf:0b:71:2c:b0:60:83:
ef:0a:75:31:58:53:5d:05:83:38:dc:d4:42:56:34:5a:58:69:
c9:01:61:fe:d3:15:4a:ef:2b:3b:ac:66:ef:ea:c9:ff:1e:c6:
64:4d:d9:74:5f:59:50:7c:b4:59:e0:fb:67:3e:99:69:aa:7a:
ba:34:71:ef:2f:08:d0:0e:48:ef:cf:5a:3c:4a:27:45:a1:15:
fb:94:dd:b5:e1:83:b8:3f:8f:8d:dc:9c:a7:50:9e:03:89:f4:
3f:74:28:e4:b6:27:72:2f:5a:5e:ea:39:66:6b:ed:8a:c0:06:
6f:30:19:4f:3a:d1:6c:a9:49:ff:a4:0a:d1:76:f9:97:19:54:
91:75:37:73:29:f0:d9:fd:44:9c:a8:81:83:b0:fb:a1:38:5d:
58:bc:b1:7e:79:6e:1d:26:88:c8:7b:68:80:3c:d4:83:1f:ca:
a5:18:ae:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:39 2026 by rpki-client