Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210578.roa
File: AS210578.roa (raw, json)
Hash identifier: DvaFnJbM3uajYlPIFhYCY8Vp3OAJk32YnFhqIksYqTo=
Subject key identifier: 7B:F4:E0:28:4C:63:73:C0:40:5E:6E:78:58:2B:F8:25:A1:8D:8B:B0
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5D92857B5C5116E34416C9A9B3093CC0FC453788
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210578.roa
Signing time: Fri 31 Jul 2026 02:08:57 +0000
ROA not before: Fri 31 Jul 2026 02:03:57 +0000
ROA not after: Fri 30 Jul 2027 02:08:57 +0000
asID: 210578
IP address blocks: 2a0f:85c1:cf8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:92:85:7b:5c:51:16:e3:44:16:c9:a9:b3:09:3c:c0:fc:45:37:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 31 02:03:57 2026 GMT
Not After : Jul 30 02:08:57 2027 GMT
Subject: CN=7BF4E0284C6373C0405E6E78582BF825A18D8BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:c9:d3:ac:fb:21:39:25:48:bf:df:af:37:
a9:f7:0a:5d:b1:c1:e2:84:b4:52:32:0a:3f:d7:91:
b8:61:c5:8a:29:24:e8:9b:b1:cc:3b:b7:b8:fc:bb:
08:d5:7f:69:ea:e3:dc:94:c5:4e:86:4f:c4:14:0e:
e6:bd:91:10:8b:d5:ea:df:19:80:c4:2a:fc:54:7d:
cc:18:65:c2:9b:14:df:fb:e9:9b:fc:b5:d5:3f:eb:
18:0b:a9:74:f0:43:59:e8:bb:94:42:62:b8:a6:79:
db:d3:f9:ed:74:d4:48:8f:76:44:f4:8c:2c:7c:e1:
c3:79:9e:d8:05:b7:8a:18:3f:c7:96:5b:bb:e0:57:
14:c6:bc:a2:a8:9a:65:ad:92:99:32:70:88:93:77:
c3:b8:ef:30:89:1c:d4:12:e3:cf:59:cb:c2:97:c8:
f8:c9:6e:07:82:55:4c:33:3c:c8:85:9d:43:68:de:
40:e5:db:a8:06:82:bf:9f:89:a8:b5:77:9a:25:19:
1a:9e:5a:3d:e4:44:0a:e5:0c:e6:f6:c2:ab:5d:30:
5d:32:64:34:b8:08:6d:47:8a:9f:28:4b:5e:5b:69:
2f:b2:95:c0:5a:23:3e:7d:32:c8:d3:0c:50:d6:82:
ca:12:81:0e:fd:36:71:46:23:41:1e:c3:49:1d:49:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:E0:28:4C:63:73:C0:40:5E:6E:78:58:2B:F8:25:A1:8D:8B:B0
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210578.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cf8::/48
Signature Algorithm: sha256WithRSAEncryption
3c:2b:c3:6a:df:c3:ad:7b:93:a6:88:72:6d:b2:63:37:82:6a:
14:a7:d7:2a:af:ae:9c:51:f4:7e:95:a3:32:de:3f:69:e9:fe:
3e:64:63:5d:f9:f1:42:30:fe:1e:b0:6f:00:ee:37:c9:00:0e:
6e:0b:fb:9f:51:08:3f:eb:b5:71:ba:30:d9:c4:87:b5:fc:47:
7e:a0:bb:ae:9f:07:8f:26:15:79:8c:d4:34:51:08:60:e3:61:
cf:87:78:02:fa:e9:e9:a4:7c:3f:cb:ff:84:e3:e3:4b:5b:64:
b6:97:1d:dc:6c:48:db:30:82:55:d0:df:b7:09:a6:c9:c6:95:
ac:50:3d:5b:1d:f8:23:86:6c:53:69:d0:3c:c6:09:c3:bd:ff:
9d:72:b1:f5:7c:4b:db:05:04:0a:d2:6e:06:34:a0:d3:12:c6:
1f:fd:74:0d:83:5c:ff:d7:60:1a:63:d6:e0:c3:35:7f:cf:52:
7c:78:29:70:b3:ed:e7:e4:02:05:ed:8b:68:7b:cc:93:fc:d6:
a0:e0:5d:1b:9c:de:45:8b:34:27:b1:15:2b:51:57:5e:24:60:
ee:37:e5:2d:82:af:7d:30:9d:39:75:81:91:9d:ec:94:5e:2b:
08:46:84:46:79:6f:90:c1:3d:d1:f7:45:d2:29:66:cc:8f:c4:
80:20:1f:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUXZKFe1xRFuNEFsmpswk8wPxFN4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA3MzEwMjAzNTdaFw0yNzA3MzAwMjA4NTdaMDMxMTAvBgNV
BAMTKDdCRjRFMDI4NEM2MzczQzA0MDVFNkU3ODU4MkJGODI1QTE4RDhCQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOncnTrPshOSVIv9+vN6n3Cl2x
weKEtFIyCj/XkbhhxYopJOibscw7t7j8uwjVf2nq49yUxU6GT8QUDua9kRCL1erf
GYDEKvxUfcwYZcKbFN/76Zv8tdU/6xgLqXTwQ1nou5RCYrimedvT+e101EiPdkT0
jCx84cN5ntgFt4oYP8eWW7vgVxTGvKKommWtkpkycIiTd8O47zCJHNQS489Zy8KX
yPjJbgeCVUwzPMiFnUNo3kDl26gGgr+fiai1d5olGRqeWj3kRArlDOb2wqtdMF0y
ZDS4CG1Hip8oS15baS+ylcBaIz59MsjTDFDWgsoSgQ79NnFGI0Eew0kdSZyxAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUe/TgKExjc8BAXm54WCv4JaGNi7AwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEwNTc4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQz4MA0GCSqGSIb3DQEBCwUAA4IBAQA8K8Nq38Ote5OmiHJtsmM3gmoUp9cqr66c
UfR+laMy3j9p6f4+ZGNd+fFCMP4esG8A7jfJAA5uC/ufUQg/67VxujDZxIe1/Ed+
oLuunwePJhV5jNQ0UQhg42HPh3gC+unppHw/y/+E4+NLW2S2lx3cbEjbMIJV0N+3
CabJxpWsUD1bHfgjhmxTadA8xgnDvf+dcrH1fEvbBQQK0m4GNKDTEsYf/XQNg1z/
12AaY9bgwzV/z1J8eClws+3n5AIF7Ytoe8yT/Nag4F0bnN5FizQnsRUrUVdeJGDu
N+Utgq99MJ05dYGRneyUXisIRoRGeW+QwT3R90XSKWbMj8SAIB8m
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:29:06 2026 by rpki-client