Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210495.roa
File: AS210495.roa (raw, json)
Hash identifier: RgYNr5dsDKWDSjqeKPVM7+d5+g1cVXWTu2opzAp8Kgs=
Subject key identifier: 59:19:BA:A2:1C:18:3E:66:39:2E:46:7A:31:64:1A:55:7B:A3:A0:79
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4DB9BFFBE788F4ECACD4DB21BC279DE90AAEE1EB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210495.roa
Signing time: Fri 31 Jul 2026 17:00:35 +0000
ROA not before: Fri 31 Jul 2026 16:55:35 +0000
ROA not after: Fri 30 Jul 2027 17:00:35 +0000
asID: 210495
IP address blocks: 51.146.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b9:bf:fb:e7:88:f4:ec:ac:d4:db:21:bc:27:9d:e9:0a:ae:e1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 31 16:55:35 2026 GMT
Not After : Jul 30 17:00:35 2027 GMT
Subject: CN=5919BAA21C183E66392E467A31641A557BA3A079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:bc:7c:51:c5:24:a0:ed:60:cc:31:92:85:
d5:50:4f:21:bc:3a:8d:17:52:11:ce:33:5e:d6:f4:
df:b3:b2:30:6c:5b:ce:36:11:1c:71:69:89:9d:71:
74:74:e1:34:f4:96:12:71:1d:8d:bf:7f:0d:37:09:
50:30:6b:54:79:ae:f8:6b:e6:40:69:c3:b9:20:14:
89:5a:a1:c8:1f:f7:cc:b1:6c:50:da:53:bf:56:f4:
fe:d8:c2:98:81:1e:cf:2c:00:fc:da:fc:90:ba:d0:
b1:dc:c6:b7:61:21:70:91:c8:0d:68:1e:05:4e:0a:
23:f3:1a:a9:35:d5:89:d7:0f:6e:08:bd:40:c3:c4:
03:b8:0b:b7:d4:08:3b:ec:ff:64:40:86:ba:15:8a:
28:9a:f0:b7:2b:dc:09:40:88:a6:67:97:cb:40:53:
02:74:f1:5d:d7:ff:c1:96:4b:a6:50:7e:a0:d3:25:
8a:54:f7:b5:5c:fd:1c:4d:24:31:8c:83:c4:33:16:
1d:ed:21:13:79:43:ff:bc:44:31:f2:52:d1:54:3c:
9f:24:31:39:2f:1d:69:51:fa:9a:e8:72:28:30:ea:
5f:60:46:5d:88:0e:bf:64:ad:5e:67:d5:da:ab:d5:
89:52:0d:24:2e:25:4a:3c:aa:fe:7d:65:6a:1a:5e:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:19:BA:A2:1C:18:3E:66:39:2E:46:7A:31:64:1A:55:7B:A3:A0:79
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210495.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3f:43:c1:92:d5:b7:72:b6:08:a7:25:1c:53:b3:4f:8c:a7:
38:46:87:49:57:8e:f3:c6:3d:59:43:f7:78:95:1c:8c:5a:2e:
ed:25:67:19:06:bb:6d:5e:c1:c7:65:f0:83:ab:89:5a:4e:3a:
29:1d:e3:f8:8e:42:ac:d1:ea:ec:d0:15:df:0a:c1:37:aa:cc:
9b:84:49:46:ac:6a:da:3e:98:d6:65:5d:1f:e0:dc:9a:25:1b:
7e:6e:d2:90:d6:b2:8f:6c:b3:2e:22:a4:0c:ab:d0:b4:60:1e:
d5:7a:47:eb:f2:33:94:d7:cf:c7:7e:80:2e:91:4a:45:b5:c4:
a2:09:cc:80:40:cd:de:3e:bf:8f:41:57:a3:11:20:01:d3:14:
d9:1f:37:fb:89:ae:8e:de:c8:41:f1:93:23:fc:ba:a2:3b:24:
52:91:64:d7:8e:24:e6:c3:fb:2e:60:0f:67:b3:ed:66:df:59:
63:06:a2:66:50:8a:ce:38:02:e4:9b:a7:7b:12:75:9d:1d:39:
3c:32:bf:29:21:f0:ec:12:3a:48:dc:c3:b2:87:cc:95:0e:80:
bd:13:cc:3c:bc:09:e1:18:16:52:81:44:a5:f4:6f:dd:f1:9e:
0a:50:57:11:5a:67:e1:ff:17:7e:98:40:ff:48:7c:27:4a:d7:
82:9d:2d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:31 2026 by rpki-client