Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210152.roa
File: AS210152.roa (raw, json)
Hash identifier: 9WtZJ1E0K2GYl4sXHbaCOfQ0CFwwv+H9NnFXBfgv5Iw=
Subject key identifier: 79:BA:B4:C1:A7:48:02:1E:C8:43:D0:A5:9C:CF:6F:CD:0F:17:EB:7F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7C688DED804CD6A7C893669DE0D8B7A498498917
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210152.roa
Signing time: Tue 21 Jul 2026 05:08:55 +0000
ROA not before: Tue 21 Jul 2026 05:03:55 +0000
ROA not after: Tue 20 Jul 2027 05:08:55 +0000
asID: 210152
IP address blocks: 2a0f:85c1:8a0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:68:8d:ed:80:4c:d6:a7:c8:93:66:9d:e0:d8:b7:a4:98:49:89:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:55 2026 GMT
Not After : Jul 20 05:08:55 2027 GMT
Subject: CN=79BAB4C1A748021EC843D0A59CCF6FCD0F17EB7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:1d:9c:84:3d:0d:68:24:21:a8:27:cc:81:
5e:9b:de:b1:51:e4:d4:5e:ad:90:b0:0c:8d:a0:07:
e5:0b:ca:31:21:5d:ee:6b:10:d9:88:aa:21:89:00:
47:ea:b3:b7:26:c0:a8:0a:69:89:67:90:a3:c2:31:
1c:70:f6:4d:98:5e:07:bf:b3:3b:c7:e7:ed:d5:f2:
85:e4:10:4a:8e:e7:d2:d2:75:dd:bb:5a:70:52:ca:
15:03:c6:ed:95:8d:2c:09:32:2d:bb:42:c7:61:3d:
6d:b5:e1:72:78:a5:a4:4d:31:d9:fd:47:e1:20:09:
4f:52:9b:38:e5:6a:9d:17:73:6d:51:09:9a:2f:40:
71:e8:55:8e:c7:51:55:be:6c:f5:d0:6e:41:06:e8:
9b:5b:eb:c7:b0:67:b5:48:41:ee:94:a6:2f:f0:40:
e2:58:c5:fa:40:cc:b7:1c:36:cf:34:3c:e2:0c:50:
ad:d1:16:77:63:4f:99:59:77:47:73:67:d4:4e:83:
c0:9b:e8:5b:2f:c6:c9:cb:ff:fc:35:f6:aa:63:5f:
a4:a5:fa:a1:1f:cc:aa:5a:ff:f3:92:4c:45:90:6f:
cc:4d:47:52:c9:c8:0f:70:27:29:24:6b:a4:30:67:
5f:30:41:d8:a8:c8:a9:5b:25:13:ee:55:20:f9:da:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BA:B4:C1:A7:48:02:1E:C8:43:D0:A5:9C:CF:6F:CD:0F:17:EB:7F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8a0::/44
Signature Algorithm: sha256WithRSAEncryption
92:10:25:c6:c0:96:e7:a6:b5:a2:69:f4:92:1b:d3:33:dd:fb:
1b:fa:17:ec:3b:0e:58:bc:32:53:05:54:a6:6e:c0:66:c2:14:
7f:21:3d:40:b2:ff:4b:f5:b9:8b:66:ec:5f:d6:dd:ee:d0:11:
8a:59:6e:ba:32:97:0e:b7:77:ae:f9:3a:0c:c5:2a:7e:3c:22:
c2:9d:bd:13:09:09:8e:97:48:40:e6:4b:4d:37:c5:b4:d1:0f:
33:ef:a1:cd:ac:d4:3b:4d:8e:65:77:1f:f6:94:3d:05:c3:b2:
e9:ee:c4:6f:f1:f6:4e:a1:5e:39:a5:db:67:c0:b9:b6:61:22:
5d:38:33:83:c4:be:20:99:43:a5:b2:b9:ef:6b:a8:81:67:23:
a9:69:7d:ae:4d:dd:88:6b:ce:8d:cf:2b:06:da:63:0a:68:62:
8c:21:23:80:23:78:d6:96:2e:ab:13:23:43:43:7e:72:64:2b:
c5:f1:4e:ef:27:20:78:af:53:ad:39:84:1e:61:9b:4e:58:0b:
4b:d4:4b:76:9e:73:4d:76:48:b7:e6:44:e4:82:e6:49:14:67:
8a:45:5b:a6:d0:de:80:a7:c0:8f:99:04:c9:bb:d7:0e:83:4a:
4f:31:ee:9b:b2:7f:48:53:82:74:b4:38:b9:c5:07:26:dc:72:
25:6c:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:15 2026 by rpki-client