Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210538.roa
File: AS210538.roa (raw, json)
Hash identifier: mH+kBRdqFpUrEpKib12UslRJmTudpeX1WA7/Svg0m4s=
Subject key identifier: 77:BF:6B:86:23:0F:95:15:E9:65:DD:7B:66:1F:21:71:82:25:50:17
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 624A86F44FC8DF311366B0664BDFC131FF9C0955
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210538.roa
Signing time: Fri 15 Aug 2025 17:54:13 +0000
ROA not before: Fri 15 Aug 2025 17:49:13 +0000
ROA not after: Fri 14 Aug 2026 17:54:13 +0000
asID: 210538
IP address blocks: 179.61.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:4a:86:f4:4f:c8:df:31:13:66:b0:66:4b:df:c1:31:ff:9c:09:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 15 17:49:13 2025 GMT
Not After : Aug 14 17:54:13 2026 GMT
Subject: CN=77BF6B86230F9515E965DD7B661F217182255017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:cd:7e:16:54:79:f3:c2:80:12:b0:67:8a:
c4:38:bb:0c:f5:07:d9:fb:db:16:44:40:70:5e:e7:
5b:f9:ba:df:96:68:59:67:25:e8:d2:7d:2b:63:50:
a2:92:44:e0:25:19:58:d8:3e:80:ac:60:0f:cc:e5:
0f:2a:eb:67:29:f0:d5:3f:5a:60:0b:2f:ab:fa:43:
9c:5a:86:f8:48:09:0a:48:60:16:ce:ad:37:0b:0a:
c4:02:40:49:58:1c:b9:a2:d7:8a:51:04:69:4f:69:
f0:37:5e:c3:3d:36:76:54:33:75:ed:e2:26:d8:78:
19:bd:94:65:c4:96:df:77:ef:ef:3b:05:f5:cb:4b:
e5:52:b3:82:7c:de:03:3f:50:a0:c1:cc:e0:d0:45:
51:e7:6c:a5:72:ba:7e:5e:4f:73:fb:33:e5:b3:0c:
69:96:5d:ca:62:c3:6e:f7:1d:ae:b2:ed:0b:a6:ca:
f2:51:59:7c:53:a9:c9:f0:d5:61:b4:60:61:0f:d7:
8b:d9:98:8c:e5:ab:57:4f:cd:79:78:fc:21:68:5e:
b8:3d:a6:13:97:cd:4e:a5:12:11:f8:a8:cc:b0:e6:
25:d8:8b:38:b2:e2:d4:ad:1b:fb:d7:d2:97:87:55:
20:6a:5f:a9:2c:3a:8a:47:fd:49:83:30:40:d8:42:
7f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BF:6B:86:23:0F:95:15:E9:65:DD:7B:66:1F:21:71:82:25:50:17
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.147.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6d:87:49:19:62:06:a6:1e:91:ad:60:12:d7:81:5c:3d:33:
ed:57:f6:67:4d:8e:82:da:7e:df:66:1c:25:11:0b:3b:bb:c3:
cd:6d:1d:1a:23:76:dd:f5:02:55:ce:15:5a:bb:e2:6e:25:5f:
70:03:9e:c3:e4:d0:f0:b6:76:d8:e2:42:c5:94:cb:c5:7f:79:
4a:ca:0a:98:76:b7:81:d4:b9:2d:d7:8d:c7:52:e8:34:62:4e:
af:7b:05:0d:81:be:d2:99:e3:5e:33:7e:06:ca:2e:f3:29:90:
39:78:cb:18:d0:ec:ab:16:21:a9:5f:b5:59:8e:63:c4:32:50:
53:65:6a:ec:10:b2:19:a5:9f:ed:fc:18:70:37:eb:62:f2:dc:
a7:c6:e2:5b:71:f5:2f:de:18:61:27:e0:4d:e6:8d:95:b4:7c:
1b:78:b8:cc:21:37:8e:e4:86:fa:ed:2a:fa:58:8a:da:9a:1d:
2f:9a:93:8f:dd:fd:7f:6e:7b:c3:9e:09:c6:9d:3a:c8:93:a8:
ac:19:68:2c:f1:33:cc:bf:35:e8:ad:db:5d:b3:07:3e:bf:98:
94:5b:bd:79:28:8f:df:cf:99:7e:b1:2a:25:14:48:0d:6c:58:
2b:f5:07:c4:02:ce:da:9e:f6:13:e6:5e:9d:59:ee:70:e4:f1:
69:c7:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:07:00 2025 by rpki-client