Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210538.roa
File: AS210538.roa (raw, json)
Hash identifier: cdM0QaIUC1HA0rb1HYmXJ72vCL6iUUgdkrL4GENIUsE=
Subject key identifier: D2:35:77:60:E6:E8:3A:93:ED:BF:E4:30:B0:DC:5E:8F:0C:61:A8:EA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 62D999B693534F824A7A4D526BBCCA0A117699
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210538.roa
Signing time: Tue 22 Sep 2026 20:57:28 +0000
ROA not before: Tue 22 Sep 2026 20:52:28 +0000
ROA not after: Tue 21 Sep 2027 20:57:28 +0000
asID: 210538
IP address blocks: 148.135.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d9:99:b6:93:53:4f:82:4a:7a:4d:52:6b:bc:ca:0a:11:76:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 22 20:52:28 2026 GMT
Not After : Sep 21 20:57:28 2027 GMT
Subject: CN=D2357760E6E83A93EDBFE430B0DC5E8F0C61A8EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:04:f0:2e:61:44:0c:8a:d1:4c:b6:cc:36:
fa:65:88:de:65:85:57:f6:24:2f:bc:f9:3a:eb:ee:
50:26:19:c9:91:b1:b1:49:f5:0a:df:33:6b:e2:78:
09:54:4b:e6:03:f3:e1:3a:39:27:47:9a:f5:1b:43:
2f:1e:80:7e:55:be:af:03:a3:45:55:00:41:87:0c:
e8:10:d9:d9:76:8b:c5:49:8c:b5:bf:67:8c:b5:d5:
9f:2f:38:b3:08:c4:11:04:97:fa:74:66:87:90:77:
f0:a1:cf:9a:fa:84:ba:70:c6:8c:1a:06:d8:80:ae:
45:47:4e:0c:ba:f0:a9:ba:a4:8f:60:ee:60:ff:30:
72:62:c6:d2:a6:24:e2:5d:b1:c9:b9:32:b4:e2:20:
9e:90:fe:8b:88:71:32:e5:3b:21:a7:8e:0b:3d:93:
30:24:ad:df:f6:f0:21:e4:92:1a:17:59:40:b1:70:
d7:ff:0c:c9:ff:73:e9:77:90:be:d7:67:97:23:d1:
bf:83:2d:bd:4b:f8:a8:b8:4c:d2:03:a8:3d:97:74:
b2:a9:84:a8:b8:eb:b9:be:bb:b8:cc:66:b8:9e:df:
06:ce:f9:f1:4d:9d:c6:c4:82:97:11:c4:ec:fc:57:
4e:a1:49:28:dd:d8:6e:46:b5:44:54:e4:3d:80:c9:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:35:77:60:E6:E8:3A:93:ED:BF:E4:30:B0:DC:5E:8F:0C:61:A8:EA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1d:f8:83:94:86:ee:38:63:92:8a:31:13:86:68:af:ac:2e:
23:b4:7a:01:0b:ca:b6:2f:4d:b4:68:7e:65:c0:6e:0c:a9:5e:
3e:4c:4d:0b:c2:b7:ac:cb:b4:69:3a:ab:7a:92:74:63:e4:9a:
49:63:d1:65:cd:78:67:04:35:d8:28:96:9d:d4:58:a5:c0:e4:
6f:d7:25:a2:da:a8:46:9e:93:e0:23:db:c7:a9:1a:11:cb:a5:
35:67:38:53:67:dd:42:07:ad:bc:70:6c:01:2d:10:58:ff:59:
91:a3:34:cf:14:aa:b3:f4:d1:f0:6d:25:dc:38:73:a0:2d:7b:
c4:9a:40:a2:78:0d:29:4d:72:8c:7d:9e:fa:51:89:ad:da:73:
04:f2:1f:3d:e8:02:04:99:89:34:42:a3:88:7b:25:df:40:b7:
eb:de:9a:e6:ba:16:b2:4f:ed:3e:0c:91:47:fa:1b:ce:b3:02:
8e:e4:41:62:e3:d9:24:9c:78:83:c7:c0:fd:e9:ba:66:a6:08:
c9:3a:68:bc:7f:12:b1:07:19:39:c4:e8:db:8b:38:e6:61:12:
9f:fb:d7:2f:8f:87:07:1f:92:51:90:84:93:67:7b:df:a0:0d:
e2:05:75:a4:41:00:3c:a5:dd:04:c1:65:4d:3f:a1:22:8e:ab:
09:2c:5e:bc
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgITYtmZtpNTT4JKek1Sa7zKChF2mTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg0ZmMzMzZiZjlmM2RlNWNlNDE0MTRiZDE5NzE5NDVmNGIy
NDZiZmNjMB4XDTI2MDkyMjIwNTIyOFoXDTI3MDkyMTIwNTcyOFowMzExMC8GA1UE
AxMoRDIzNTc3NjBFNkU4M0E5M0VEQkZFNDMwQjBEQzVFOEYwQzYxQThFQTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMIBBPAuYUQMitFMtsw2+mWI3mWF
V/YkL7z5OuvuUCYZyZGxsUn1Ct8za+J4CVRL5gPz4To5J0ea9RtDLx6AflW+rwOj
RVUAQYcM6BDZ2XaLxUmMtb9njLXVny84swjEEQSX+nRmh5B38KHPmvqEunDGjBoG
2ICuRUdODLrwqbqkj2DuYP8wcmLG0qYk4l2xybkytOIgnpD+i4hxMuU7IaeOCz2T
MCSt3/bwIeSSGhdZQLFw1/8Myf9z6XeQvtdnlyPRv4MtvUv4qLhM0gOoPZd0sqmE
qLjrub67uMxmuJ7fBs758U2dxsSClxHE7PxXTqFJKN3Ybka1RFTkPYDJ6KECAwEA
AaOCAgowggIGMB0GA1UdDgQWBBTSNXdg5ug6k+2/5DCw3F6PDGGo6jAfBgNVHSME
GDAWgBRPwza/nz3lzkFBS9GXGUX0ska/zDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS8wOWJlM2FhZS1hZWExLTQxZGMtYjFiOS05NWFjNTkxODI0
NGQvMC80RkMzMzZCRjlGM0RFNUNFNDE0MTRCRDE5NzE5NDVGNEIyNDZCRkNDLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVDhNMnY1ODk1YzVCUVV2Umx4bEY5TEpH
djh3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnN5
bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00
MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvQVMyMTA1Mzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACUh7Uw
DQYJKoZIhvcNAQELBQADggEBAAQd+IOUhu44Y5KKMROGaK+sLiO0egELyrYvTbRo
fmXAbgypXj5MTQvCt6zLtGk6q3qSdGPkmklj0WXNeGcENdgolp3UWKXA5G/XJaLa
qEaek+Aj28epGhHLpTVnOFNn3UIHrbxwbAEtEFj/WZGjNM8UqrP00fBtJdw4c6At
e8SaQKJ4DSlNcox9nvpRia3acwTyHz3oAgSZiTRCo4h7Jd9At+vemua6FrJP7T4M
kUf6G86zAo7kQWLj2SSceIPHwP3pumamCMk6aLx/ErEHGTnE6NuLOOZhEp/71y+P
hwcfklGQhJNne9+gDeIFdaRBADyl3QTBZU0/oSKOqwksXrw=
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:47:44 2026 by rpki-client