Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: 8BX7EuoDXgZYkhCFcOSSqZlx9pFlibM0tRhyhlJVEyA=
Subject key identifier: 5C:47:F0:84:D1:E4:2E:0E:5A:04:59:16:A7:7E:B2:96:AC:12:0B:24
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1FDB25DEAA131C1E7C0161209E2D502DD0DDA312
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
Signing time: Fri 03 Jul 2026 07:12:45 +0000
ROA not before: Fri 03 Jul 2026 07:07:45 +0000
ROA not after: Fri 02 Jul 2027 07:12:45 +0000
asID: 10753
IP address blocks: 82.21.210.0/24 maxlen: 24
82.21.216.0/24 maxlen: 24
82.21.234.0/24 maxlen: 24
82.22.250.0/24 maxlen: 24
82.25.225.0/24 maxlen: 24
82.25.250.0/24 maxlen: 24
82.26.234.0/24 maxlen: 24
82.26.250.0/24 maxlen: 24
82.27.210.0/24 maxlen: 24
82.27.220.0/24 maxlen: 24
82.27.250.0/24 maxlen: 24
82.29.239.0/24 maxlen: 24
82.29.240.0/24 maxlen: 24
82.38.23.0/24 maxlen: 24
82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
82.38.105.0/24 maxlen: 24
82.38.215.0/24 maxlen: 24
82.39.136.0/24 maxlen: 24
178.83.82.0/23 maxlen: 24
178.83.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:db:25:de:aa:13:1c:1e:7c:01:61:20:9e:2d:50:2d:d0:dd:a3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 3 07:07:45 2026 GMT
Not After : Jul 2 07:12:45 2027 GMT
Subject: CN=5C47F084D1E42E0E5A045916A77EB296AC120B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:63:35:60:0e:6d:51:82:43:ce:ae:35:49:
3e:2a:38:1c:81:ed:c8:9f:00:03:a4:ca:8b:c3:b9:
85:ad:79:eb:3e:af:53:93:cd:d2:86:1d:fc:0e:54:
a9:a2:65:8a:56:ad:89:8f:f0:9a:a1:33:57:3a:ef:
e9:fa:50:5f:05:98:91:94:6d:76:87:a9:3a:c4:3e:
f8:53:bc:d4:23:62:2b:f2:32:bc:d2:57:2c:05:d4:
9d:54:6d:e8:23:53:62:ec:ee:8d:c9:13:1b:61:4e:
78:06:06:aa:22:8e:d7:80:62:ff:fe:e3:39:d9:e3:
27:82:59:ae:ae:71:cb:52:5c:7c:df:cc:81:f7:d4:
92:91:c7:2d:ea:bc:59:87:01:37:82:47:b7:61:e1:
f8:c2:6b:a5:b4:b7:a4:78:71:37:2b:bd:14:09:f2:
40:6b:fc:2a:70:ed:09:06:45:36:cf:d6:fb:90:31:
5e:89:fd:0e:28:7f:ed:d5:2c:ed:61:25:19:ee:5c:
37:1f:d2:23:25:76:4d:d8:d1:5d:30:c9:2f:4f:8b:
c3:bc:cb:a9:ac:3f:01:61:e8:a8:8f:4b:b1:45:26:
36:22:30:d0:9f:e7:1a:19:8e:84:6c:3f:52:bd:52:
13:54:22:e1:1b:78:a8:33:cf:8a:bf:e1:f0:4e:9c:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:47:F0:84:D1:E4:2E:0E:5A:04:59:16:A7:7E:B2:96:AC:12:0B:24
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.210.0/24
82.21.216.0/24
82.21.234.0/24
82.22.250.0/24
82.25.225.0/24
82.25.250.0/24
82.26.234.0/24
82.26.250.0/24
82.27.210.0/24
82.27.220.0/24
82.27.250.0/24
82.29.239.0-82.29.240.255
82.38.23.0/24
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
82.38.105.0/24
82.38.215.0/24
82.39.136.0/24
178.83.82.0/23
178.83.171.0/24
Signature Algorithm: sha256WithRSAEncryption
65:40:6c:65:3f:c3:14:0a:ed:93:bd:1d:2d:53:e7:75:71:b3:
3d:d4:ff:54:0c:55:1c:73:b0:4b:d5:c6:3b:c2:ac:68:5a:e0:
2e:fb:b3:7d:09:fd:1b:5a:bb:cb:2d:0f:75:96:6b:8d:e1:e5:
25:c0:81:44:22:3d:42:a0:a5:a8:ba:79:0d:0a:5a:4c:7e:18:
62:0c:77:f5:d1:d5:f0:9c:42:ea:c2:0e:13:48:47:5d:7c:c3:
58:59:39:97:cc:fe:74:5b:f4:88:65:b7:2f:ed:8f:6f:f6:be:
2c:9d:61:22:76:ff:52:f4:b7:44:90:9b:92:af:b7:5a:03:12:
08:0a:c8:7a:61:e8:ef:e8:32:2f:b5:f7:6f:ff:c1:49:7b:c3:
0b:29:ff:0e:04:70:66:d4:19:bf:87:65:3d:9d:dd:88:5b:22:
f4:e6:5a:22:6c:74:4a:34:60:45:11:12:9c:ec:6c:f5:d6:6b:
e0:e5:6f:c3:90:95:5b:3c:7a:fc:27:c8:25:52:29:41:a8:3e:
e1:00:ce:c0:b8:1a:73:ba:d8:75:ed:5f:38:ca:a3:9c:fb:7c:
83:76:e2:c4:4b:10:6b:38:a5:06:ff:80:4a:84:90:bb:00:64:
d3:28:4a:57:9f:90:95:ff:f7:f6:39:9f:47:ab:02:f6:4d:e0:
2e:88:93:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUH9sl3qoTHB58AWEgni1QLdDdoxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MDMwNzA3NDVaFw0yNzA3MDIwNzEyNDVaMDMxMTAvBgNV
BAMTKDVDNDdGMDg0RDFFNDJFMEU1QTA0NTkxNkE3N0VCMjk2QUMxMjBCMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/mM1YA5tUYJDzq41ST4qOByB
7cifAAOkyovDuYWtees+r1OTzdKGHfwOVKmiZYpWrYmP8JqhM1c67+n6UF8FmJGU
bXaHqTrEPvhTvNQjYivyMrzSVywF1J1UbegjU2Ls7o3JExthTngGBqoijteAYv/+
4znZ4yeCWa6ucctSXHzfzIH31JKRxy3qvFmHATeCR7dh4fjCa6W0t6R4cTcrvRQJ
8kBr/Cpw7QkGRTbP1vuQMV6J/Q4of+3VLO1hJRnuXDcf0iMldk3Y0V0wyS9Pi8O8
y6msPwFh6KiPS7FFJjYiMNCf5xoZjoRsP1K9UhNUIuEbeKgzz4q/4fBOnNYDAgMB
AAGjggKOMIICijAdBgNVHQ4EFgQUXEfwhNHkLg5aBFkWp36ylqwSCyQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTA3NTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgaMGCCsGAQUFBwEHAQH/BIGTMIGQMIGNBAIAATCBhgME
AFIV0gMEAFIV2AMEAFIV6gMEAFIW+gMEAFIZ4QMEAFIZ+gMEAFIa6gMEAFIa+gME
AFIb0gMEAFIb3AMEAFIb+jAMAwQAUh3vAwQAUh3wAwQAUiYXAwQBUiYqAwQBUiYu
AwQBUiZQAwQAUiZpAwQAUibXAwQAUieIAwQBslNSAwQAslOrMA0GCSqGSIb3DQEB
CwUAA4IBAQBlQGxlP8MUCu2TvR0tU+d1cbM91P9UDFUcc7BL1cY7wqxoWuAu+7N9
Cf0bWrvLLQ91lmuN4eUlwIFEIj1CoKWounkNClpMfhhiDHf10dXwnELqwg4TSEdd
fMNYWTmXzP50W/SIZbcv7Y9v9r4snWEidv9S9LdEkJuSr7daAxIICsh6Yejv6DIv
tfdv/8FJe8MLKf8OBHBm1Bm/h2U9nd2IWyL05loibHRKNGBFERKc7Gz11mvg5W/D
kJVbPHr8J8glUilBqD7hAM7AuBpzuth17V84yqOc+3yDduLESxBrOKUG/4BKhJC7
AGTTKEpXn5CV//f2OZ9HqwL2TeAuiJN1
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:18 2026 by rpki-client