Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210097.roa
File: AS210097.roa (raw, json)
Hash identifier: oQ5MPbjkTaiKo06fpNxcrkjDkon4d2vQeqg93glal6o=
Subject key identifier: 0E:AF:D3:E1:92:04:B3:01:34:87:60:1E:EC:D8:E2:AB:48:2C:A1:E2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 14C09C4666253AFE1C90749E95246E685FA13C81
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210097.roa
Signing time: Tue 21 Jul 2026 09:29:46 +0000
ROA not before: Tue 21 Jul 2026 09:24:46 +0000
ROA not after: Tue 20 Jul 2027 09:29:46 +0000
asID: 210097
IP address blocks: 178.83.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c0:9c:46:66:25:3a:fe:1c:90:74:9e:95:24:6e:68:5f:a1:3c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 21 09:24:46 2026 GMT
Not After : Jul 20 09:29:46 2027 GMT
Subject: CN=0EAFD3E19204B3013487601EECD8E2AB482CA1E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:aa:5d:d4:76:e0:01:cb:34:fc:45:74:d2:
ed:62:e7:4b:3f:21:5e:b2:76:8e:85:a3:35:b4:33:
21:5f:f1:3d:90:06:63:f3:fc:e3:d2:a9:c9:04:91:
be:31:63:ff:c9:69:90:e5:e4:a2:1e:5f:e5:29:1b:
0e:bf:df:3e:a8:3a:d8:ad:6e:19:ab:b3:2b:ba:42:
20:6e:85:51:fa:0b:bf:52:31:10:40:7c:e1:06:08:
0f:ec:f5:56:a8:fc:47:9f:7b:b8:24:97:27:7b:a7:
72:ec:bd:fc:2c:a6:7b:be:9c:8e:14:6d:6a:99:b4:
a4:87:d9:45:f7:cb:0b:4e:c6:7d:88:18:64:f6:fa:
cc:f2:80:be:60:c5:ec:80:b5:8b:ac:fd:8b:1b:51:
f6:de:0c:a6:a0:b8:69:69:ad:e9:3c:5d:80:17:ec:
d0:98:dc:ea:e8:73:e3:c3:a0:3c:f3:8c:ae:e8:4a:
ed:6a:7b:e3:3a:35:0e:2c:3e:ec:70:66:ba:ed:d9:
db:fd:46:64:49:dc:3d:f1:fa:9e:8e:4d:3f:5f:f1:
c3:06:1e:d6:2d:b3:7e:34:72:15:77:75:37:0d:af:
3f:45:d7:1a:a8:4a:85:02:00:14:14:1a:a2:c4:d0:
83:04:c2:f2:38:e9:7d:73:d9:81:fb:3d:39:dd:d9:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AF:D3:E1:92:04:B3:01:34:87:60:1E:EC:D8:E2:AB:48:2C:A1:E2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210097.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.33.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a1:2e:d9:66:bd:95:6b:77:7b:82:15:92:d1:af:b2:b2:c6:
d5:cb:2d:6c:8a:1e:1b:3a:dd:a8:f8:70:17:99:00:86:53:f1:
d4:bf:4e:ef:8c:a5:e5:50:80:e6:d6:30:6c:3c:ce:4e:b6:c0:
da:4c:68:9e:00:65:57:4e:d0:c3:1f:17:a4:1e:aa:6c:e9:6d:
f7:9d:d1:cc:8b:8f:05:bc:e3:3c:2d:16:c3:c8:d0:9c:d8:d5:
01:cc:00:f9:8d:d9:cd:b0:5a:65:b2:d3:b9:e3:df:bc:7a:00:
7c:eb:d6:6f:6d:9c:7b:ae:9a:07:bd:40:1c:ab:ec:ab:47:bb:
46:c0:33:21:e6:92:64:0a:70:d9:70:cf:67:bf:9c:7c:d2:21:
a3:c4:03:da:ad:ed:bc:94:23:98:51:de:dd:ed:8d:ce:9e:32:
0b:28:0b:9f:ed:69:64:76:56:4d:e8:65:eb:b7:cd:f6:94:55:
00:ae:4f:42:a5:e4:96:9c:68:97:a5:bc:55:68:8f:a7:b1:01:
35:17:ab:05:9d:7c:6c:01:90:19:59:0e:72:d0:00:8c:2c:cb:
ba:a7:f2:33:37:46:a5:5c:7a:ee:f4:f7:17:fd:66:cf:f1:e4:
68:01:72:f4:06:53:86:6a:49:c1:a9:dc:b7:d0:aa:e8:8d:7e:
91:eb:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:18:09 2026 by rpki-client