Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210331.roa
File: AS210331.roa (raw, json)
Hash identifier: NU+YL2LpVxvJR1A9c7iycfYjiKxxt6Utx9tmeztVxUQ=
Subject key identifier: 28:DF:B5:FF:19:6E:DF:21:53:E9:21:67:78:C0:E2:B9:9A:05:9F:6D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1E1D241510E661C30396EAB6F033BF3CBEE43CAF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210331.roa
Signing time: Sat 30 May 2026 19:06:03 +0000
ROA not before: Sat 30 May 2026 19:01:03 +0000
ROA not after: Sat 29 May 2027 19:06:03 +0000
asID: 210331
IP address blocks: 2a0f:85c1:8f3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:1d:24:15:10:e6:61:c3:03:96:ea:b6:f0:33:bf:3c:be:e4:3c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 30 19:01:03 2026 GMT
Not After : May 29 19:06:03 2027 GMT
Subject: CN=28DFB5FF196EDF2153E9216778C0E2B99A059F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:ec:79:3e:96:4c:3c:6d:f9:c0:8d:84:5b:
87:ec:ff:e0:0e:cb:98:8c:c5:69:b5:ff:9d:f1:e2:
f6:3f:0a:0b:95:35:7a:7d:5d:58:aa:fc:65:19:88:
9e:6b:68:76:a9:0c:33:a2:a2:bf:81:be:1e:61:05:
49:3f:1b:26:14:98:1d:b5:a1:66:1e:c2:95:71:0c:
58:79:7d:6a:30:92:2b:63:ae:70:4b:23:fe:43:0f:
7b:15:94:a7:64:be:30:bb:9a:8d:7f:c2:20:2b:6f:
b5:01:d8:91:2f:61:e1:b8:ed:e4:f4:19:4c:42:23:
ff:69:e2:e8:e1:62:93:5a:74:5b:04:f6:50:64:a5:
c2:e5:2e:75:33:f2:4c:4e:f9:5a:a9:4c:5c:9e:52:
7d:1e:3c:03:98:4b:38:1d:6a:62:d9:14:27:3b:f0:
3d:4a:79:dc:b6:29:4e:32:49:c7:62:48:07:90:87:
0e:68:b9:d8:c0:bb:c0:9a:77:fb:a4:fa:a7:b5:62:
3e:bb:38:92:0d:05:27:8d:d3:26:7e:72:c3:51:50:
8c:e1:47:4b:10:4a:d7:f0:18:6d:29:14:83:ee:dd:
f4:fa:26:21:41:8d:69:8d:e9:49:88:d2:20:f5:50:
80:2d:75:65:cf:bd:57:ac:f3:50:fd:60:65:2e:90:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DF:B5:FF:19:6E:DF:21:53:E9:21:67:78:C0:E2:B9:9A:05:9F:6D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8f3::/48
Signature Algorithm: sha256WithRSAEncryption
91:13:b7:93:9b:c1:87:ef:f8:69:48:87:43:9f:73:a9:4c:6b:
06:bf:93:52:f7:bd:41:12:dd:70:54:14:d0:79:c7:a0:c5:76:
32:77:09:5b:a0:13:1b:f5:0b:96:b8:6c:e7:4a:a3:d2:ca:e0:
d4:69:3b:39:86:73:9c:b3:98:d1:af:43:26:9a:8d:c0:c5:43:
7d:81:ae:62:dd:48:e3:78:42:d0:f2:b1:ef:6b:af:4f:81:cb:
1f:af:24:5f:cc:13:92:3f:de:5c:9d:1e:ac:5a:ab:bf:82:64:
92:6b:2e:f3:3c:af:ed:fb:cd:73:28:78:1a:07:19:23:a0:92:
cf:10:4c:85:0d:2f:bd:f7:a1:58:22:f9:f9:52:46:25:5a:c4:
79:a2:98:0f:ed:70:f1:9e:04:ce:a5:ab:3a:0e:5e:34:fd:2c:
b6:65:38:43:02:34:f3:3b:33:d7:87:26:3e:7b:7a:82:5e:c8:
62:e6:b9:a7:71:a8:87:50:9f:6f:8c:7e:3f:ce:99:3c:a9:d4:
60:de:46:07:9c:d3:65:33:9d:43:3f:43:d0:55:88:5a:44:0c:
1a:7c:bd:7f:97:e3:dc:c5:d0:34:f3:b0:4f:57:0d:55:cd:13:
92:4d:44:36:05:eb:d0:04:03:1d:f8:28:87:a4:3d:3d:ad:e8:
ca:e5:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 23:37:22 2026 by rpki-client