Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26210.roa
File: AS26210.roa (raw, json)
Hash identifier: JJkuRK8asMXe9V/RLBO5cwTba9J0w6M+fDomrDTKy1E=
Subject key identifier: 50:D3:D3:F7:44:27:65:2A:04:AB:DE:BD:7E:7B:AD:41:B7:C4:8A:80
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 050E22AE09FE6A60FE48A4B8021FD76D6FA01511
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26210.roa
Signing time: Thu 28 May 2026 14:47:17 +0000
ROA not before: Thu 28 May 2026 14:42:17 +0000
ROA not after: Thu 27 May 2027 14:47:17 +0000
asID: 26210
IP address blocks: 82.21.156.0/24 maxlen: 24
82.21.195.0/24 maxlen: 24
82.25.21.0/24 maxlen: 24
82.25.32.0/24 maxlen: 24
82.29.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:0e:22:ae:09:fe:6a:60:fe:48:a4:b8:02:1f:d7:6d:6f:a0:15:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 28 14:42:17 2026 GMT
Not After : May 27 14:47:17 2027 GMT
Subject: CN=50D3D3F74427652A04ABDEBD7E7BAD41B7C48A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:45:4d:24:cc:d1:db:1f:03:9d:ce:8e:b4:
c9:cb:a4:02:0c:04:71:c5:41:e3:51:41:4c:e4:be:
5b:34:b8:9c:d2:62:95:8f:42:e2:fe:6d:a5:3d:e2:
2e:f7:b8:56:4f:d5:5e:80:b5:c0:42:47:bd:d3:da:
36:b0:1e:96:6c:b1:f4:3c:a7:81:85:1e:21:21:00:
89:20:66:e9:69:83:7c:51:78:cf:6a:c4:a6:b2:be:
07:81:21:76:2a:42:a4:9f:85:81:bd:75:99:df:e8:
7e:42:3b:c8:2b:8f:bd:6d:c1:45:bf:99:2c:9e:b1:
c6:f6:db:78:42:f4:c4:97:44:65:c9:25:1c:a6:43:
e4:df:45:4f:75:bb:93:9d:3d:b7:3c:2e:6f:61:31:
f6:46:6a:d7:2c:45:13:6d:d1:eb:f0:c3:08:65:7e:
9c:8c:c6:76:37:39:dd:26:77:86:cc:f2:57:a1:36:
12:1b:07:a0:a6:db:57:43:37:66:03:62:89:a8:72:
60:d8:7c:f6:e5:98:b2:64:02:de:53:2a:5e:90:35:
c3:be:bb:74:30:a3:ff:33:4c:98:fa:23:85:04:23:
e0:dc:78:c6:ce:a2:ca:40:48:74:e6:67:86:14:6d:
f8:e0:a6:6d:7b:25:ec:80:ce:53:1c:4f:94:18:f1:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D3:D3:F7:44:27:65:2A:04:AB:DE:BD:7E:7B:AD:41:B7:C4:8A:80
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26210.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.156.0/24
82.21.195.0/24
82.25.21.0/24
82.25.32.0/24
82.29.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f8:ea:f8:a0:22:d3:6c:49:a5:cd:0c:89:2e:96:5e:54:d1:
d0:5c:a6:05:56:af:a3:a5:c3:67:06:0e:53:6b:e7:12:dc:9a:
d1:8a:f2:cc:60:41:0a:f1:25:f2:ff:bb:cb:fe:1a:7b:84:40:
8f:b3:cf:be:d7:9d:87:b5:b9:98:11:4c:a0:46:ec:43:79:5e:
7c:3b:3b:05:21:0b:17:14:b3:39:82:8f:15:ce:1c:e4:47:5f:
4d:24:49:30:43:a5:fb:d3:56:73:2c:ba:48:46:56:78:b5:bd:
69:b6:5f:a0:20:48:38:44:56:dc:58:8b:ff:cb:88:32:90:4d:
bd:5a:67:47:21:f8:e8:56:1f:91:c4:aa:ad:7f:9f:15:f5:dd:
c0:ea:99:46:85:db:d4:37:1b:b2:fc:7f:de:2e:16:fb:ac:3c:
f5:a7:d9:e2:7b:dd:72:c4:db:f1:48:63:14:f6:ff:e9:fe:76:
c4:21:1f:c5:e5:18:fe:e8:e7:c3:73:39:f0:0d:35:f1:2f:ea:
6a:7f:8e:f5:f2:2b:7b:be:75:aa:f7:d8:17:63:74:5a:dc:42:
3a:65:2d:f3:e2:9c:81:77:c3:1e:95:24:58:07:18:8c:a6:a4:
06:26:07:83:f9:c9:eb:97:d5:fb:78:c9:6d:d8:55:93:eb:cc:
5e:8e:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:16 2026 by rpki-client