Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210937.roa
File: AS210937.roa (raw, json)
Hash identifier: 0EHdhwkcj/eZgHP0IJdlVU7NvUkeDHlqjHQNGAoRqmY=
Subject key identifier: 15:0F:70:2B:2B:D9:2C:99:B1:A8:64:D6:CA:3A:26:07:DA:C4:51:A6
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1E3607573C33BF8750E886EE1733E0A2964D8661
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210937.roa
Signing time: Tue 01 Sep 2026 16:49:31 +0000
ROA not before: Tue 01 Sep 2026 16:44:31 +0000
ROA not after: Tue 31 Aug 2027 16:49:31 +0000
asID: 210937
IP address blocks: 141.11.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:36:07:57:3c:33:bf:87:50:e8:86:ee:17:33:e0:a2:96:4d:86:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 1 16:44:31 2026 GMT
Not After : Aug 31 16:49:31 2027 GMT
Subject: CN=150F702B2BD92C99B1A864D6CA3A2607DAC451A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:99:4c:a0:de:2e:db:4f:eb:0c:e4:77:4c:
a9:12:c8:be:93:fc:cc:bc:a6:3d:b4:a9:7e:e1:9c:
f9:b1:ea:35:e6:fc:60:98:db:29:be:cf:83:f2:1d:
48:53:ec:a0:96:28:75:5d:5a:b3:f7:a7:59:24:d6:
3d:07:52:b0:cb:7f:e3:ca:70:04:f2:06:1e:39:7b:
e4:fe:07:e6:8e:75:5c:1d:11:cf:f4:3b:c2:27:c4:
a7:17:e1:d8:61:55:36:48:cc:bc:10:2e:fb:bf:ed:
9c:df:57:93:f6:73:24:f7:bd:67:97:80:46:fe:60:
e0:f8:3b:85:84:4b:97:f3:5d:11:05:a5:91:83:15:
b9:ab:50:1a:97:bd:e3:27:43:72:02:36:c8:7f:5f:
3c:f8:e8:1b:d4:d1:d0:8c:48:e3:3f:62:9b:2b:c4:
52:34:d8:1c:54:e0:45:5f:97:b2:14:b9:88:d1:c6:
ca:00:ec:b9:2e:89:e1:72:af:77:bb:eb:7d:34:1c:
a9:af:eb:7a:6c:ad:8f:21:9e:eb:e5:11:e1:15:50:
6c:4d:57:99:42:c3:2c:2b:40:1e:b5:5b:2e:9f:ca:
8d:65:6e:d4:a8:84:9a:b1:76:42:87:88:48:b1:18:
9a:57:8b:bc:c4:1a:21:6e:e4:62:c9:25:cd:05:dd:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0F:70:2B:2B:D9:2C:99:B1:A8:64:D6:CA:3A:26:07:DA:C4:51:A6
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3b:93:55:bb:cb:ab:5c:93:68:f8:8c:f2:40:06:6c:7e:11:
eb:b6:c0:c2:92:21:6d:e7:82:ab:37:c6:ab:21:2e:0f:26:a0:
9e:56:23:92:f1:c6:3f:b7:69:ef:8e:b1:c3:c4:57:27:80:69:
b5:b1:ca:d9:ef:b9:f4:b7:0b:de:0b:08:87:bb:7d:ae:19:fb:
14:a3:cb:69:79:41:d7:ef:e2:51:a7:31:72:d2:66:cc:87:e5:
74:50:02:d2:89:6c:1f:91:1a:ac:06:78:46:09:55:50:ae:b8:
00:8c:96:6a:6a:02:49:e8:70:b8:6d:a9:b0:dc:58:26:8c:04:
3f:56:d7:45:a5:9a:fe:63:7d:16:1c:00:b6:a2:be:a7:0a:f3:
d0:ed:5b:17:3b:5c:a8:38:22:2d:ec:64:f0:d7:87:e8:da:84:
f8:e2:e8:62:ff:72:f3:c0:21:17:87:aa:3d:04:4a:d0:4b:0e:
af:28:aa:d5:f5:9b:bc:3b:72:e3:bf:fb:b7:52:61:8c:cf:07:
cb:bb:ec:e8:51:bf:ed:11:71:b1:0e:08:86:5b:04:57:f5:5b:
3d:2b:ed:b3:56:3f:2f:0a:b8:5d:35:84:8f:cc:86:84:5e:d1:
52:23:d5:ad:e5:e8:97:79:b7:a4:d6:48:7e:2c:c0:be:b4:6e:
d8:cb:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:26:59 2026 by rpki-client