Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa
File: AS210376.roa (raw, json)
Hash identifier: 3KQ08yFHogG6XMNltNnT63fLMfCLIwV2VsgWFsX690U=
Subject key identifier: D2:5D:5F:B5:D0:D7:D1:B4:82:DA:0C:07:C0:85:BA:FC:B1:50:EF:AD
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5F8A6127176FD187EED22CE2EFE738ED2C73C5F4
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa
Signing time: Fri 26 Jun 2026 08:08:44 +0000
ROA not before: Fri 26 Jun 2026 08:03:44 +0000
ROA not after: Fri 25 Jun 2027 08:08:44 +0000
asID: 210376
IP address blocks: 2a0f:85c1:29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:8a:61:27:17:6f:d1:87:ee:d2:2c:e2:ef:e7:38:ed:2c:73:c5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:44 2026 GMT
Not After : Jun 25 08:08:44 2027 GMT
Subject: CN=D25D5FB5D0D7D1B482DA0C07C085BAFCB150EFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e2:79:d6:35:8a:f4:e8:00:33:1b:67:70:70:
c0:e8:84:ac:54:b0:9e:b0:01:10:37:a6:5f:f2:41:
66:e0:6d:34:8e:9d:af:b7:dd:25:7d:9c:b1:67:71:
86:73:a0:11:85:6a:75:45:44:54:c9:d0:89:a7:b9:
28:04:8e:6f:33:69:26:e3:24:bc:d6:ca:12:03:7b:
62:03:89:25:fc:79:3a:3a:11:75:f9:d7:22:e5:4b:
9d:23:fd:8d:bd:42:1d:90:03:56:32:06:39:b1:a3:
9b:fe:dc:88:f2:0a:de:43:e8:01:34:21:bb:50:14:
0f:5d:c2:35:6d:6a:60:a6:9c:e4:33:8a:9b:80:a0:
15:15:c1:6c:35:76:93:a1:e0:e6:49:9e:0c:74:f6:
94:20:a2:d3:48:5f:2d:88:62:c3:9b:e7:e7:06:e9:
f8:20:85:42:76:17:e0:10:97:43:41:a1:a7:5f:aa:
fa:cb:9a:e1:e3:b3:83:f1:5b:6b:38:a6:15:b4:a5:
66:ea:e9:0e:15:22:98:ff:a5:51:75:28:10:25:e7:
2c:cd:61:40:db:0a:c9:c2:5f:81:a8:87:d2:67:f3:
6f:04:0a:9f:0e:b5:70:40:b9:98:d4:bc:60:03:0a:
29:c9:33:c9:94:d2:6f:b1:03:2f:77:a0:c3:98:a7:
13:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5D:5F:B5:D0:D7:D1:B4:82:DA:0C:07:C0:85:BA:FC:B1:50:EF:AD
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:29::/48
Signature Algorithm: sha256WithRSAEncryption
39:b4:78:a1:69:f5:87:49:22:f3:08:1c:7e:bd:8c:d2:75:9b:
5f:fe:33:20:11:db:95:79:6a:c0:d4:d3:d9:8b:37:9d:33:72:
eb:6d:d0:08:d0:91:6f:20:8b:5d:b4:7c:66:9d:bc:b3:15:65:
12:27:96:fe:11:11:a1:bc:27:1e:0a:cb:8f:d3:78:8c:f8:84:
03:b1:a8:51:bb:33:3c:4a:26:7d:03:02:8b:e7:b6:56:77:db:
13:21:b6:be:9c:58:63:b9:61:fd:b4:65:91:5e:1c:8e:79:6b:
c1:69:18:81:e7:43:12:bc:e4:6a:c8:dd:1e:a2:ca:62:db:a9:
37:a5:dc:ce:ee:9e:6a:2c:45:79:10:37:a4:80:63:2c:13:03:
60:34:f6:40:8f:cd:24:ba:2d:01:59:4e:ce:f4:87:57:21:77:
6a:fa:f8:4e:47:28:7f:3d:3c:c0:12:65:cc:28:6b:86:5c:5a:
53:3a:db:13:ed:59:7c:31:97:20:d9:92:32:28:d9:f6:5c:54:
6a:28:48:60:61:35:58:6a:0f:7b:ca:c3:73:fd:84:76:bc:25:
25:37:46:4b:3e:4d:04:5a:25:ee:91:1e:64:cd:fd:5c:b8:cd:
cd:2a:44:57:e9:55:f0:16:ac:ac:82:c2:83:77:5e:74:8a:71:
fa:08:51:ee
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUX4phJxdv0Yfu0izi7+c47SxzxfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzNDRaFw0yNzA2MjUwODA4NDRaMDMxMTAvBgNV
BAMTKEQyNUQ1RkI1RDBEN0QxQjQ4MkRBMEMwN0MwODVCQUZDQjE1MEVGQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf4nnWNYr06AAzG2dwcMDohKxU
sJ6wARA3pl/yQWbgbTSOna+33SV9nLFncYZzoBGFanVFRFTJ0ImnuSgEjm8zaSbj
JLzWyhIDe2IDiSX8eTo6EXX51yLlS50j/Y29Qh2QA1YyBjmxo5v+3IjyCt5D6AE0
IbtQFA9dwjVtamCmnOQzipuAoBUVwWw1dpOh4OZJngx09pQgotNIXy2IYsOb5+cG
6fgghUJ2F+AQl0NBoadfqvrLmuHjs4PxW2s4phW0pWbq6Q4VIpj/pVF1KBAl5yzN
YUDbCsnCX4Goh9Jn828ECp8OtXBAuZjUvGADCinJM8mU0m+xAy93oMOYpxPjAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU0l1ftdDX0bSC2gwHwIW6/LFQ760wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEwMzc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQApMA0GCSqGSIb3DQEBCwUAA4IBAQA5tHihafWHSSLzCBx+vYzSdZtf/jMgEduV
eWrA1NPZizedM3LrbdAI0JFvIItdtHxmnbyzFWUSJ5b+ERGhvCceCsuP03iM+IQD
sahRuzM8SiZ9AwKL57ZWd9sTIba+nFhjuWH9tGWRXhyOeWvBaRiB50MSvORqyN0e
ospi26k3pdzO7p5qLEV5EDekgGMsEwNgNPZAj80kui0BWU7O9IdXIXdq+vhORyh/
PTzAEmXMKGuGXFpTOtsT7Vl8MZcg2ZIyKNn2XFRqKEhgYTVYag97ysNz/YR2vCUl
N0ZLPk0EWiXukR5kzf1cuM3NKkRX6VXwFqysgsKDd150inH6CFHu
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:03 2026 by rpki-client