Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210718.roa
File: AS210718.roa (raw, json)
Hash identifier: KZRDX18I34Qvmp5fW9TamVcB96VfWcAH0EjJjgaYjEQ=
Subject key identifier: D2:EA:C1:B4:60:4F:EE:F7:FD:D9:58:6A:6F:7A:51:F8:F7:14:3A:E8
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 724A5670B66102BC23AC91DF34123020FB1B2592
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210718.roa
Signing time: Thu 05 Mar 2026 01:31:21 +0000
ROA not before: Thu 05 Mar 2026 01:26:21 +0000
ROA not after: Thu 04 Mar 2027 01:31:21 +0000
asID: 210718
IP address blocks: 2a14:7583:d000::/36 maxlen: 36
2a14:7583:d000::/48 maxlen: 48
2a14:7583:d001::/48 maxlen: 48
2a14:7583:d002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 19:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4a:56:70:b6:61:02:bc:23:ac:91:df:34:12:30:20:fb:1b:25:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 5 01:26:21 2026 GMT
Not After : Mar 4 01:31:21 2027 GMT
Subject: CN=D2EAC1B4604FEEF7FDD9586A6F7A51F8F7143AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:25:7f:ad:55:7e:18:b8:8a:c6:9f:ed:33:
b1:f2:63:19:37:33:bf:f1:0d:3a:f6:96:39:b1:eb:
d8:e7:2f:30:fb:e1:61:27:33:3a:1a:78:87:52:81:
68:9e:2f:4a:2d:c2:81:fe:a0:cc:40:14:82:95:3b:
2b:b1:e7:75:9e:85:5d:3f:76:12:46:14:41:4c:87:
60:ad:e0:5b:83:7e:08:f8:e6:37:c5:7d:00:77:32:
1b:ca:4a:67:3f:c6:0b:7d:ef:5c:dd:a3:92:ee:b3:
4d:c2:06:98:0d:66:48:14:aa:62:ee:5d:6c:9d:95:
ef:1f:ef:5c:b8:f3:7f:b8:fe:b3:6d:94:90:98:f7:
95:a4:98:4e:4f:24:55:ec:39:f1:21:83:9c:18:0b:
c4:4e:f4:ea:27:f6:20:5b:d5:1e:67:1d:8b:5d:7f:
55:7c:ba:d7:5c:56:0d:9c:9e:db:48:df:f4:3e:7f:
66:f1:c0:3d:28:22:36:2b:7f:88:24:c7:ee:80:65:
61:3f:3a:59:08:c8:3c:37:0d:10:11:da:04:36:ca:
dc:06:6b:86:cd:c5:04:ab:89:d7:d3:19:8f:ad:2e:
aa:4a:f1:2f:6b:b4:a8:19:9b:f7:94:72:5d:1e:f2:
74:05:4c:f0:20:93:de:da:a8:d9:71:36:0a:91:fe:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EA:C1:B4:60:4F:EE:F7:FD:D9:58:6A:6F:7A:51:F8:F7:14:3A:E8
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:d000::/36
Signature Algorithm: sha256WithRSAEncryption
0b:8e:d4:01:16:58:88:0d:48:e8:1c:9e:c6:18:10:e6:03:00:
57:ad:d6:ce:df:1a:5b:36:c8:94:d3:c9:8e:ef:d2:1b:48:c9:
5c:c7:d6:70:aa:75:c8:62:b6:88:8c:c2:bd:28:da:7a:7e:ec:
f7:cb:78:f9:8f:b9:a7:71:12:3a:7f:6b:46:a7:63:ff:7f:a1:
9b:6d:45:fb:50:94:02:84:56:c7:b0:d9:9c:ae:bd:f0:3d:ff:
9a:06:63:43:e1:e3:88:3e:33:f7:1c:9c:41:c8:a4:be:75:61:
b9:54:6f:a0:55:85:da:a7:80:a0:94:3f:01:69:24:b9:f0:48:
01:dc:66:8c:92:1e:8b:0f:89:36:74:35:62:37:ae:c9:d0:03:
27:60:1d:c0:37:f6:0e:a1:4e:cd:c4:6b:17:46:38:02:17:06:
23:b9:92:1d:02:a2:75:d2:a0:c3:d4:99:75:b4:a8:74:e5:1b:
8b:0b:2b:2c:7f:77:39:0c:b5:f0:f2:6a:80:24:cc:65:54:60:
79:94:8d:84:aa:72:15:d9:f2:8f:54:4e:59:aa:59:10:0e:b4:
9e:a1:56:47:ff:b7:c4:46:94:8a:7f:90:ff:a2:52:f6:92:8b:
f3:1c:d2:aa:2e:e9:93:f4:64:07:7c:33:00:13:3b:c4:db:9a:
f8:db:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:33:09 2026 by rpki-client