Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210538.roa
File: AS210538.roa (raw, json)
Hash identifier: Tg/D28npcJOVXRD0V6r4O6CXnUwuKJ3MlwnJdJ0lons=
Subject key identifier: 67:2B:1C:23:90:66:5E:DC:A8:8E:F4:B3:DE:48:EF:AE:15:6E:FB:6A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 22F3FF9139866A5CC308711E4E67A34247A05F52
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210538.roa
Signing time: Sun 12 Jul 2026 09:32:41 +0000
ROA not before: Sun 12 Jul 2026 09:27:41 +0000
ROA not after: Sun 11 Jul 2027 09:32:41 +0000
asID: 210538
IP address blocks: 2a13:9500:1a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f3:ff:91:39:86:6a:5c:c3:08:71:1e:4e:67:a3:42:47:a0:5f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 12 09:27:41 2026 GMT
Not After : Jul 11 09:32:41 2027 GMT
Subject: CN=672B1C2390665EDCA88EF4B3DE48EFAE156EFB6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:f9:0a:99:68:03:5e:d9:45:42:6a:2c:de:
af:de:8d:ba:ce:b4:c8:87:c4:ca:c8:ac:ba:88:1f:
14:d1:07:67:9c:ef:41:9b:53:54:10:d6:53:bf:a0:
c9:53:cd:5a:32:bc:35:43:fd:cf:20:ad:4f:dc:e0:
ee:52:9a:8a:a3:fb:b5:72:47:f6:16:c0:b0:ca:ab:
01:90:34:5c:dc:62:2b:8a:30:34:83:07:f6:4e:1c:
bc:88:34:76:89:84:7c:ab:cd:a9:f7:01:63:19:2a:
30:fd:07:7e:71:47:2d:36:bd:16:73:b2:b4:e8:85:
2e:e7:1b:35:94:80:89:40:00:27:be:97:14:0e:c9:
06:41:be:64:0f:28:b9:61:3b:9d:23:ce:9e:8d:8f:
f1:0e:27:09:e4:0b:66:ee:d5:db:8d:4b:dd:83:24:
b1:d7:e2:61:87:ac:59:4e:0b:74:68:af:8f:42:e9:
ee:b1:98:ee:07:f7:60:9f:5f:d7:41:a1:38:95:01:
a8:25:fb:67:28:d8:07:e9:3e:89:7a:9a:58:da:fb:
63:24:49:3b:6a:66:b5:30:2f:e5:af:6d:5d:25:46:
23:d6:f1:ae:42:04:c6:4f:98:fb:c2:da:3a:f9:24:
45:5d:f5:16:60:7a:12:f6:fa:59:5e:98:45:40:85:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2B:1C:23:90:66:5E:DC:A8:8E:F4:B3:DE:48:EF:AE:15:6E:FB:6A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1a4::/48
Signature Algorithm: sha256WithRSAEncryption
81:c7:e1:d3:17:7c:4e:52:1f:38:23:82:f7:f9:29:82:0b:29:
f0:b0:e7:b6:9b:cd:1d:b4:51:a3:0b:4a:41:94:e1:b3:2b:f5:
05:82:58:e5:ce:b5:6e:11:3d:06:db:92:a5:99:13:ad:1f:c9:
04:5f:b7:66:2c:7e:10:3f:b5:1e:98:29:4d:35:a8:d8:8a:a9:
87:4d:b0:7d:ac:60:c6:4b:41:6a:9b:35:7c:b8:a4:e7:7c:95:
e6:7b:db:3a:d6:aa:02:83:75:27:d2:1b:2d:0a:bd:4c:13:45:
b3:8a:7e:bc:cd:27:a0:43:20:b3:a4:ba:e8:b4:2e:9f:31:32:
d4:cc:19:1e:a8:24:4d:48:3a:bf:a2:ae:0a:47:15:c0:e2:49:
97:74:94:ba:43:1a:f5:64:e2:3f:cd:dc:43:de:62:36:da:c5:
60:b2:8e:d0:b6:78:64:90:88:54:ce:c5:ca:ff:39:14:99:dc:
fd:52:d4:e6:a6:61:15:15:42:a5:7c:14:ae:97:e8:a2:d2:42:
b8:40:87:ce:cd:3c:c4:bd:c4:bc:b7:07:1f:0c:3f:6b:bb:bb:
1d:e1:f4:26:bb:f7:54:34:02:5a:b3:4a:6f:af:f0:40:7f:2e:
10:9c:d5:68:4e:9d:54:02:ae:3d:49:5e:b0:0d:75:ab:4a:80:
fd:4a:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:54 2026 by rpki-client