Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210476.roa
File: AS210476.roa (raw, json)
Hash identifier: ntQ5exuf8zb65eUVM+NIqtlRM9z5Dme/3q2zTqa6ShU=
Subject key identifier: 63:DF:C5:64:F6:59:8A:0B:45:62:2A:48:EC:CF:E1:FC:E2:1D:93:43
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 44AC531A1BE9E7E7D5BEC37DFFFE0A4FC9DA46A9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210476.roa
Signing time: Tue 30 Jun 2026 05:48:48 +0000
ROA not before: Tue 30 Jun 2026 05:43:48 +0000
ROA not after: Tue 29 Jun 2027 05:48:48 +0000
asID: 210476
IP address blocks: 2a13:9500:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ac:53:1a:1b:e9:e7:e7:d5:be:c3:7d:ff:fe:0a:4f:c9:da:46:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 30 05:43:48 2026 GMT
Not After : Jun 29 05:48:48 2027 GMT
Subject: CN=63DFC564F6598A0B45622A48ECCFE1FCE21D9343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:9c:51:5d:af:42:11:19:61:2d:90:24:bb:
70:34:02:ad:c7:4d:7c:b4:3f:88:7e:4c:a3:50:0b:
0b:54:61:e7:ac:d2:3b:9e:f4:0a:76:20:27:d5:d3:
a5:a0:8d:5c:3e:23:36:6f:50:8a:0b:f2:10:0b:c7:
ee:74:cc:74:2e:45:de:39:63:ba:d8:2c:a3:fd:11:
00:fd:1a:5b:33:4a:e8:fe:22:fd:42:c0:8d:51:74:
ae:70:7e:26:0a:f5:dc:c2:02:15:63:60:7a:03:80:
9f:86:51:33:c5:15:c0:59:6b:eb:50:6c:4e:70:3e:
e6:9f:7c:f6:f2:8b:20:95:01:b8:23:6c:55:97:3b:
e4:82:83:36:ba:42:0c:11:e3:d3:15:7f:e5:32:6b:
43:36:01:14:0d:cf:b3:ac:82:28:1f:82:87:8c:2a:
c5:49:07:4b:b3:2d:d5:e2:7f:a8:82:d0:03:f8:f3:
e3:c9:01:a3:c5:7a:08:7e:02:d4:c2:ce:d1:15:7e:
31:9a:13:9a:fc:3e:f2:bf:b2:c5:c4:c7:4c:37:d1:
76:54:e8:e6:b9:14:54:24:bc:ca:7a:70:74:66:fc:
68:49:07:39:cc:ac:87:61:9a:5d:53:d7:38:f9:ac:
7c:d6:60:fb:bb:3a:6e:9e:69:1b:17:54:bf:81:5c:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DF:C5:64:F6:59:8A:0B:45:62:2A:48:EC:CF:E1:FC:E2:1D:93:43
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:ce:f7:03:2f:bc:0a:18:05:b1:e4:28:51:b1:17:d2:04:af:
7d:f1:84:d5:e1:a0:6a:51:b5:1b:e7:44:c1:ac:2f:ba:be:57:
32:53:62:76:39:ed:3f:7a:c8:ef:f2:16:26:31:d4:ec:7b:e6:
60:45:e0:d5:0f:19:12:9d:31:10:43:a7:43:2f:bb:c7:e8:b8:
9b:ad:51:a9:f5:ee:8d:c0:25:75:46:ac:7d:d7:de:90:c2:84:
09:bb:50:a1:d9:76:ab:74:b7:2b:4b:a9:03:f3:f7:71:1d:06:
b3:d7:e7:d3:f6:3f:04:cf:80:94:77:70:c1:81:9a:3f:9e:3d:
58:72:dd:f9:d7:88:55:77:35:77:d6:b3:38:9b:45:d2:4f:16:
0d:4b:c5:c0:af:46:d3:56:45:d7:7d:bb:5c:d7:94:79:04:83:
1b:2f:4a:3b:94:55:64:5f:5c:4a:09:1a:15:82:4d:03:36:29:
ec:39:b2:4d:0a:a7:c8:a2:d5:4c:23:3a:43:16:36:95:9a:ad:
17:87:47:30:52:3a:c8:04:78:9a:f2:1b:69:11:1b:2f:18:f9:
66:69:43:00:50:a8:f1:20:5e:48:83:8a:e5:4c:ce:47:a7:08:
f3:1d:88:a5:dd:0e:86:23:44:52:c5:07:cb:8c:87:38:1d:4f:
35:fb:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:07:34 2026 by rpki-client