Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210655.roa
File: AS210655.roa (raw, json)
Hash identifier: HfmV7NpR8kDi1m17PDq1/TM3KYNdArJeLVQf4RQk8xs=
Subject key identifier: CC:C0:F6:77:88:3E:5D:9B:CD:83:EA:4B:19:3D:21:F6:A4:0B:ED:7C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0941CAEF1EA461D41DB3249D56082852135FC82D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210655.roa
Signing time: Fri 05 Jun 2026 00:12:08 +0000
ROA not before: Fri 05 Jun 2026 00:07:08 +0000
ROA not after: Fri 04 Jun 2027 00:12:08 +0000
asID: 210655
IP address blocks: 51.194.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:41:ca:ef:1e:a4:61:d4:1d:b3:24:9d:56:08:28:52:13:5f:c8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 5 00:07:08 2026 GMT
Not After : Jun 4 00:12:08 2027 GMT
Subject: CN=CCC0F677883E5D9BCD83EA4B193D21F6A40BED7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:96:ec:b5:6f:d4:25:aa:1a:5a:ae:3f:b3:
55:bd:8b:d0:ab:84:9c:e2:80:de:91:69:7c:cc:e5:
1e:2a:13:d1:57:81:65:f3:c3:d9:c0:61:ed:0d:1d:
db:b5:07:03:6e:8a:26:ea:41:89:cf:d8:7b:8d:f2:
87:64:8e:a4:3b:2e:b6:f0:d7:b7:1f:da:14:19:54:
1a:fa:cf:0a:3d:d1:26:0e:d5:38:73:c1:0b:3d:bc:
fe:54:a5:fc:7d:87:c2:31:1d:83:06:1a:85:70:1c:
9d:ae:47:da:3f:56:85:89:24:bf:0c:dd:bc:91:de:
1d:a4:de:81:d6:e6:02:46:25:92:a6:be:4f:19:de:
a1:c0:de:48:a5:dc:6c:b8:79:cf:d1:b3:08:f3:a6:
3e:4b:cc:9c:6f:52:0a:68:6b:a1:10:84:1a:80:f5:
34:33:9e:55:f9:f5:d8:c9:9c:ae:09:1b:d8:3f:dc:
ff:0e:99:d4:a5:94:9b:24:54:a2:06:c7:ad:27:7e:
10:ed:a3:b6:38:ef:2c:31:e8:ff:5d:0b:63:50:00:
23:1e:5d:25:d6:7b:fd:29:20:91:9a:70:d9:5f:90:
91:b7:58:f0:a9:2a:9c:19:3d:7f:97:5b:fa:74:2d:
12:fc:0a:6a:a8:00:fd:c5:e4:2c:28:a2:1c:cc:93:
1c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C0:F6:77:88:3E:5D:9B:CD:83:EA:4B:19:3D:21:F6:A4:0B:ED:7C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.250.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1f:22:e5:c1:5a:55:03:50:3b:bd:de:ad:71:4b:f8:97:0c:
75:a0:fe:95:d9:cf:fc:b9:7c:34:68:a1:89:2b:5e:86:cd:b7:
af:8f:55:1a:c4:3c:76:18:a4:ee:1f:63:3e:55:ad:4b:cd:13:
7d:0f:95:52:63:84:1b:ea:a0:99:47:11:c7:c0:af:76:41:20:
0d:29:89:b1:54:9f:ed:57:8e:96:a2:03:8c:de:22:74:14:0a:
dc:59:6a:5b:ae:ed:16:47:eb:82:e5:37:4f:cb:1d:07:0f:a7:
c2:ea:8c:7a:13:ba:1e:a8:15:80:3e:bd:83:cc:f4:b3:f6:30:
7c:94:22:22:43:0f:d7:4b:19:7a:c3:a8:d5:10:5e:8d:ce:86:
84:cf:c8:5a:ea:f3:5f:bb:a4:a6:94:e8:37:37:80:4f:88:97:
2a:88:90:40:12:8a:4f:7d:eb:8d:7f:58:7c:a4:a3:90:f7:40:
ce:17:fa:cd:20:ec:1a:1e:20:05:e4:bf:33:68:29:d7:c8:58:
c8:a9:f7:b7:8e:ae:86:27:ad:31:d1:e8:06:05:69:d5:36:84:
5d:a3:cb:a3:da:58:a4:38:3a:cc:9e:ef:d3:6f:af:65:5b:d1:
20:91:62:4c:75:41:ef:8d:3c:37:70:4d:3b:9d:8e:1e:14:1e:
9f:9d:cd:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUCUHK7x6kYdQdsySdVggoUhNfyC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MDUwMDA3MDhaFw0yNzA2MDQwMDEyMDhaMDMxMTAvBgNV
BAMTKENDQzBGNjc3ODgzRTVEOUJDRDgzRUE0QjE5M0QyMUY2QTQwQkVEN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIZbstW/UJaoaWq4/s1W9i9Cr
hJzigN6RaXzM5R4qE9FXgWXzw9nAYe0NHdu1BwNuiibqQYnP2HuN8odkjqQ7Lrbw
17cf2hQZVBr6zwo90SYO1ThzwQs9vP5Upfx9h8IxHYMGGoVwHJ2uR9o/VoWJJL8M
3byR3h2k3oHW5gJGJZKmvk8Z3qHA3kil3Gy4ec/Rswjzpj5LzJxvUgpoa6EQhBqA
9TQznlX59djJnK4JG9g/3P8OmdSllJskVKIGx60nfhDto7Y47ywx6P9dC2NQACMe
XSXWe/0pIJGacNlfkJG3WPCpKpwZPX+XW/p0LRL8CmqoAP3F5CwoohzMkxw1AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUzMD2d4g+XZvNg+pLGT0h9qQL7XwwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjEwNjU1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAM8L6
MA0GCSqGSIb3DQEBCwUAA4IBAQA2HyLlwVpVA1A7vd6tcUv4lwx1oP6V2c/8uXw0
aKGJK16Gzbevj1UaxDx2GKTuH2M+Va1LzRN9D5VSY4Qb6qCZRxHHwK92QSANKYmx
VJ/tV46WogOM3iJ0FArcWWpbru0WR+uC5TdPyx0HD6fC6ox6E7oeqBWAPr2DzPSz
9jB8lCIiQw/XSxl6w6jVEF6NzoaEz8ha6vNfu6SmlOg3N4BPiJcqiJBAEopPfeuN
f1h8pKOQ90DOF/rNIOwaHiAF5L8zaCnXyFjIqfe3jq6GJ60x0egGBWnVNoRdo8uj
2likODrMnu/Tb69lW9EgkWJMdUHvjTw3cE07nY4eFB6fnc0/
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:41 2026 by rpki-client