Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210532.roa
File: AS210532.roa (raw, json)
Hash identifier: B8IfDMwxU2B1wLEJAWSjcHvP/dpLLE26uKZCXnakXwI=
Subject key identifier: 5B:30:43:B2:50:AC:AF:A6:92:AA:5F:77:2A:15:80:FA:E8:F4:2A:D4
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6DBEBF5AB6C0674B6F723E980B034F666B243E29
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210532.roa
Signing time: Fri 26 Jun 2026 08:08:40 +0000
ROA not before: Fri 26 Jun 2026 08:03:40 +0000
ROA not after: Fri 25 Jun 2027 08:08:40 +0000
asID: 210532
IP address blocks: 2a0f:85c1:27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:be:bf:5a:b6:c0:67:4b:6f:72:3e:98:0b:03:4f:66:6b:24:3e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:40 2026 GMT
Not After : Jun 25 08:08:40 2027 GMT
Subject: CN=5B3043B250ACAFA692AA5F772A1580FAE8F42AD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:8f:ab:f2:6b:49:a5:96:07:56:d6:13:f3:
f5:20:85:4b:9a:9e:86:f9:b1:59:82:b6:3c:3c:2c:
22:71:ff:fd:07:37:e7:b2:1d:6e:dd:44:4c:75:6b:
9c:62:ac:ad:75:33:46:2f:1f:d7:d8:34:99:24:08:
90:26:00:ba:c0:d6:27:46:88:e5:45:7c:85:f1:fc:
d2:8f:fd:82:29:42:14:1f:cd:54:94:fc:b4:3d:d3:
c3:01:b4:6f:33:6b:4b:0b:ef:75:ad:e1:c9:35:51:
c5:7c:f3:26:8c:4d:0c:4d:f3:6c:b3:5f:5c:e8:9b:
3a:d3:37:c7:2c:60:92:25:20:41:a6:60:e8:4f:e4:
e5:36:60:69:ae:de:0e:d1:21:14:c1:e5:dc:86:40:
76:71:5f:77:ca:fd:57:f8:9a:1d:fb:4b:ce:27:74:
d5:94:79:a3:bd:81:14:28:4b:52:25:ba:c5:23:3d:
89:a2:0e:26:ed:5c:2a:63:bc:08:2e:fa:02:0f:2f:
51:0b:88:8c:ce:c9:70:4f:af:ee:8e:9b:5c:c6:c7:
7f:78:4d:6f:56:73:94:e8:b5:d6:c9:77:66:aa:83:
05:43:e5:bd:11:94:96:30:49:fc:43:99:3a:ef:3f:
1e:6d:9e:17:f2:79:b5:e4:9b:0a:01:df:28:d6:51:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:30:43:B2:50:AC:AF:A6:92:AA:5F:77:2A:15:80:FA:E8:F4:2A:D4
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:27::/48
Signature Algorithm: sha256WithRSAEncryption
ad:8f:30:b5:67:86:ef:00:a7:ae:28:c7:82:cf:9f:d1:da:61:
cb:13:e5:0a:f7:c7:48:1d:18:aa:07:34:88:21:c9:df:65:60:
fd:b1:bb:be:93:51:00:56:f3:d8:57:99:ef:d0:90:e1:e9:4f:
33:35:3d:7f:90:25:df:e1:23:03:ee:3d:22:2c:17:29:23:f6:
20:34:95:de:a8:92:06:c6:a2:7d:65:06:a1:78:4d:cf:1b:08:
98:c5:38:98:61:1e:b9:df:db:61:b9:bd:16:e3:68:10:74:52:
bc:7d:74:09:3a:0b:8d:cd:e3:ec:a9:5b:37:e3:2b:c9:2e:32:
f5:64:d0:fc:dd:3b:69:6a:5f:09:c4:96:4b:38:fb:2c:95:e1:
1b:f4:18:19:87:ad:5b:87:16:bb:1e:84:c5:d3:26:44:c6:f3:
66:9c:3c:1a:9e:96:fb:5f:0f:a6:c4:64:3c:36:51:a3:b7:bd:
ce:67:b8:82:a3:ec:ef:bf:dc:cf:ca:97:61:2c:dd:7f:0a:f5:
5c:c8:92:ef:d0:70:a2:78:31:ac:bb:19:c9:c9:72:0d:88:c5:
8e:71:de:03:5e:01:1c:c3:b1:ec:01:92:56:2d:34:21:ee:2e:
d1:41:9f:3d:a1:7c:2e:74:0a:dd:53:da:1d:91:1c:75:38:4d:
cf:3d:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:43 2026 by rpki-client