Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS210751.roa
File: AS210751.roa (raw, json)
Hash identifier: XelIrL48wUmjcNpDU/byI+43sYooEV6myaq20KYV/vU=
Subject key identifier: 5C:6E:1F:90:EE:36:BE:3F:4B:62:C3:91:BB:45:40:90:D4:F7:77:FA
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 541F3DD369870C5262F1180D57A12E81A9DA8A6B
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS210751.roa
Signing time: Wed 06 May 2026 11:39:33 +0000
ROA not before: Wed 06 May 2026 11:34:33 +0000
ROA not after: Wed 05 May 2027 11:39:33 +0000
asID: 210751
IP address blocks: 193.38.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1f:3d:d3:69:87:0c:52:62:f1:18:0d:57:a1:2e:81:a9:da:8a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: May 6 11:34:33 2026 GMT
Not After : May 5 11:39:33 2027 GMT
Subject: CN=5C6E1F90EE36BE3F4B62C391BB454090D4F777FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:70:b4:09:58:f8:a4:52:ff:69:db:b4:20:
3b:3b:79:d2:3e:19:ab:de:a6:b6:51:08:25:70:f3:
d6:ee:ac:53:82:d1:ce:43:b8:0b:e4:57:4a:36:f4:
22:82:20:98:a7:2d:d4:ed:02:52:35:5d:af:51:55:
98:85:7d:f5:b4:bb:ae:37:4f:a0:ca:18:d5:73:41:
43:02:40:6c:df:e4:1e:bb:cd:09:ed:43:90:6b:d6:
ea:9a:90:a6:80:ac:68:d6:4c:cf:ed:ac:d3:6f:35:
c6:69:74:df:04:df:6b:c8:8c:3b:b5:c9:8f:82:68:
71:57:5e:7c:10:ad:b1:06:9e:4e:8d:24:ec:fc:93:
57:80:ba:72:31:e1:89:16:48:64:ed:3e:9b:f0:22:
d8:22:bd:85:63:0e:2a:01:c5:2f:b2:2e:f5:5c:c3:
d7:aa:79:f0:c5:ae:c1:45:57:0e:ce:78:f8:c1:11:
f2:66:da:cb:1f:4d:43:1c:3b:b3:8d:2f:77:6a:2a:
f5:9d:4c:c1:85:c6:74:79:71:d8:72:89:1c:50:a0:
94:53:c8:05:be:65:f1:fb:8e:27:15:ca:7d:1b:db:
81:ed:74:38:54:c9:d0:98:44:c8:6e:a7:b6:24:71:
11:88:f2:28:89:21:ee:ed:22:ff:3c:dc:f9:b8:0f:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6E:1F:90:EE:36:BE:3F:4B:62:C3:91:BB:45:40:90:D4:F7:77:FA
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS210751.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.44.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:0c:f2:8e:1e:74:a5:c5:6a:54:b2:4f:a1:f0:06:b4:12:e8:
5d:c8:4c:23:61:6b:58:a3:c4:4d:57:1e:96:4b:e9:1f:26:d8:
14:4b:e2:32:ce:5e:f9:cd:78:5f:8e:d0:d5:4b:ee:03:bb:2f:
a6:77:9d:0d:58:ec:cc:b7:01:aa:47:89:e8:0b:d4:b9:d3:ab:
de:d5:05:cb:a0:2f:c1:82:0e:2f:b3:c0:45:8b:bf:e0:49:29:
bf:8f:a8:b3:67:65:5a:8e:00:f9:20:3a:c2:c3:19:19:a3:8f:
bf:5d:e3:ca:98:25:6e:c6:ed:11:e1:5e:c2:78:fb:c8:51:78:
53:22:4a:a4:7a:4b:59:5b:a4:4a:b9:77:7f:57:41:96:36:81:
0d:85:20:c6:e6:59:fc:f7:f0:3f:96:b4:f8:37:f5:ce:37:67:
98:f5:a8:1c:13:5f:9f:30:56:3a:b1:45:d2:a4:95:60:0a:19:
27:00:62:cf:3e:81:c4:4a:d7:69:84:b6:c5:36:f5:cb:d3:b7:
e9:ac:76:16:06:e2:91:d5:6b:be:b7:a0:d3:c1:25:fe:a8:b9:
c5:ab:ad:4a:2d:33:32:bf:e9:51:11:f9:b9:bd:38:01:fa:b8:
0f:c5:2a:f9:de:2f:ab:54:0c:06:89:ec:cc:19:d9:e5:cb:3b:
5d:4c:86:a1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVB8902mHDFJi8RgNV6EuganaimswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjA1MDYxMTM0MzNaFw0yNzA1MDUxMTM5MzNaMDMxMTAvBgNV
BAMTKDVDNkUxRjkwRUUzNkJFM0Y0QjYyQzM5MUJCNDU0MDkwRDRGNzc3RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtoXC0CVj4pFL/adu0IDs7edI+
GaveprZRCCVw89burFOC0c5DuAvkV0o29CKCIJinLdTtAlI1Xa9RVZiFffW0u643
T6DKGNVzQUMCQGzf5B67zQntQ5Br1uqakKaArGjWTM/trNNvNcZpdN8E32vIjDu1
yY+CaHFXXnwQrbEGnk6NJOz8k1eAunIx4YkWSGTtPpvwItgivYVjDioBxS+yLvVc
w9eqefDFrsFFVw7OePjBEfJm2ssfTUMcO7ONL3dqKvWdTMGFxnR5cdhyiRxQoJRT
yAW+ZfH7jicVyn0b24HtdDhUydCYRMhup7YkcRGI8iiJIe7tIv883Pm4Dx8ZAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUXG4fkO42vj9LYsORu0VAkNT3d/owHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjEwNzUxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSYs
MA0GCSqGSIb3DQEBCwUAA4IBAQDLDPKOHnSlxWpUsk+h8Aa0EuhdyEwjYWtYo8RN
Vx6WS+kfJtgUS+Iyzl75zXhfjtDVS+4Duy+md50NWOzMtwGqR4noC9S506ve1QXL
oC/Bgg4vs8BFi7/gSSm/j6izZ2VajgD5IDrCwxkZo4+/XePKmCVuxu0R4V7CePvI
UXhTIkqkektZW6RKuXd/V0GWNoENhSDG5ln89/A/lrT4N/XON2eY9agcE1+fMFY6
sUXSpJVgChknAGLPPoHEStdphLbFNvXL07fprHYWBuKR1Wu+t6DTwSX+qLnFq61K
LTMyv+lREfm5vTgB+rgPxSr53i+rVAwGiezMGdnlyztdTIah
-----END CERTIFICATE-----
Generated at Wed May 13 12:39:10 2026 by rpki-client