Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210880.roa
File: AS210880.roa (raw, json)
Hash identifier: ObHxGL5NGYISM/Z5n0SFdm6wE9u6xsW5vZD4T0fE5vI=
Subject key identifier: E3:5A:98:D5:4D:85:B4:FC:7E:0A:2B:7F:CC:90:3F:44:C0:C0:29:E7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3030B34C9C5D0E736303557F1110CB3F4AF315EE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210880.roa
Signing time: Sat 24 May 2025 12:14:31 +0000
ROA not before: Sat 24 May 2025 12:09:31 +0000
ROA not after: Sat 23 May 2026 12:14:31 +0000
asID: 210880
IP address blocks: 2a0f:85c1:bfc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:30:b3:4c:9c:5d:0e:73:63:03:55:7f:11:10:cb:3f:4a:f3:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 24 12:09:31 2025 GMT
Not After : May 23 12:14:31 2026 GMT
Subject: CN=E35A98D54D85B4FC7E0A2B7FCC903F44C0C029E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:93:af:80:2c:37:d7:02:12:19:8f:d0:14:
a3:dd:3c:15:78:f6:1a:dd:6b:85:4d:5e:b9:59:42:
c3:72:a6:d2:fc:66:0d:21:8b:e9:ae:21:cd:97:bf:
64:3d:47:55:19:c2:97:88:c8:c4:5d:26:3f:a0:23:
f3:bc:b8:5b:9a:c3:03:4d:21:45:10:9a:e3:51:fc:
6c:45:5d:e8:fc:1e:e8:3f:93:97:d0:e3:91:19:f1:
7c:7c:f9:24:37:af:3c:b7:67:3d:34:9e:8c:8c:16:
4a:ac:c5:ff:7b:c0:2d:86:74:ee:ac:98:7b:bd:7e:
30:75:90:c8:f1:1f:9d:63:71:7b:14:97:51:dd:76:
5d:7f:6d:79:2d:dc:79:d2:fe:5e:c8:35:27:8d:f5:
2d:b2:2c:ee:27:0e:43:2b:a5:7f:c9:00:db:95:17:
13:00:1d:ba:c6:7d:1e:85:3e:b0:80:5a:c0:bf:70:
7a:90:67:bd:da:c4:d5:d1:f9:97:49:09:6b:0c:75:
94:5f:75:ec:bd:1d:9b:47:cd:98:fb:f9:45:d1:34:
6f:4b:02:d9:a2:86:48:2e:89:11:cd:b8:59:96:ad:
28:e0:c2:51:8e:8e:b9:e4:5a:09:60:0d:4c:2b:74:
10:6d:e8:38:cc:d8:ce:d9:a5:d5:72:b6:49:95:15:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5A:98:D5:4D:85:B4:FC:7E:0A:2B:7F:CC:90:3F:44:C0:C0:29:E7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210880.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:bfc::/48
Signature Algorithm: sha256WithRSAEncryption
ee:d1:6b:1a:46:d2:f7:06:59:14:f7:6d:05:76:e4:00:47:2b:
ac:3e:1d:44:c5:3a:72:5d:cf:b9:43:5e:06:2d:bd:6f:fa:ea:
ea:2d:79:cb:8b:53:33:0b:d9:51:b8:59:00:33:86:3c:93:88:
4a:98:10:88:07:d4:e1:e9:b2:84:d4:8c:48:5b:2e:00:cc:c1:
c9:d7:46:be:2a:75:f0:37:8d:d2:72:fc:cf:a0:93:8c:78:82:
dd:6b:2b:fc:1f:f5:86:7b:29:b7:98:57:5f:1f:77:77:4c:f4:
db:7a:67:de:72:2c:b3:25:0b:9f:a7:1a:26:d0:f5:ce:45:09:
05:c5:f3:85:93:28:19:91:03:a8:24:ae:ce:a0:14:ee:8e:c3:
43:f1:d0:d3:b6:c4:db:43:c6:f2:90:13:77:ba:09:15:0b:bb:
7e:63:0c:30:0e:f5:a8:8e:91:0e:93:3e:69:aa:bd:ac:ce:d1:
a6:63:9a:26:c9:cd:62:e9:c0:72:2a:cd:cf:66:89:2a:24:2b:
9f:71:dd:86:59:39:a7:d4:a6:91:43:ae:bd:e5:5f:01:8e:9b:
01:65:dd:e7:43:c2:db:30:00:20:11:3f:c7:9a:e4:92:7b:da:
a4:7e:60:61:14:2a:f5:bd:ea:94:bd:3a:a6:ac:e1:e5:b1:25:
62:b4:3f:c7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUMDCzTJxdDnNjA1V/ERDLP0rzFe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA1MjQxMjA5MzFaFw0yNjA1MjMxMjE0MzFaMDMxMTAvBgNV
BAMTKEUzNUE5OEQ1NEQ4NUI0RkM3RTBBMkI3RkNDOTAzRjQ0QzBDMDI5RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTQ5OvgCw31wISGY/QFKPdPBV4
9hrda4VNXrlZQsNyptL8Zg0hi+muIc2Xv2Q9R1UZwpeIyMRdJj+gI/O8uFuawwNN
IUUQmuNR/GxFXej8Hug/k5fQ45EZ8Xx8+SQ3rzy3Zz00noyMFkqsxf97wC2GdO6s
mHu9fjB1kMjxH51jcXsUl1Hddl1/bXkt3HnS/l7INSeN9S2yLO4nDkMrpX/JANuV
FxMAHbrGfR6FPrCAWsC/cHqQZ73axNXR+ZdJCWsMdZRfdey9HZtHzZj7+UXRNG9L
AtmihkguiRHNuFmWrSjgwlGOjrnkWglgDUwrdBBt6DjM2M7ZpdVytkmVFU1fAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU41qY1U2FtPx+Cit/zJA/RMDAKecwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEwODgwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQv8MA0GCSqGSIb3DQEBCwUAA4IBAQDu0WsaRtL3BlkU920FduQARyusPh1ExTpy
Xc+5Q14GLb1v+urqLXnLi1MzC9lRuFkAM4Y8k4hKmBCIB9Th6bKE1IxIWy4AzMHJ
10a+KnXwN43ScvzPoJOMeILdayv8H/WGeym3mFdfH3d3TPTbemfeciyzJQufpxom
0PXORQkFxfOFkygZkQOoJK7OoBTujsND8dDTtsTbQ8bykBN3ugkVC7t+YwwwDvWo
jpEOkz5pqr2sztGmY5omyc1i6cByKs3PZokqJCufcd2GWTmn1KaRQ6695V8BjpsB
Zd3nQ8LbMAAgET/HmuSSe9qkfmBhFCr1veqUvTqmrOHlsSVitD/H
-----END CERTIFICATE-----
Generated at Tue Jun 3 10:13:10 2025 by rpki-client