Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210352.roa
File: AS210352.roa (raw, json)
Hash identifier: T/BaWe/PjMh70HO5W3hORz2CVoHbxBfFh0IbQE+jCgI=
Subject key identifier: EF:18:DF:EB:AE:87:35:EC:B5:2F:48:76:E0:8E:38:BD:28:11:54:A1
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5B97D3148D39FD6EFADADBD628F753688E427C9E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210352.roa
Signing time: Mon 24 Aug 2026 09:23:28 +0000
ROA not before: Mon 24 Aug 2026 09:18:28 +0000
ROA not after: Mon 23 Aug 2027 09:23:28 +0000
asID: 210352
IP address blocks: 188.220.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:97:d3:14:8d:39:fd:6e:fa:da:db:d6:28:f7:53:68:8e:42:7c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 09:18:28 2026 GMT
Not After : Aug 23 09:23:28 2027 GMT
Subject: CN=EF18DFEBAE8735ECB52F4876E08E38BD281154A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:12:64:87:05:f2:92:a4:79:69:07:e4:53:
f6:70:49:c8:84:ff:8a:f4:e9:00:68:13:d5:6c:6e:
fe:84:13:fb:14:6f:19:b1:f5:4d:09:b5:aa:5e:97:
57:ba:1e:07:1a:71:21:f5:25:b9:71:74:c3:93:38:
cd:e8:18:08:ab:60:ae:7e:3f:11:1b:e9:04:37:9e:
a7:f6:7a:b3:8f:e4:3c:00:9e:73:bb:d4:7f:f1:ea:
12:ff:3d:85:78:27:1f:f7:a5:42:49:22:97:64:0f:
57:eb:e9:15:18:a7:cf:b6:e4:85:ac:8e:cc:49:f7:
bd:90:61:3c:38:26:2e:89:d2:37:d8:8c:ea:c3:ae:
08:80:ce:3b:c9:53:42:d3:32:2e:63:2c:19:eb:81:
94:09:78:7f:30:37:c6:6c:85:08:4f:50:b2:0e:a6:
3f:95:9a:c4:7a:2d:55:8d:e1:04:76:41:1c:34:4d:
26:5b:ae:6c:3e:f6:bc:ad:24:30:bb:25:10:3a:7e:
05:b1:96:0e:a2:af:e8:80:23:85:62:36:7c:f7:1b:
53:39:4d:9f:72:9c:aa:81:e8:e4:5d:3a:9c:60:07:
64:78:0f:65:70:21:34:67:e8:ae:b3:cb:9b:aa:9a:
4b:b5:20:1b:e1:92:fb:57:72:0f:3c:50:b8:d6:57:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:DF:EB:AE:87:35:EC:B5:2F:48:76:E0:8E:38:BD:28:11:54:A1
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210352.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.68.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1d:29:6b:2d:32:df:40:93:48:e8:80:d7:8f:c8:4b:cf:5d:
03:71:83:dd:7e:14:46:d1:13:d4:89:c9:92:31:cb:4e:dd:62:
a8:e6:bf:cb:98:9a:ee:90:fb:bc:3b:27:58:1f:35:58:b3:25:
92:f5:be:d0:ce:2a:95:da:db:9c:a9:1f:59:d5:b9:17:f2:7b:
48:20:36:c2:17:e2:67:82:30:94:6d:da:12:52:54:68:74:25:
02:52:ca:9e:5c:3e:22:e4:7a:64:68:8a:ab:bb:0e:17:d1:51:
a9:cd:96:f7:4c:45:35:3a:31:21:c7:44:e2:85:24:71:f2:54:
b6:ef:9d:1e:b4:8e:e3:b8:25:74:f7:bb:37:fe:33:10:40:b5:
c9:1d:cb:58:3f:87:0e:36:0a:ae:e4:da:14:40:80:17:fc:2d:
19:8f:7f:cf:f8:32:05:b4:6e:de:7e:63:a1:8b:bc:7d:a9:0e:
25:70:b7:88:72:ee:2f:1a:1f:7f:6d:53:a8:5a:4d:66:f5:d7:
82:e5:18:e2:86:c2:ae:f6:63:79:c9:f1:94:6e:f0:3a:65:10:
9e:a9:64:b9:79:50:81:de:ac:fa:e0:af:4c:c8:0f:40:c8:72:
96:87:59:7e:19:b6:26:50:ac:e6:0c:7f:9e:1c:2b:29:77:85:
47:f5:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:49:36 2026 by rpki-client