Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210542.roa
File: AS210542.roa (raw, json)
Hash identifier: nksEJeQWbAJQZeztZbcxWvNWaNowqMongM5GkRvRlIg=
Subject key identifier: 62:80:C9:A4:CC:80:4E:3A:26:B7:53:07:98:F8:92:DB:31:05:08:49
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0C11FFBFFCE5F124F7A4DF6D8BFDEE02D5B56352
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210542.roa
Signing time: Thu 06 Aug 2026 03:59:12 +0000
ROA not before: Thu 06 Aug 2026 03:54:12 +0000
ROA not after: Thu 05 Aug 2027 03:59:12 +0000
asID: 210542
IP address blocks: 51.241.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:11:ff:bf:fc:e5:f1:24:f7:a4:df:6d:8b:fd:ee:02:d5:b5:63:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 6 03:54:12 2026 GMT
Not After : Aug 5 03:59:12 2027 GMT
Subject: CN=6280C9A4CC804E3A26B7530798F892DB31050849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:a9:ca:44:b9:f1:e0:cc:fa:de:40:a1:c1:
be:3b:ad:e8:08:aa:72:f2:31:c5:52:fa:8b:ae:eb:
f1:2e:60:8a:ec:73:a7:5f:bb:28:36:4b:a8:ea:7f:
c1:a5:85:d7:fb:2f:86:7d:f0:dd:40:4e:9f:39:48:
99:ba:de:eb:8c:46:21:bb:1d:16:3c:6e:80:4c:13:
32:85:ec:aa:c6:f1:b8:7f:b2:30:27:1b:7d:35:5b:
d6:c1:5b:2f:f4:31:b1:08:49:7d:61:52:84:0c:ba:
7c:c6:65:11:eb:53:70:46:9c:ed:cf:e2:f0:43:77:
5c:09:41:35:5d:5b:da:e8:a7:48:3c:aa:59:69:13:
be:c3:b5:ab:a7:8e:96:93:ab:c0:8b:05:5d:2b:15:
b6:dd:a8:77:f3:38:71:ec:82:81:8d:5a:be:78:e7:
d2:5c:15:47:5f:a3:30:32:77:a0:d8:85:53:28:e7:
d3:b6:31:24:19:f5:0d:c1:41:b8:f6:6b:98:ac:b7:
9c:82:9d:e1:51:f3:99:2f:a5:e4:fc:b6:35:0e:8c:
10:34:22:dc:06:e5:a6:cf:1d:c9:35:8b:27:48:aa:
01:8a:75:de:d8:d5:02:9e:ed:b2:52:43:a9:94:54:
6e:a9:ef:21:41:02:15:ed:8e:b6:13:82:60:f4:a4:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:C9:A4:CC:80:4E:3A:26:B7:53:07:98:F8:92:DB:31:05:08:49
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.213.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ab:ce:b6:8f:2f:02:8f:57:99:ca:08:19:dc:63:92:71:ff:
86:cc:ee:10:13:25:f5:bb:b0:36:3f:73:89:1a:27:5c:44:0e:
6e:8d:eb:3b:c5:8c:7a:db:2e:81:d9:62:7d:90:14:ea:9a:02:
3b:00:b9:78:19:95:0b:99:31:ed:29:d4:0b:16:e1:eb:c0:9b:
51:15:49:b8:2a:e5:94:2c:77:2b:db:ea:ac:bd:23:b1:14:b1:
9d:3e:d8:fb:a7:10:85:4e:b4:32:30:28:59:6a:7e:5b:87:15:
72:f1:dd:40:13:c0:0d:8b:ce:0d:cc:0f:84:9e:8b:92:06:d2:
0f:57:86:f3:82:e4:e7:39:fc:bb:2c:de:5d:63:12:c1:bf:48:
22:da:43:3f:bc:81:75:e8:c3:df:cf:7d:a1:d4:ad:ed:86:fa:
52:03:e2:93:75:40:cf:04:16:be:55:55:dc:19:48:43:14:7e:
e8:c8:47:bd:36:90:cb:b6:00:cd:8b:5d:62:e1:f4:fc:91:c3:
ac:57:3e:6a:00:7b:fc:e6:77:6d:b5:d8:2f:92:db:ef:f4:b1:
6f:d8:51:97:3a:bd:4e:b6:60:b8:eb:df:4d:1b:05:a5:6b:7a:
74:29:c6:00:e2:8b:7d:11:18:7e:a7:84:6e:2a:be:4b:a2:32:
bb:1d:ed:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:46 2026 by rpki-client