Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210356.roa
File: AS210356.roa (raw, json)
Hash identifier: Ddg2fZZjTdgFe0QYpoqs5uyEJWrMewR3YKrh5rLt3zA=
Subject key identifier: CB:22:5A:1A:CE:ED:E1:DF:88:D5:AA:1C:8D:B4:19:C3:79:22:B7:64
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1B623A5973A0982F641FAC0E48893C56ACC359D9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210356.roa
Signing time: Wed 04 Nov 2026 09:49:39 +0000
ROA not before: Wed 04 Nov 2026 09:44:39 +0000
ROA not after: Wed 03 Nov 2027 09:49:39 +0000
asID: 210356
IP address blocks: 181.214.48.0/24 maxlen: 24
181.214.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:62:3a:59:73:a0:98:2f:64:1f:ac:0e:48:89:3c:56:ac:c3:59:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:39 2026 GMT
Not After : Nov 3 09:49:39 2027 GMT
Subject: CN=CB225A1ACEEDE1DF88D5AA1C8DB419C37922B764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:e3:43:f1:40:4e:0b:f3:9f:ad:e1:5d:a1:
54:fd:20:a7:af:7f:e9:7e:b9:c0:ef:6d:ef:d1:eb:
f6:f8:cd:49:c3:97:0d:df:f3:9f:87:ff:18:e5:59:
72:b8:9e:90:48:93:6d:63:69:55:d4:44:b8:22:87:
33:e0:16:2b:4d:27:7a:fb:12:94:af:5a:15:da:a7:
10:65:08:71:a1:ce:26:8d:9f:88:cf:eb:56:51:2c:
77:a9:82:c1:a8:9e:b5:fa:3f:e8:72:f4:8d:30:f8:
21:56:b2:af:0b:db:bc:9a:a2:39:a9:70:d3:30:a8:
cb:5d:78:ef:5d:6a:e9:d5:c8:94:9f:1a:ba:bc:eb:
ac:0c:4d:51:9a:10:c4:ab:7d:88:96:c8:16:ef:38:
76:90:32:1e:4e:06:07:30:4a:8f:60:55:bb:4f:a1:
58:96:d3:c8:1d:ff:e5:b9:46:17:ab:33:d4:3e:bd:
78:b0:1c:f2:77:59:01:80:3c:e9:23:14:c7:60:b4:
5b:8c:fe:41:77:4d:fc:81:77:78:3d:60:79:ad:04:
bd:9f:3c:8d:4f:49:a4:24:4b:d8:e4:18:11:03:0b:
12:2a:16:84:ca:b2:3a:7b:88:61:9f:29:58:57:3f:
0e:15:a7:b2:93:5c:2a:03:d0:cd:ce:35:ac:9e:b4:
ec:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:22:5A:1A:CE:ED:E1:DF:88:D5:AA:1C:8D:B4:19:C3:79:22:B7:64
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.48.0/24
181.214.221.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:55:9c:ab:3b:fe:95:c7:1d:f3:9c:29:d4:ba:31:f6:5a:9f:
35:93:93:ba:e8:48:ad:3f:26:b8:61:0d:fc:ee:fe:df:60:1f:
8e:53:95:14:f3:1f:b8:22:46:28:fe:af:40:40:cb:69:d6:ef:
a7:66:20:f2:ab:ec:75:8a:42:83:2c:7a:60:df:c2:af:9e:2c:
d2:6a:c9:23:2c:b2:c1:6e:21:99:ae:bf:d4:49:71:ed:b3:79:
4a:23:a8:8d:2e:eb:c0:ef:d3:01:91:68:12:4d:86:e6:06:9a:
97:72:c3:75:b9:70:08:8b:22:23:b8:43:7c:2b:6e:a7:51:d1:
c6:24:c6:42:15:8f:97:5f:a4:8c:ac:75:09:3b:d1:dc:3c:c2:
ba:02:00:b0:93:b2:24:94:62:71:34:6e:26:0d:25:a0:26:b9:
be:29:4e:72:3c:ae:57:ed:cc:7e:c3:d5:a4:e9:b6:61:19:43:
67:7f:99:94:6e:1b:69:33:fa:12:39:b5:22:9f:51:26:9b:4d:
2a:41:85:a5:f3:73:97:64:54:cb:91:ed:1c:e5:bc:24:d0:66:
b8:6d:cd:9b:c7:86:5e:5b:16:b9:ec:fb:79:a6:29:e8:95:2e:
83:f8:52:ed:d7:d1:8c:f7:9c:6f:98:27:d3:fd:66:00:3f:a1:
6f:54:2a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:25:47 2026 by rpki-client