Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
File:                     AS10753.roa (raw, json)
Hash identifier:          WBWMLay9erijlV+5ETPYtylkcnhkrdjeubeZ2vAGHj0=
Subject key identifier:   7A:09:4C:E5:32:17:C6:B6:AA:A5:8E:16:C8:A9:B1:AF:3E:3E:C7:48
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       5F47D66D8A20513FCC7CABF4C5D8F7133A5446DA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
Signing time:             Wed 22 Jul 2026 13:44:16 +0000
ROA not before:           Wed 22 Jul 2026 13:39:16 +0000
ROA not after:            Wed 21 Jul 2027 13:44:16 +0000
asID:                     10753
IP address blocks:        82.21.210.0/24 maxlen: 24
                          82.21.216.0/24 maxlen: 24
                          82.21.234.0/24 maxlen: 24
                          82.22.250.0/24 maxlen: 24
                          82.23.19.0/24 maxlen: 24
                          82.23.20.0/24 maxlen: 24
                          82.23.23.0/24 maxlen: 24
                          82.23.24.0/24 maxlen: 24
                          82.23.59.0/24 maxlen: 24
                          82.23.60.0/24 maxlen: 24
                          82.24.66.0/24 maxlen: 24
                          82.24.75.0/24 maxlen: 24
                          82.24.87.0/24 maxlen: 24
                          82.24.104.0/24 maxlen: 24
                          82.24.124.0/24 maxlen: 24
                          82.24.147.0/24 maxlen: 24
                          82.24.173.0/24 maxlen: 24
                          82.24.180.0/24 maxlen: 24
                          82.24.202.0/24 maxlen: 24
                          82.25.225.0/24 maxlen: 24
                          82.25.250.0/24 maxlen: 24
                          82.26.234.0/24 maxlen: 24
                          82.26.250.0/24 maxlen: 24
                          82.27.210.0/24 maxlen: 24
                          82.27.220.0/24 maxlen: 24
                          82.27.250.0/24 maxlen: 24
                          82.29.239.0/24 maxlen: 24
                          82.29.240.0/24 maxlen: 24
                          82.38.23.0/24 maxlen: 24
                          82.38.42.0/23 maxlen: 24
                          82.38.46.0/23 maxlen: 24
                          82.38.80.0/23 maxlen: 24
                          82.38.105.0/24 maxlen: 24
                          82.38.215.0/24 maxlen: 24
                          82.39.136.0/24 maxlen: 24
                          178.83.82.0/23 maxlen: 24
                          178.83.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:47:d6:6d:8a:20:51:3f:cc:7c:ab:f4:c5:d8:f7:13:3a:54:46:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jul 22 13:39:16 2026 GMT
            Not After : Jul 21 13:44:16 2027 GMT
        Subject: CN=7A094CE53217C6B6AAA58E16C8A9B1AF3E3EC748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:d2:3a:72:6c:e8:32:b3:66:b9:0a:39:f6:
                    8b:9d:6f:98:40:b6:fe:dc:09:ad:39:6e:81:db:09:
                    0c:02:64:cb:f7:d7:0e:02:75:55:56:cd:99:7f:94:
                    50:a1:39:bb:6e:5c:61:71:ce:8c:bb:42:dc:ae:44:
                    00:b6:26:a4:c7:96:2b:34:29:2e:c0:ef:11:c8:72:
                    e5:3b:eb:e4:8b:38:87:57:e6:40:66:17:68:2a:76:
                    8e:60:d6:3f:ab:14:41:e3:58:3d:5c:da:67:09:24:
                    f5:26:d7:d5:60:73:9d:83:e9:aa:c1:6d:40:90:9a:
                    55:d4:29:2b:4a:80:a0:83:cf:25:04:99:22:9d:19:
                    4f:24:96:64:c8:19:71:e9:73:91:a7:01:e0:ab:e9:
                    cd:fb:b1:d3:5a:4a:da:02:0e:49:41:7a:b4:27:93:
                    a8:16:98:00:fc:be:48:84:de:1d:74:8f:e3:d1:eb:
                    f8:f9:51:4c:80:0c:8d:74:f0:23:cf:fb:ff:21:6f:
                    53:71:ac:3b:e2:53:e7:e0:63:d5:5a:d4:52:24:ff:
                    60:fb:77:9b:59:fa:79:3c:76:4c:8b:81:c9:95:a1:
                    32:aa:2c:4e:95:74:da:c6:2b:df:1a:62:51:1e:6b:
                    c9:31:15:8c:7f:87:c9:44:c8:e8:a8:a4:63:27:a5:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:09:4C:E5:32:17:C6:B6:AA:A5:8E:16:C8:A9:B1:AF:3E:3E:C7:48
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.21.210.0/24
                  82.21.216.0/24
                  82.21.234.0/24
                  82.22.250.0/24
                  82.23.19.0-82.23.20.255
                  82.23.23.0-82.23.24.255
                  82.23.59.0-82.23.60.255
                  82.24.66.0/24
                  82.24.75.0/24
                  82.24.87.0/24
                  82.24.104.0/24
                  82.24.124.0/24
                  82.24.147.0/24
                  82.24.173.0/24
                  82.24.180.0/24
                  82.24.202.0/24
                  82.25.225.0/24
                  82.25.250.0/24
                  82.26.234.0/24
                  82.26.250.0/24
                  82.27.210.0/24
                  82.27.220.0/24
                  82.27.250.0/24
                  82.29.239.0-82.29.240.255
                  82.38.23.0/24
                  82.38.42.0/23
                  82.38.46.0/23
                  82.38.80.0/23
                  82.38.105.0/24
                  82.38.215.0/24
                  82.39.136.0/24
                  178.83.82.0/23
                  178.83.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ae:b7:6e:01:df:6a:0b:78:b3:1c:7d:78:42:a9:07:be:d3:
         2c:15:08:b6:c9:14:cc:45:6c:e1:85:b9:0d:fb:ac:11:95:5f:
         2a:b0:94:4e:9c:07:ab:27:da:2c:c2:73:eb:40:bb:2b:a8:13:
         9a:7e:e1:ae:52:08:29:c1:98:06:a6:23:69:65:8f:1f:5d:e6:
         3f:7d:a3:96:1d:1a:ef:1e:64:c1:98:a7:d4:f6:1c:e2:32:66:
         dd:f0:72:ba:79:32:00:8a:ae:9a:91:be:0e:4c:1f:6e:1e:44:
         5a:42:93:82:c0:46:01:71:d3:a2:76:e9:4b:01:d2:73:42:0d:
         2c:1a:a0:99:b0:79:ec:f7:fb:33:c0:ef:71:ea:88:f3:fd:a4:
         23:45:c6:29:4c:87:00:c4:e6:30:15:00:e0:04:1d:1e:6f:6f:
         a0:50:3f:3a:34:fe:00:98:32:0f:62:74:94:33:b7:c3:21:51:
         49:d1:15:25:c5:96:01:3a:26:f4:b3:1c:48:72:5b:f9:28:9d:
         03:84:1c:18:b9:3a:3d:4e:e5:6d:7d:14:8b:e2:77:8e:70:31:
         7d:79:55:54:08:57:d7:02:e5:a5:87:87:60:16:f7:be:57:2f:
         a2:c2:7c:95:73:9a:ef:40:a0:b8:97:bf:27:d8:b5:7e:41:e8:
         eb:13:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:18:07 2026 by rpki-client