Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210162.roa
File: AS210162.roa (raw, json)
Hash identifier: 6C8hKr+WxansqUoC066B4O2/qtX29xaYY6W3W9zXnWs=
Subject key identifier: 87:81:66:D8:F5:E8:2A:8E:91:11:C7:D3:65:B1:A3:7D:D1:DF:92:40
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4DDF86B0D070FE88412198B794403CB4CEB44B78
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210162.roa
Signing time: Mon 28 Sep 2026 20:07:18 +0000
ROA not before: Mon 28 Sep 2026 20:02:18 +0000
ROA not after: Mon 27 Sep 2027 20:07:18 +0000
asID: 210162
IP address blocks: 91.124.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:df:86:b0:d0:70:fe:88:41:21:98:b7:94:40:3c:b4:ce:b4:4b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 28 20:02:18 2026 GMT
Not After : Sep 27 20:07:18 2027 GMT
Subject: CN=878166D8F5E82A8E9111C7D365B1A37DD1DF9240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:98:32:38:be:01:74:89:8f:4f:83:28:21:81:
2b:21:70:bb:be:7d:96:ae:14:22:4f:e7:0e:56:3c:
b0:2e:d3:69:bf:33:63:30:ec:72:f8:01:e3:0d:e6:
58:00:61:4a:0f:b6:1c:9b:60:80:ff:44:a3:1e:c2:
33:57:70:19:3b:99:87:2f:73:5d:34:f2:3a:d3:9d:
6d:a4:9d:3b:8a:8a:d6:2d:f0:7f:31:a2:dd:fd:3a:
bc:f5:2c:e2:20:9b:58:a3:51:d6:8a:d6:20:2e:25:
23:87:31:79:7c:25:ad:23:f6:a3:88:64:a1:f7:9c:
e1:e4:17:24:72:0b:21:f9:91:71:cc:b0:55:44:f3:
f0:65:3b:8d:f7:da:c7:9f:b3:58:80:06:bc:10:5c:
71:96:7e:5d:dd:d8:02:13:a1:b2:f9:c3:e9:fa:c6:
b1:d2:0e:4d:bf:e9:a9:2c:2b:9b:b0:6d:a0:a9:01:
2f:c3:5b:ea:c2:d8:08:07:7e:9a:24:6c:a8:db:1f:
af:94:22:fe:b6:89:2a:bc:8f:1f:66:97:9a:ee:a1:
c1:f1:f5:bf:8f:17:2f:de:21:7b:bd:6e:ea:1a:fc:
4c:e0:d8:7e:36:96:59:5a:5d:01:d9:0e:84:f4:73:
f7:bd:7e:27:8e:e3:df:d9:fa:fa:f2:ca:60:c6:1c:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:81:66:D8:F5:E8:2A:8E:91:11:C7:D3:65:B1:A3:7D:D1:DF:92:40
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210162.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.150.0/23
Signature Algorithm: sha256WithRSAEncryption
01:9c:37:04:c1:14:94:52:a7:85:c0:9c:1f:44:7a:01:5f:80:
ed:b1:26:fb:78:13:59:4a:08:b0:0e:a2:7d:79:61:d9:21:00:
20:46:8d:69:a2:f4:11:c4:8e:ae:bb:68:72:21:be:cc:ef:14:
e3:4d:aa:87:09:ea:4a:e4:ff:6d:c9:b2:a9:40:7a:8c:e2:f9:
d4:bc:ae:aa:3d:d8:57:3b:a5:ff:ef:b8:14:20:e7:ca:d3:6d:
26:e0:b6:6e:ec:8a:5e:17:16:89:a4:44:e2:6f:10:41:7f:94:
36:b3:cd:67:d3:37:05:1e:9d:2f:60:04:0f:2e:9b:98:29:18:
52:4b:c0:c4:44:7d:92:38:0f:1d:7c:a9:ec:ca:d5:f5:44:0e:
77:63:5f:3f:68:67:15:f5:1a:68:1b:d8:3d:5d:c0:54:0a:3d:
a9:18:76:4a:70:00:52:8d:02:0e:07:50:a0:51:02:fd:f7:fb:
e2:a8:73:2f:5c:93:0e:b4:67:05:6e:a2:8d:13:cf:c1:56:a4:
32:30:6b:a2:8a:48:93:54:46:73:5f:3a:5b:50:fa:1a:36:fe:
ba:c7:c9:e1:11:48:1c:7c:c4:42:1e:09:51:e3:6a:d9:b9:20:
e9:56:d6:d0:e7:f6:88:d7:b7:d3:b1:11:71:1b:3b:83:68:e0:
fa:b8:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:36:02 2026 by rpki-client