Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210661.roa
File: AS210661.roa (raw, json)
Hash identifier: 1j3nOkviofs813f3DG4pif/DbToNjVu44We2BIi7pEI=
Subject key identifier: 40:CB:BA:CC:59:5F:FD:40:27:05:45:3F:91:E7:52:63:C4:9F:6D:39
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4DBE417F58CC3EBDB2839648E4E6993DA3B16373
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210661.roa
Signing time: Mon 29 Jun 2026 08:05:52 +0000
ROA not before: Mon 29 Jun 2026 08:00:52 +0000
ROA not after: Mon 28 Jun 2027 08:05:52 +0000
asID: 210661
IP address blocks: 51.146.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:be:41:7f:58:cc:3e:bd:b2:83:96:48:e4:e6:99:3d:a3:b1:63:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 29 08:00:52 2026 GMT
Not After : Jun 28 08:05:52 2027 GMT
Subject: CN=40CBBACC595FFD402705453F91E75263C49F6D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:26:80:44:d9:1c:af:3f:94:e1:5c:51:02:
66:80:18:0e:c2:3d:16:61:a4:e4:51:c4:44:27:49:
ae:7d:e4:01:b3:59:3c:b8:e0:66:66:06:94:de:f6:
bc:28:7c:f1:a2:5e:10:a2:6d:82:3a:50:86:36:ef:
da:ce:17:eb:0d:71:4b:49:91:d1:29:f3:e6:45:cf:
aa:a8:13:6a:89:10:89:4e:64:b1:d6:12:d6:ae:c3:
27:d3:f4:bf:a3:d1:8a:bf:96:c2:9f:7b:38:ca:8e:
60:fd:2b:50:d2:ea:0c:ee:2c:9f:ee:80:72:00:e7:
d8:bd:b4:62:b6:ca:4d:dd:92:e7:31:61:e8:a0:ac:
08:5c:a4:69:56:f0:ca:b7:e3:2f:a0:f2:36:db:9a:
ca:8a:96:09:26:04:9c:7f:64:12:16:e0:c0:d0:61:
64:6d:2e:f2:b7:b3:8f:92:3d:49:b2:39:8a:cf:3f:
82:65:2d:96:5e:3c:af:72:f4:75:55:29:9d:fb:d2:
3f:0c:07:c7:1e:e6:50:89:76:9c:9e:1d:6f:a3:72:
e1:ac:9c:11:15:17:57:9a:53:ef:23:6a:a6:fc:0e:
de:27:20:22:16:3b:41:e7:d8:e5:6f:45:cc:7e:5e:
92:d4:12:fc:49:43:f1:22:47:c4:6b:37:19:1c:7e:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CB:BA:CC:59:5F:FD:40:27:05:45:3F:91:E7:52:63:C4:9F:6D:39
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS210661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:93:89:6b:4f:31:77:11:fb:4e:2f:17:b2:d2:38:c4:38:51:
0d:9a:79:5b:e4:74:77:dc:d9:4f:bb:5a:04:70:64:8a:64:be:
81:17:64:3a:21:6f:59:f3:60:c0:2a:3e:ba:f3:40:1b:2f:09:
31:39:69:39:53:4e:e1:04:36:e1:79:c2:7e:df:90:6b:0c:d0:
ce:2e:e1:6a:8a:63:e6:8c:5b:8a:ef:39:62:0e:07:d1:05:bd:
a6:0c:36:07:59:f8:05:c4:21:8b:f1:14:76:71:15:96:42:2d:
7c:47:8f:82:72:a5:50:79:42:e3:1f:5b:61:2c:b2:b4:2b:9f:
9c:a5:af:1c:97:33:56:4c:3a:cb:e2:13:18:5c:40:57:f1:96:
77:96:c4:9a:15:4f:2a:f6:25:1b:53:c3:27:5b:50:c0:58:14:
ff:5d:d3:c2:10:6a:33:ef:ac:db:ac:35:ec:4f:49:db:bb:cd:
ae:0e:28:56:3e:fa:80:87:f8:0a:f2:8d:a2:68:41:af:7e:c4:
21:03:f8:04:4b:1a:9b:7a:c7:e6:79:11:b9:4f:22:e8:f7:ec:
99:6f:57:e4:e6:66:83:47:09:71:cf:22:87:98:b7:64:88:01:
e9:f3:25:08:3a:4d:89:ec:25:17:ba:cc:0f:65:f6:7a:f2:3c:
5f:ad:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 13:19:04 2026 by rpki-client