Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210554.roa
File: AS210554.roa (raw, json)
Hash identifier: wuR/iscuzvD2XDw7OF8auhWQ6n/6otR+io8P3UKhy4A=
Subject key identifier: 99:E4:8F:EC:E6:C6:FE:8C:4E:4D:CB:1A:9B:EF:03:17:85:27:0D:D4
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6926A8AA4EE0BF1F8B1AF620540B1F9E6FF9D9EC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210554.roa
Signing time: Tue 02 Jun 2026 21:11:58 +0000
ROA not before: Tue 02 Jun 2026 21:06:58 +0000
ROA not after: Tue 01 Jun 2027 21:11:58 +0000
asID: 210554
IP address blocks: 188.220.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:26:a8:aa:4e:e0:bf:1f:8b:1a:f6:20:54:0b:1f:9e:6f:f9:d9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 2 21:06:58 2026 GMT
Not After : Jun 1 21:11:58 2027 GMT
Subject: CN=99E48FECE6C6FE8C4E4DCB1A9BEF031785270DD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:1e:24:fd:59:b9:6e:80:ea:d7:44:7c:b3:
77:fd:0a:38:c4:02:22:57:49:92:a2:79:a0:d1:30:
fe:72:cd:ad:17:ad:44:3e:1b:58:29:25:29:9e:28:
9e:7b:36:08:b5:55:f9:49:5d:43:0f:14:02:f4:06:
06:62:a3:ef:28:ca:11:4b:57:64:57:ca:5d:37:27:
87:91:7b:a3:4c:af:bb:0a:02:4e:b7:81:b6:a5:be:
95:40:eb:77:dc:40:90:21:9a:5c:c9:b5:8f:ff:46:
88:98:93:4d:d6:e1:c8:9d:e3:55:f2:0e:29:d3:1d:
b8:06:26:af:76:df:39:f9:5e:99:9b:f8:3c:e0:dc:
80:34:92:b9:e7:b5:06:d0:db:33:26:5e:4c:ff:7c:
32:d0:c2:3f:fe:09:41:24:09:9b:49:49:bc:91:9a:
f0:ce:02:0e:8c:ff:da:c4:bf:a9:9e:1d:1f:5e:f6:
dc:3d:65:4e:9e:f7:8c:43:12:ff:06:25:a6:46:fb:
99:cb:59:4c:7f:22:ce:ac:71:d8:5a:b8:0c:8b:74:
cc:7d:8a:07:97:13:2b:b4:2d:66:b6:3e:8f:31:22:
e7:59:2c:15:93:59:d6:03:0b:6d:e5:03:37:22:ff:
cb:39:ca:d4:86:75:8a:23:cd:0c:f7:bf:c1:85:3a:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E4:8F:EC:E6:C6:FE:8C:4E:4D:CB:1A:9B:EF:03:17:85:27:0D:D4
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210554.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.33.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cc:ae:c7:d8:14:b8:73:ce:54:16:8f:86:6c:9a:59:5a:c7:
55:6a:be:86:e4:4d:06:f9:16:03:77:4e:ab:55:85:5e:16:f6:
1a:05:35:2e:77:c2:f9:39:3e:17:e5:1e:54:c8:a7:6d:81:35:
34:02:53:c4:7c:2c:2a:e4:ec:69:75:cf:c4:f3:79:67:25:6a:
50:8a:48:ac:39:d8:c4:73:07:ac:44:c0:5d:37:13:13:8f:3f:
2b:a5:c1:b5:99:8a:29:97:90:cc:3b:32:c1:2b:2d:7c:f0:4c:
f1:64:74:5e:58:25:b5:87:af:2e:67:6f:4f:73:5c:1e:1d:15:
17:16:ae:cf:b1:b2:46:1b:3e:9c:65:f2:82:ac:1d:9b:47:27:
02:6e:58:3c:04:ea:59:60:db:ad:2c:f8:6c:47:cc:a0:58:cd:
d8:ec:9f:43:0f:96:b5:cd:73:7e:33:73:20:ba:46:ee:b6:1d:
03:e5:b7:43:bc:28:77:e3:01:6b:77:b7:ed:2c:db:24:2b:72:
ed:51:b0:b1:d5:7e:f5:6b:9b:56:92:be:3f:f0:9e:ea:b5:ce:
69:6a:34:be:77:b1:ad:52:c0:08:12:1c:bd:c3:7d:bb:6c:66:
91:d5:c5:6c:e5:74:fc:5f:3c:38:84:6f:7f:7f:80:29:29:d2:
ba:8a:25:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:08 2026 by rpki-client