Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: +gQk56T0pjmGOrHwL1Eh/xAuCZogui9TrT0X94hqlPU=
Subject key identifier: 8E:72:E3:BF:D1:7E:30:44:EA:1D:27:61:84:42:54:4E:CC:4C:2C:75
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6FF449465D68EBB120F7C357ED6E03DD52F1F7DA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
Signing time: Mon 09 Nov 2026 00:05:51 +0000
ROA not before: Mon 09 Nov 2026 00:00:51 +0000
ROA not after: Mon 08 Nov 2027 00:05:51 +0000
asID: 10753
IP address blocks: 82.21.210.0/24 maxlen: 24
82.21.216.0/24 maxlen: 24
82.21.234.0/24 maxlen: 24
82.22.250.0/24 maxlen: 24
82.23.19.0/24 maxlen: 24
82.23.20.0/24 maxlen: 24
82.23.23.0/24 maxlen: 24
82.23.24.0/24 maxlen: 24
82.23.59.0/24 maxlen: 24
82.23.60.0/24 maxlen: 24
82.24.66.0/24 maxlen: 24
82.24.75.0/24 maxlen: 24
82.24.87.0/24 maxlen: 24
82.24.104.0/24 maxlen: 24
82.24.124.0/24 maxlen: 24
82.24.147.0/24 maxlen: 24
82.24.173.0/24 maxlen: 24
82.24.180.0/24 maxlen: 24
82.24.202.0/24 maxlen: 24
82.25.225.0/24 maxlen: 24
82.25.250.0/24 maxlen: 24
82.26.234.0/24 maxlen: 24
82.26.250.0/24 maxlen: 24
82.27.210.0/24 maxlen: 24
82.27.220.0/24 maxlen: 24
82.27.250.0/24 maxlen: 24
82.29.239.0/24 maxlen: 24
82.29.240.0/24 maxlen: 24
82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
178.83.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f4:49:46:5d:68:eb:b1:20:f7:c3:57:ed:6e:03:dd:52:f1:f7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 9 00:00:51 2026 GMT
Not After : Nov 8 00:05:51 2027 GMT
Subject: CN=8E72E3BFD17E3044EA1D27618442544ECC4C2C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a1:35:91:7a:49:17:4a:40:b9:52:6c:48:36:
82:ff:4e:ce:40:f1:2a:af:c7:4b:51:34:44:2b:a3:
08:0f:8d:65:5b:b1:21:25:7d:97:74:c4:70:5b:59:
56:be:14:0e:37:bc:ed:9e:76:d9:f6:e6:14:cb:cf:
8b:56:46:d4:f8:92:27:a2:a2:85:d9:ee:f3:a1:e1:
de:2b:ba:55:7b:a3:02:f1:a3:ca:40:08:3b:ef:61:
ca:36:33:38:c4:c7:ee:99:de:28:4e:98:83:e5:70:
3b:5c:ca:bc:05:21:c9:ff:91:91:5e:25:9a:7a:e0:
62:57:bb:6d:fb:4d:f0:7d:f4:3b:a9:ce:69:89:f1:
d8:f5:f4:5a:e7:0f:dd:ff:dd:8a:4f:3e:db:98:f2:
19:59:c3:25:dd:5f:46:ec:df:77:fc:a4:d4:cf:a1:
84:00:06:7e:be:fb:e2:66:94:dc:e4:68:dc:62:48:
06:15:a7:89:1e:1b:e3:4d:6c:ce:39:4e:b3:17:6f:
f7:48:e0:94:fb:cf:26:f4:bc:e9:2b:8b:45:5b:c1:
6e:3e:cf:4b:81:8c:16:eb:50:36:2f:75:cc:11:b3:
33:69:e6:af:4a:cb:fb:27:03:76:8b:d2:b0:a2:7e:
2e:a9:8c:4f:0c:e0:73:b4:1c:cc:fb:56:55:e9:40:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:72:E3:BF:D1:7E:30:44:EA:1D:27:61:84:42:54:4E:CC:4C:2C:75
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.210.0/24
82.21.216.0/24
82.21.234.0/24
82.22.250.0/24
82.23.19.0-82.23.20.255
82.23.23.0-82.23.24.255
82.23.59.0-82.23.60.255
82.24.66.0/24
82.24.75.0/24
82.24.87.0/24
82.24.104.0/24
82.24.124.0/24
82.24.147.0/24
82.24.173.0/24
82.24.180.0/24
82.24.202.0/24
82.25.225.0/24
82.25.250.0/24
82.26.234.0/24
82.26.250.0/24
82.27.210.0/24
82.27.220.0/24
82.27.250.0/24
82.29.239.0-82.29.240.255
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
178.83.82.0/23
Signature Algorithm: sha256WithRSAEncryption
95:ab:6e:a2:18:21:fb:92:13:9d:35:c0:e0:b3:56:f9:6b:6c:
58:91:d7:f0:2b:46:da:1a:96:99:a8:64:c6:d3:0f:25:fc:c1:
35:a9:2c:67:27:92:fb:53:a1:8f:01:8f:8f:0d:bb:89:47:69:
97:6d:ef:eb:ab:8c:69:42:83:02:0c:72:b9:40:c5:16:b2:48:
89:97:99:a9:c0:d6:00:12:1b:af:29:b0:01:97:a1:9f:d9:37:
25:1d:a4:70:f8:52:b2:4a:5e:67:1d:2a:74:e2:ab:56:aa:77:
44:96:47:5d:b3:fe:29:6d:5e:7c:9b:fa:3e:8c:6a:4d:43:22:
08:dc:c6:ec:c8:79:cb:91:64:4b:e3:15:19:93:57:a1:02:aa:
88:34:f1:7e:e6:fa:64:92:d4:70:0f:36:c3:8f:f2:e9:1e:97:
61:ee:c0:8e:48:0f:f5:74:88:18:3c:6e:e6:9c:57:12:93:8a:
f6:ff:16:a0:1a:ab:10:35:09:73:98:cb:4b:60:a1:a4:e2:43:
66:6b:2d:67:45:c8:31:de:52:7d:41:87:74:0e:13:2e:b3:fa:
79:d6:2f:48:5b:b0:95:41:fd:16:02:ac:50:df:8d:09:83:6d:
29:61:c7:3f:68:a4:fc:02:b4:c4:d8:4f:9d:eb:06:a1:4e:a1:
fa:f2:99:02
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUb/RJRl1o67Eg98NX7W4D3VLx99owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjExMDkwMDAwNTFaFw0yNzExMDgwMDA1NTFaMDMxMTAvBgNV
BAMTKDhFNzJFM0JGRDE3RTMwNDRFQTFEMjc2MTg0NDI1NDRFQ0M0QzJDNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDooTWRekkXSkC5UmxINoL/Ts5A
8Sqvx0tRNEQrowgPjWVbsSElfZd0xHBbWVa+FA43vO2edtn25hTLz4tWRtT4kiei
ooXZ7vOh4d4rulV7owLxo8pACDvvYco2MzjEx+6Z3ihOmIPlcDtcyrwFIcn/kZFe
JZp64GJXu237TfB99DupzmmJ8dj19FrnD93/3YpPPtuY8hlZwyXdX0bs33f8pNTP
oYQABn6+++JmlNzkaNxiSAYVp4keG+NNbM45TrMXb/dI4JT7zyb0vOkri0VbwW4+
z0uBjBbrUDYvdcwRszNp5q9Ky/snA3aL0rCifi6pjE8M4HO0HMz7VlXpQJH5AgMB
AAGjggLQMIICzDAdBgNVHQ4EFgQUjnLjv9F+METqHSdhhEJUTsxMLHUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTA3NTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgeUGCCsGAQUFBwEHAQH/BIHVMIHSMIHPBAIAATCByAME
AFIV0gMEAFIV2AMEAFIV6gMEAFIW+jAMAwQAUhcTAwQAUhcUMAwDBABSFxcDBABS
FxgwDAMEAFIXOwMEAFIXPAMEAFIYQgMEAFIYSwMEAFIYVwMEAFIYaAMEAFIYfAME
AFIYkwMEAFIYrQMEAFIYtAMEAFIYygMEAFIZ4QMEAFIZ+gMEAFIa6gMEAFIa+gME
AFIb0gMEAFIb3AMEAFIb+jAMAwQAUh3vAwQAUh3wAwQBUiYqAwQBUiYuAwQBUiZQ
AwQBslNSMA0GCSqGSIb3DQEBCwUAA4IBAQCVq26iGCH7khOdNcDgs1b5a2xYkdfw
K0baGpaZqGTG0w8l/ME1qSxnJ5L7U6GPAY+PDbuJR2mXbe/rq4xpQoMCDHK5QMUW
skiJl5mpwNYAEhuvKbABl6Gf2TclHaRw+FKySl5nHSp04qtWqndElkdds/4pbV58
m/o+jGpNQyII3MbsyHnLkWRL4xUZk1ehAqqINPF+5vpkktRwDzbDj/LpHpdh7sCO
SA/1dIgYPG7mnFcSk4r2/xagGqsQNQlzmMtLYKGk4kNmay1nRcgx3lJ9QYd0DhMu
s/p51i9IW7CVQf0WAqxQ340Jg20pYcc/aKT8ArTE2E+d6wahTqH68pkC
-----END CERTIFICATE-----
Generated at Thu Nov 12 18:33:08 2026 by rpki-client