Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210507.roa
File: AS210507.roa (raw, json)
Hash identifier: pCwLjsJi8nQRo+k19j/jbTiJZa1laaaRRCi8s72C+Vc=
Subject key identifier: 66:E9:39:2C:6C:E7:76:C1:A0:07:B8:06:70:16:0D:D4:14:A7:27:FA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 38ED7FE4FFF6923F046F1498F00E472A005BDE37
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210507.roa
Signing time: Fri 28 Aug 2026 08:16:03 +0000
ROA not before: Fri 28 Aug 2026 08:11:03 +0000
ROA not after: Fri 27 Aug 2027 08:16:03 +0000
asID: 210507
IP address blocks: 78.105.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ed:7f:e4:ff:f6:92:3f:04:6f:14:98:f0:0e:47:2a:00:5b:de:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 28 08:11:03 2026 GMT
Not After : Aug 27 08:16:03 2027 GMT
Subject: CN=66E9392C6CE776C1A007B80670160DD414A727FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:cf:3c:e7:f8:87:57:c1:ca:c2:60:f5:0c:
b3:6a:e0:a4:75:a1:22:d1:c1:5e:36:4c:18:d5:68:
ee:a3:c1:b6:52:53:87:13:02:63:f9:63:15:fa:40:
32:9b:53:45:39:a6:46:08:0c:87:4b:8d:8e:1c:82:
0e:9b:09:d7:3e:d4:44:9e:e0:27:a1:01:ff:69:6e:
18:c1:b9:83:c4:43:e9:e1:79:8e:76:80:01:73:b3:
66:6c:ba:02:fa:ab:34:54:b8:79:a8:60:3d:2d:a7:
95:e4:07:49:78:ef:b2:15:8e:4c:3d:c3:6a:63:49:
e7:e7:ab:5e:3c:82:62:4d:ae:8f:f0:47:73:c9:ff:
9a:ce:1d:0d:54:39:6a:99:6e:67:0c:c4:88:3d:56:
37:c1:de:ba:32:a1:28:87:8b:e1:10:d7:27:e3:e6:
08:07:71:3f:96:a9:e9:00:13:cf:99:54:ba:e4:26:
34:89:ea:90:fd:93:22:7c:e0:62:12:3b:d6:d4:5e:
0c:e4:53:0a:ff:d9:1e:38:67:e7:8a:bb:b7:dd:e2:
cb:b3:81:3a:2b:35:b4:b0:46:05:53:a0:6f:f5:bb:
3e:ef:a9:75:13:61:ee:65:fb:d8:b6:ac:4f:04:d0:
46:60:c1:9b:97:e3:48:74:ef:0e:e3:17:de:fd:53:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E9:39:2C:6C:E7:76:C1:A0:07:B8:06:70:16:0D:D4:14:A7:27:FA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:54:90:23:16:d4:ab:63:58:26:47:31:83:c5:88:92:05:75:
b7:90:6c:cd:b1:5c:5b:d9:1b:e3:a6:cb:39:18:55:cc:33:21:
9c:92:bd:03:57:74:a4:68:da:ca:fa:1a:c8:38:97:6f:87:33:
b1:71:0a:60:03:7a:eb:df:04:89:e0:a2:3f:4d:08:31:8b:1b:
30:c6:54:ba:95:a5:5e:30:04:a6:82:27:08:40:39:15:c2:84:
77:df:b2:88:13:20:c8:46:23:be:79:f3:fe:1a:f5:5f:f5:52:
21:e6:bd:78:24:0b:ae:67:bc:e2:50:3a:9d:f1:21:40:b3:e5:
a9:9e:df:d4:68:58:8b:6b:6d:3d:a3:58:02:da:06:66:cf:37:
90:32:92:fb:a4:c3:e7:69:e8:5c:1c:69:ee:14:3f:ce:68:3e:
f7:21:9a:64:d2:8f:f8:0d:6d:af:18:9d:69:1a:9f:81:20:3b:
7b:b5:c5:9f:c8:ff:af:9f:4e:7f:b7:c3:15:2b:62:d5:15:ee:
c1:e8:f3:6c:76:a6:3e:24:79:23:0f:6b:80:ec:51:78:d8:56:
80:64:2d:7a:9c:99:f1:06:a9:0e:84:b7:1c:4b:e4:56:f1:df:
39:2b:a2:8a:25:ae:4a:9a:04:41:20:38:af:a2:c1:b6:5d:f6:
15:a3:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:43 2026 by rpki-client