Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: yXY+rjdcKa0B9ZFNPm7Q+ghS8TcUIgl5M5Wsnavk454=
Subject key identifier: 6F:C6:8A:20:0B:A4:AA:ED:86:B0:37:C6:75:3D:30:5C:5C:56:FA:71
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 16EDB680357446658E0BBC2AF561EA6B599F7492
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
Signing time: Fri 15 May 2026 12:42:21 +0000
ROA not before: Fri 15 May 2026 12:37:21 +0000
ROA not after: Fri 14 May 2027 12:42:21 +0000
asID: 10753
IP address blocks: 82.21.210.0/24 maxlen: 24
82.21.216.0/24 maxlen: 24
82.21.234.0/24 maxlen: 24
82.22.250.0/24 maxlen: 24
82.25.225.0/24 maxlen: 24
82.25.250.0/24 maxlen: 24
82.26.234.0/24 maxlen: 24
82.26.250.0/24 maxlen: 24
82.27.210.0/24 maxlen: 24
82.27.220.0/24 maxlen: 24
82.27.250.0/24 maxlen: 24
82.29.239.0/24 maxlen: 24
82.29.240.0/24 maxlen: 24
82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
178.83.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ed:b6:80:35:74:46:65:8e:0b:bc:2a:f5:61:ea:6b:59:9f:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 15 12:37:21 2026 GMT
Not After : May 14 12:42:21 2027 GMT
Subject: CN=6FC68A200BA4AAED86B037C6753D305C5C56FA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:1b:7c:cb:64:0f:b4:fe:0f:92:f0:ba:1e:
11:03:68:9f:f5:9f:bd:55:47:cb:bd:af:2a:5e:48:
87:3a:0d:ef:27:a9:a3:91:16:87:d3:7f:4e:b5:03:
a0:b2:24:df:39:b8:f4:68:cb:8d:c9:f9:12:2a:4b:
5d:76:ea:1b:08:6f:ec:e5:99:b0:4f:a7:73:36:31:
64:df:99:4a:5f:ce:41:3a:29:23:4f:8b:33:46:59:
08:c6:8a:36:7f:f3:37:b7:60:2c:01:f9:a3:73:2d:
53:7d:f1:75:38:0a:58:80:e8:5a:d2:86:e7:54:79:
f2:6d:8c:67:9f:3c:21:e6:72:76:7b:2c:68:c9:66:
75:33:76:26:76:e4:fe:85:82:79:89:1d:3f:fe:80:
16:6b:37:c1:44:f3:d0:86:6a:e1:4a:fc:b2:06:b0:
39:87:da:5a:1f:a4:b2:3d:98:35:5e:71:28:43:2c:
0c:37:96:06:d6:d8:96:81:f3:66:86:84:bb:86:56:
17:ab:74:f8:9e:55:e1:4b:02:c7:9f:d9:af:ce:af:
38:68:ee:36:6a:60:f8:31:0b:45:06:4b:65:16:fe:
ba:6e:d9:56:99:97:eb:fc:e5:8f:10:93:a0:f1:b4:
88:60:e1:dc:74:09:60:75:3c:9c:06:ce:59:9f:58:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C6:8A:20:0B:A4:AA:ED:86:B0:37:C6:75:3D:30:5C:5C:56:FA:71
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.210.0/24
82.21.216.0/24
82.21.234.0/24
82.22.250.0/24
82.25.225.0/24
82.25.250.0/24
82.26.234.0/24
82.26.250.0/24
82.27.210.0/24
82.27.220.0/24
82.27.250.0/24
82.29.239.0-82.29.240.255
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
178.83.82.0/23
Signature Algorithm: sha256WithRSAEncryption
77:f4:05:16:09:7c:ab:98:66:05:d4:2f:0b:13:fc:ed:50:8a:
5e:9a:53:0a:b6:02:12:5c:18:b1:c3:8f:01:24:e9:97:19:9d:
81:bf:a3:50:30:3b:91:06:62:27:3e:b4:ea:a7:54:9a:9e:59:
8d:50:e1:71:cb:4f:25:c6:6f:54:23:d9:6e:a7:5a:4e:9b:1b:
1b:c8:ff:c8:a4:65:01:50:c5:ac:53:5e:e2:f4:a6:cd:d8:4e:
96:f9:7a:fa:c7:12:a7:d1:2c:5b:90:02:a7:50:0b:ae:3b:e2:
25:ea:3e:da:d1:43:31:e0:75:15:d3:a3:6a:19:fa:ad:99:97:
79:f5:79:1d:7a:92:ac:ef:bb:20:9c:1b:b4:9e:e9:dc:68:5b:
b8:27:37:7a:e1:a1:af:75:e0:02:9c:38:76:80:aa:bf:e8:4c:
e6:96:3b:2f:6a:0d:39:98:ac:41:7c:54:37:49:b6:36:dc:7d:
94:42:56:a2:7f:43:2d:a0:43:ce:ff:27:58:f7:91:88:9e:26:
66:28:4d:84:65:9e:83:4f:3e:29:d5:aa:5a:be:62:f2:18:23:
67:d5:1f:e9:d0:94:47:36:8e:8e:e7:cb:da:61:86:41:11:72:
36:5e:20:35:ec:ce:89:20:19:24:d9:8c:cd:e0:21:e6:f5:35:
38:bc:d1:df
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIUFu22gDV0RmWOC7wq9WHqa1mfdJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MTUxMjM3MjFaFw0yNzA1MTQxMjQyMjFaMDMxMTAvBgNV
BAMTKDZGQzY4QTIwMEJBNEFBRUQ4NkIwMzdDNjc1M0QzMDVDNUM1NkZBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRht8y2QPtP4PkvC6HhEDaJ/1
n71VR8u9rypeSIc6De8nqaORFofTf061A6CyJN85uPRoy43J+RIqS1126hsIb+zl
mbBPp3M2MWTfmUpfzkE6KSNPizNGWQjGijZ/8ze3YCwB+aNzLVN98XU4CliA6FrS
hudUefJtjGefPCHmcnZ7LGjJZnUzdiZ25P6FgnmJHT/+gBZrN8FE89CGauFK/LIG
sDmH2lofpLI9mDVecShDLAw3lgbW2JaB82aGhLuGVherdPieVeFLAsef2a/Orzho
7jZqYPgxC0UGS2UW/rpu2VaZl+v85Y8Qk6DxtIhg4dx0CWB1PJwGzlmfWKZZAgMB
AAGjggJsMIICaDAdBgNVHQ4EFgQUb8aKIAukqu2GsDfGdT0wXFxW+nEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTA3NTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgYEGCCsGAQUFBwEHAQH/BHIwcDBuBAIAATBoAwQAUhXS
AwQAUhXYAwQAUhXqAwQAUhb6AwQAUhnhAwQAUhn6AwQAUhrqAwQAUhr6AwQAUhvS
AwQAUhvcAwQAUhv6MAwDBABSHe8DBABSHfADBAFSJioDBAFSJi4DBAFSJlADBAGy
U1IwDQYJKoZIhvcNAQELBQADggEBAHf0BRYJfKuYZgXULwsT/O1Qil6aUwq2AhJc
GLHDjwEk6ZcZnYG/o1AwO5EGYic+tOqnVJqeWY1Q4XHLTyXGb1Qj2W6nWk6bGxvI
/8ikZQFQxaxTXuL0ps3YTpb5evrHEqfRLFuQAqdQC6474iXqPtrRQzHgdRXTo2oZ
+q2Zl3n1eR16kqzvuyCcG7Se6dxoW7gnN3rhoa914AKcOHaAqr/oTOaWOy9qDTmY
rEF8VDdJtjbcfZRCVqJ/Qy2gQ87/J1j3kYieJmYoTYRlnoNPPinVqlq+YvIYI2fV
H+nQlEc2jo7ny9phhkERcjZeIDXszokgGSTZjM3gIeb1NTi80d8=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:11:18 2026 by rpki-client