Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210699.roa
File: AS210699.roa (raw, json)
Hash identifier: XZ6f2gvoXo0VhGzhnhpPQhiK9ihFWFQWge6WEo4ZSOQ=
Subject key identifier: 6B:63:6A:94:7C:7A:0A:D0:59:80:D0:92:68:1B:7C:14:C9:AE:36:7B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 161400A33CF35EEE246BBD9EC1F819E36803A028
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210699.roa
Signing time: Mon 15 Jun 2026 11:26:22 +0000
ROA not before: Mon 15 Jun 2026 11:21:22 +0000
ROA not after: Mon 14 Jun 2027 11:26:22 +0000
asID: 210699
IP address blocks: 82.26.80.0/24 maxlen: 24
2a13:9500:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:14:00:a3:3c:f3:5e:ee:24:6b:bd:9e:c1:f8:19:e3:68:03:a0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 15 11:21:22 2026 GMT
Not After : Jun 14 11:26:22 2027 GMT
Subject: CN=6B636A947C7A0AD05980D092681B7C14C9AE367B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:db:0a:32:ed:45:f1:c9:97:03:1b:4a:4b:da:
73:0c:5c:2a:e7:eb:5d:e3:38:7c:f2:cf:99:27:85:
d3:ab:d3:29:68:7b:a6:77:3f:89:9b:86:59:b8:38:
e5:7e:9a:3c:04:77:1d:72:a1:4d:ba:f1:f2:23:c7:
78:b1:1e:a3:e8:7e:8c:1d:1a:cd:e4:b4:d7:1c:9c:
39:bb:ac:9c:1a:bf:b5:c6:33:41:a7:03:1b:52:d0:
a3:e0:77:49:ae:a3:7b:1b:31:0f:11:a7:08:0a:b7:
a6:ae:dd:b9:ee:e7:13:fd:e9:c3:7d:2e:7c:e6:95:
11:0f:d8:78:62:00:ff:71:01:49:ec:48:cc:50:4e:
04:a1:c7:d1:27:1f:55:28:6a:a7:60:55:be:16:60:
37:06:3b:58:d9:31:5b:15:d0:30:7d:70:12:25:7c:
d6:d5:7f:ac:d1:8b:a3:2d:82:5b:b5:dc:ed:46:35:
4a:cc:36:9d:d8:fd:76:06:d0:1d:b8:2d:f2:af:fd:
02:1f:a7:30:26:af:e5:62:92:79:f9:66:b8:6f:60:
82:22:99:37:83:11:0d:75:ff:67:b8:cd:69:7f:0f:
a9:5c:d1:c3:7f:f0:66:7d:c4:b9:46:6c:48:0d:d8:
9f:5a:bb:a3:ac:02:51:b6:04:c8:60:f8:19:75:5e:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:63:6A:94:7C:7A:0A:D0:59:80:D0:92:68:1B:7C:14:C9:AE:36:7B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210699.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.80.0/24
IPv6:
2a13:9500:104::/48
Signature Algorithm: sha256WithRSAEncryption
68:74:cd:4e:b5:1c:60:3b:16:cb:89:4e:da:e1:77:df:d1:bb:
c9:a5:83:71:8b:0d:36:79:26:55:e8:60:1c:4f:af:3c:44:17:
4e:7f:7e:d8:9b:4a:f1:b5:b6:c0:8e:1b:68:b2:a1:36:3d:2a:
c7:fe:d2:69:f1:a6:e8:1b:71:1d:e9:1c:f9:cc:83:54:46:e8:
41:1c:73:c8:3a:97:01:0d:c1:03:7c:c3:1e:f6:2c:ba:0e:c9:
3e:cb:75:0c:8f:85:ed:aa:7b:a5:68:df:86:b9:3b:a8:9d:70:
5d:5c:b5:4d:d5:cf:7a:58:bc:9e:ae:46:c8:0a:5a:49:b0:fa:
70:59:3b:12:df:e8:f7:5a:60:e0:aa:fa:db:fd:50:40:e3:e3:
f6:2f:c7:88:63:06:b0:9c:fe:32:06:b2:67:6b:b5:27:ba:f7:
91:ed:d6:38:7d:e5:0e:98:aa:a8:94:c6:5f:2d:00:80:1b:f6:
46:2f:b7:77:0c:3f:0e:b6:30:32:4b:ab:88:c0:9d:8f:42:75:
f8:cb:c0:2d:ed:f9:09:c5:b6:c8:01:49:46:0c:41:2a:3f:0a:
7a:b5:f9:75:34:d7:20:88:0d:fb:42:3d:89:4d:2e:ef:da:41:
ef:8c:d4:d4:92:f3:75:1d:41:05:18:ad:d1:93:74:f6:11:79:
b1:02:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:37 2026 by rpki-client