Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210495.roa
File: AS210495.roa (raw, json)
Hash identifier: x1oESjIIIj8fxjVoerONpG3Y7bbsMFawNV9iZdjR1No=
Subject key identifier: E1:28:1D:16:AF:B3:FC:1C:EC:CF:11:6B:F6:8F:0F:6D:D7:A9:20:C5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 07765743352503AC4E1FB9723413EA98D0C08839
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210495.roa
Signing time: Mon 12 Oct 2026 12:46:50 +0000
ROA not before: Mon 12 Oct 2026 12:41:50 +0000
ROA not after: Mon 11 Oct 2027 12:46:50 +0000
asID: 210495
IP address blocks: 46.202.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 02:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:76:57:43:35:25:03:ac:4e:1f:b9:72:34:13:ea:98:d0:c0:88:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 12 12:41:50 2026 GMT
Not After : Oct 11 12:46:50 2027 GMT
Subject: CN=E1281D16AFB3FC1CECCF116BF68F0F6DD7A920C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:40:fa:5b:8f:69:8d:99:e8:52:d6:83:66:
57:f3:fc:61:f3:40:40:02:f3:50:0c:e7:16:07:ca:
c5:b1:bd:6c:f2:cc:63:d8:77:78:8b:d3:7f:4a:0c:
5f:23:5e:20:6f:e3:f5:4e:2e:33:00:b1:75:05:8b:
3a:3e:80:3a:c3:15:13:0c:1e:bd:d9:2e:31:01:a3:
ae:c6:c7:8b:4f:13:95:bd:32:fe:13:d0:45:b9:bf:
2f:28:f9:17:df:15:db:bf:0f:c9:c0:6a:26:46:bb:
99:a8:3e:bc:9d:76:6f:25:e6:c2:68:6d:c8:04:c5:
2a:6c:42:c1:f0:44:0f:05:73:e0:12:38:c9:68:d6:
b4:8d:8d:56:f2:4e:d8:39:78:02:4f:5a:c4:5b:b7:
db:30:dd:dd:a7:8d:09:e7:a5:9c:f4:40:1f:7d:27:
62:e7:10:7a:b6:17:cc:d1:0b:9c:80:5d:36:99:4a:
59:07:82:41:17:7d:2b:d0:02:8b:88:82:20:c7:96:
47:15:12:3a:8b:b9:87:9c:b0:4d:25:ce:a9:35:1c:
83:75:92:d2:5c:de:54:06:87:d9:ff:c9:ba:9d:d6:
d0:8b:9d:78:5e:62:95:0f:be:18:fe:32:3a:7e:9a:
7a:85:da:68:a2:7c:dc:2e:a8:10:04:d8:7e:93:be:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:28:1D:16:AF:B3:FC:1C:EC:CF:11:6B:F6:8F:0F:6D:D7:A9:20:C5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210495.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.99.0/24
Signature Algorithm: sha256WithRSAEncryption
31:29:f6:08:99:b7:61:72:b4:19:f2:59:59:1b:72:86:49:02:
3b:c7:ee:6a:b8:d9:da:6d:49:51:84:ec:e8:a6:24:ef:af:e4:
50:f6:6a:ef:ac:de:1e:09:25:b9:25:ce:ee:57:52:2a:b2:75:
2e:5e:08:39:ed:ed:5d:84:e6:49:a4:6f:06:5d:b2:c5:13:6c:
ba:21:bb:db:35:14:38:56:fc:df:de:e6:a7:e6:ee:6e:ae:ae:
47:c1:eb:a3:3e:e9:7a:80:68:fc:f3:9f:d0:e2:dc:10:16:30:
ea:dd:35:3b:9c:80:5e:c4:de:75:f7:96:3b:d2:76:22:b8:2d:
2b:a2:ca:16:39:a9:3c:94:55:8a:49:3c:63:3d:53:c0:5d:3e:
cc:f4:76:12:1f:32:6d:e6:21:64:be:2d:42:ed:cd:de:3a:87:
a2:5d:7e:52:d9:7d:3f:ec:e8:f3:b7:c5:a9:4e:20:8d:dd:c3:
1e:69:41:30:7a:9d:d0:d1:67:13:eb:31:a9:b0:6e:cd:b0:d4:
2d:e7:fc:d9:7d:c3:02:b7:e0:b3:82:f3:cb:c7:1b:f2:41:f5:
46:9c:4d:e0:b6:00:61:a7:1f:f5:4e:e8:2b:61:48:cb:79:eb:
ab:65:db:f1:0e:db:b8:1e:15:2e:50:91:d0:1b:aa:13:71:c9:
df:5a:f6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:07:19 2026 by rpki-client