Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210724.roa
File: AS210724.roa (raw, json)
Hash identifier: 7hPfkgzSZZWO/18jPkee12UvY5JsKAGD81iRB070gjU=
Subject key identifier: 9D:1F:76:30:8D:9A:D6:C1:FB:B4:03:CB:5A:6A:8B:66:51:C1:45:77
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 57F5CC1EAE1A64DB0F0EEA8A3046352F0984E090
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210724.roa
Signing time: Thu 09 Jul 2026 11:08:50 +0000
ROA not before: Thu 09 Jul 2026 11:03:50 +0000
ROA not after: Thu 08 Jul 2027 11:08:50 +0000
asID: 210724
IP address blocks: 2a0f:85c1:c13::/48 maxlen: 48
2a0f:85c1:c70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f5:cc:1e:ae:1a:64:db:0f:0e:ea:8a:30:46:35:2f:09:84:e0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:50 2026 GMT
Not After : Jul 8 11:08:50 2027 GMT
Subject: CN=9D1F76308D9AD6C1FBB403CB5A6A8B6651C14577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:8b:28:91:9b:4c:72:3b:0d:72:59:ac:e2:
a9:c4:47:5a:94:b1:8e:ee:91:89:66:74:f5:6e:20:
e1:a6:7a:59:a2:66:a5:18:a3:a5:46:90:cd:7c:4f:
7e:99:9c:16:ca:e7:fe:a2:e6:e1:d3:a3:86:48:a7:
1f:e2:dc:93:f1:1b:24:51:fd:cc:03:43:f5:26:82:
97:8c:bb:32:50:b2:21:b5:03:74:0b:1f:51:46:fb:
39:52:36:cc:a3:a3:66:cb:3e:87:7a:5d:60:da:94:
93:5a:94:c3:6f:e9:c3:01:ab:94:cd:83:4d:83:50:
1b:23:89:b3:7e:c9:c1:a9:fc:0a:d1:83:c4:35:dd:
16:c2:18:2d:f3:4a:af:7f:b3:f8:a9:1a:b2:be:ed:
91:c7:ff:09:f9:41:a1:2f:7c:6e:6a:63:cd:4b:9e:
9e:04:d4:cb:b2:0d:d7:b4:44:e3:84:95:42:55:f6:
6d:75:3e:fd:31:ad:55:73:97:42:fd:e6:bb:dc:46:
56:df:3e:74:ec:30:34:71:50:34:d3:4e:5a:6f:8d:
ed:23:6b:73:48:0b:00:a0:67:0c:bf:3a:77:60:8b:
c1:43:69:a2:f6:a3:65:1f:3f:32:06:f0:9b:f0:23:
c2:e3:5d:23:62:a7:85:49:71:b3:2a:07:f4:4b:82:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1F:76:30:8D:9A:D6:C1:FB:B4:03:CB:5A:6A:8B:66:51:C1:45:77
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c13::/48
2a0f:85c1:c70::/44
Signature Algorithm: sha256WithRSAEncryption
e8:0f:c0:5e:be:4d:1a:c0:f4:8e:7b:fb:f4:7d:c2:f7:20:1c:
1e:29:98:63:6f:42:a7:c4:5a:d1:f6:81:d6:6d:14:20:be:ad:
29:9a:b8:91:7d:e4:81:90:5c:ba:c2:03:07:97:3b:33:97:ca:
70:83:84:d4:11:b7:7d:8c:7d:f6:d7:b8:6d:24:a1:01:b8:e8:
11:ed:47:2d:3d:fd:69:1b:d1:a8:f0:f5:ab:3f:21:81:ba:d5:
2f:81:63:15:81:d0:ea:e0:7c:d3:c5:50:1a:31:5b:2f:b5:91:
0b:a0:76:6e:bf:ef:21:39:da:7a:2a:af:16:b6:e0:c4:74:7d:
b5:8a:52:ab:88:af:2d:92:93:c2:c8:a6:3e:b7:c6:77:fb:8e:
35:4f:8c:3e:65:64:c1:eb:46:3c:84:87:59:d7:7b:a9:72:fc:
df:41:8c:e1:a9:7b:f6:bf:2f:13:5b:35:09:63:17:63:9d:db:
fc:6c:f2:8b:88:61:fa:b8:72:76:e6:55:74:de:2e:70:64:6a:
37:30:32:64:13:0e:c3:18:75:7b:76:53:b9:56:4e:2c:e3:8e:
2a:be:82:30:48:e5:5b:f8:d7:16:a2:78:6b:41:6b:c1:f9:a1:
26:ee:f7:cf:04:9f:6d:ef:62:1a:fb:fb:ae:04:6e:12:6c:70:
e3:4f:d3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:06 2026 by rpki-client