Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210535.roa
File: AS210535.roa (raw, json)
Hash identifier: Ed/Myvsd9bQN9+UfYGpHr4/sPekopLJ/7shLj4wPONw=
Subject key identifier: A2:D6:B8:CB:DD:B0:9A:38:BB:BD:5F:40:87:E0:73:2E:6B:F9:8F:6C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 505347219012F94DE80B990ADF301D3BCD455768
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210535.roa
Signing time: Sun 04 Oct 2026 17:49:35 +0000
ROA not before: Sun 04 Oct 2026 17:44:35 +0000
ROA not after: Sun 03 Oct 2027 17:49:35 +0000
asID: 210535
IP address blocks: 141.11.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:53:47:21:90:12:f9:4d:e8:0b:99:0a:df:30:1d:3b:cd:45:57:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 4 17:44:35 2026 GMT
Not After : Oct 3 17:49:35 2027 GMT
Subject: CN=A2D6B8CBDDB09A38BBBD5F4087E0732E6BF98F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:d6:98:f7:fa:6f:b8:be:a5:b3:28:40:f1:
6d:f1:3e:7e:27:10:91:a2:0c:94:c7:fd:78:6e:29:
37:72:68:0f:40:89:e4:0e:17:af:6f:3d:b6:3b:05:
8b:76:63:57:56:f8:4f:13:b2:e0:39:0f:ca:72:91:
1d:62:d7:3f:ba:9b:ac:ef:c3:82:9e:c9:ce:4a:20:
82:01:e3:3d:04:e5:cb:e4:aa:4d:14:a9:18:7e:79:
10:70:9d:d2:a1:0f:e0:01:7c:5b:f3:23:1b:71:aa:
00:35:dc:a4:24:4b:71:15:25:34:c6:3a:6f:3f:b2:
98:7a:50:3e:cb:7e:0b:c9:9b:f9:33:31:ab:03:be:
b1:39:40:d0:a7:00:82:94:30:3e:5d:67:a0:a8:17:
0d:98:4a:a0:60:eb:30:cd:d9:57:22:53:2e:27:b6:
26:da:be:0b:e7:94:fd:b6:b3:34:0a:28:0b:d8:b0:
e2:ed:d5:02:db:65:5d:a3:9e:3a:6e:9b:81:c6:ab:
ea:fc:2d:7f:43:f4:0a:9c:7f:c8:4d:68:7d:ee:b9:
23:ec:c9:e2:fb:f5:f4:99:fb:d5:ae:e7:cc:bb:e4:
15:9b:c0:a4:f1:9a:9e:11:6f:bb:c2:4b:9d:ce:c9:
f6:50:dd:0d:fb:c5:d2:c9:b7:aa:09:c0:04:9d:ee:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D6:B8:CB:DD:B0:9A:38:BB:BD:5F:40:87:E0:73:2E:6B:F9:8F:6C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.165.0/24
Signature Algorithm: sha256WithRSAEncryption
96:03:53:11:b1:1c:ad:10:4b:7f:7f:56:57:89:5c:a0:54:a5:
93:c9:36:0c:57:87:95:d7:0a:5d:3c:8c:cc:f9:21:54:d2:dd:
b3:19:cb:72:06:95:c5:4f:10:c2:4b:99:c7:ab:59:ce:95:84:
29:80:48:87:8a:4a:f7:57:88:63:fe:58:2f:d6:25:72:9a:32:
e4:42:97:f1:9d:a4:a5:c8:7c:f9:9f:f6:d5:5b:7a:26:ac:33:
30:8d:3c:e6:58:d2:6d:a9:b8:c9:ad:ef:b1:97:cb:4a:95:55:
d4:06:0c:4e:27:b2:07:8d:34:3f:fb:18:3f:6e:b8:5c:cf:21:
09:aa:77:2e:bd:22:37:e4:d1:32:36:0f:2d:d7:73:1c:41:e9:
70:22:bf:61:59:37:b3:df:01:15:cc:50:37:de:08:f6:21:fc:
03:64:ef:62:9b:02:b3:46:4f:41:b0:31:29:9b:7b:f7:5b:f9:
3e:a1:48:aa:40:b6:f1:75:70:6f:96:4c:eb:a1:aa:c8:f4:9f:
45:c5:1e:45:a3:0b:4a:83:5b:dd:ed:c6:c8:02:cf:e9:0f:24:
1c:2b:a9:c8:af:dc:67:1c:26:9c:f3:fe:12:b3:be:64:d9:c1:
b7:21:e2:9b:f1:78:ce:4d:ca:27:b9:22:cb:6d:5d:62:ab:10:
48:16:b1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:29:19 2026 by rpki-client