Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210732.roa
File: AS210732.roa (raw, json)
Hash identifier: 23GhykheoiGoZZj3HAbYWBzAQYXtnwow1T2IPcChOWI=
Subject key identifier: 42:11:6C:7B:25:D7:5E:D5:8A:B2:2E:76:25:10:55:84:C9:2A:BD:75
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3DBE9CB890B44DACA9478E28EA6D1F974FE9031F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210732.roa
Signing time: Tue 27 Oct 2026 20:31:56 +0000
ROA not before: Tue 27 Oct 2026 20:26:56 +0000
ROA not after: Tue 26 Oct 2027 20:31:56 +0000
asID: 210732
IP address blocks: 178.94.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:be:9c:b8:90:b4:4d:ac:a9:47:8e:28:ea:6d:1f:97:4f:e9:03:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 27 20:26:56 2026 GMT
Not After : Oct 26 20:31:56 2027 GMT
Subject: CN=42116C7B25D75ED58AB22E7625105584C92ABD75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:97:da:8b:83:85:a2:f6:75:0f:cb:78:0c:
54:74:f5:82:a8:58:60:00:21:0f:02:a7:5b:48:05:
b2:ab:bb:86:d8:2a:41:2f:45:bc:34:1a:5c:34:fe:
8a:fd:ab:a3:c7:95:f8:90:ec:29:80:6c:e4:51:21:
93:57:db:c3:31:6b:a6:68:39:59:06:59:97:1f:e0:
26:4f:01:0d:e2:b7:f4:8b:10:7f:05:5d:cd:31:56:
5d:06:35:72:da:29:b9:52:d0:1c:61:0a:37:02:aa:
52:3b:f1:ed:03:17:d5:8e:3b:fd:2d:dd:36:95:f3:
75:ac:af:d5:90:8e:e7:bd:bb:91:79:98:88:43:44:
9c:65:ca:d6:34:0d:8d:f8:ce:44:e9:b7:c2:ce:32:
28:fe:c2:24:10:70:de:8c:97:2f:1e:ff:a6:88:2d:
5f:6c:9b:5d:ed:75:d9:25:37:35:b3:33:46:67:ec:
09:b1:9c:c2:f9:71:3d:f9:d2:f9:6c:51:1f:77:01:
e0:a0:c2:0a:da:08:d4:f3:4e:95:4b:9b:95:5d:32:
79:dc:28:5d:7e:1e:13:54:91:c9:88:01:7b:6f:94:
cf:52:e6:5e:90:ec:91:d4:76:c4:7d:f0:03:5f:40:
38:8f:c2:e3:92:96:e9:f8:62:d3:06:d5:b5:5b:34:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:11:6C:7B:25:D7:5E:D5:8A:B2:2E:76:25:10:55:84:C9:2A:BD:75
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS210732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3b:2e:65:fa:26:17:9d:b4:d2:85:42:d5:b4:54:3b:7d:08:
9d:ff:40:eb:ab:f1:d1:77:87:87:3e:47:00:15:87:1a:92:b4:
36:e3:89:19:97:c7:15:f0:15:74:1c:64:73:72:92:ce:db:bc:
70:3b:90:27:f2:0d:d0:58:5e:61:48:ac:82:f6:da:df:9a:c0:
74:77:30:ee:8e:e2:87:a2:76:f2:e8:4f:e1:5b:d0:fa:aa:c0:
0d:47:a0:26:72:c3:2b:a3:21:39:20:94:8e:8d:b9:05:f7:0d:
fe:d0:49:64:8e:45:b4:08:93:e9:bb:e9:f5:52:66:e9:e1:00:
e7:44:6b:91:42:63:6a:25:4e:60:81:e4:a1:36:a7:ad:c1:30:
e1:c2:06:34:05:a1:0f:3e:99:6e:2d:e4:9a:a2:43:8c:14:f7:
71:0f:b7:15:f7:33:10:de:b1:e5:15:39:ab:71:f7:4a:19:fc:
b7:77:11:f0:09:b9:12:25:8b:39:1e:74:7d:1e:b3:c5:31:b8:
89:fa:99:54:0d:fd:07:5c:c2:2f:5d:e9:af:b1:a5:2c:05:00:
48:9e:83:8f:13:1e:35:dc:9c:46:b6:ad:f8:61:84:43:af:f9:
15:77:32:18:52:2f:76:0c:6a:b6:89:5c:29:f4:a7:bf:15:42:
ef:ac:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:01:55 2026 by rpki-client