Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210633.roa
File: AS210633.roa (raw, json)
Hash identifier: xmnuJe9Mc0ySQbziu3cajgc8Bi6c1z+iMNwGSEhnlwA=
Subject key identifier: D8:06:C1:F2:59:93:6E:A8:55:5C:B6:AF:68:94:88:BC:1A:F6:FB:3B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6762729F973C1C788501BA2B0FE9CE741F62CAB9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210633.roa
Signing time: Wed 29 Apr 2026 15:47:07 +0000
ROA not before: Wed 29 Apr 2026 15:42:07 +0000
ROA not after: Wed 28 Apr 2027 15:47:07 +0000
asID: 210633
IP address blocks: 2a13:9500:6e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:62:72:9f:97:3c:1c:78:85:01:ba:2b:0f:e9:ce:74:1f:62:ca:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 29 15:42:07 2026 GMT
Not After : Apr 28 15:47:07 2027 GMT
Subject: CN=D806C1F259936EA8555CB6AF689488BC1AF6FB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:14:02:dd:08:86:7c:b3:4e:2d:44:7d:17:
b9:25:dc:4a:d2:2f:0e:fc:9b:44:b5:67:d5:72:bc:
a0:e4:e7:55:d9:b3:40:bd:f3:20:c2:b4:c9:c2:9b:
a3:06:86:39:13:dc:85:1a:54:a2:bf:ca:e7:ee:8f:
dd:1f:4b:28:91:0f:d8:0a:88:67:cc:eb:e1:fb:79:
87:7b:31:59:d4:ba:37:f3:a5:80:6c:d7:00:e3:43:
09:01:be:a4:c5:00:83:7d:45:e4:c0:ed:f6:11:80:
c2:d0:c8:2a:ab:69:fc:99:7e:e8:e6:d3:96:80:4f:
bd:e4:d2:62:d8:fe:c9:d4:33:3a:14:83:58:ca:ad:
bb:ba:fc:e0:a2:26:d7:b4:15:d0:7a:c8:fa:fd:84:
9c:0c:64:79:15:cf:62:8b:f0:3b:b9:f3:c0:9f:4a:
b7:bc:c2:3a:b8:79:43:c5:75:87:f7:7f:eb:2c:d9:
a3:66:1c:09:d6:28:5b:53:19:5e:61:45:30:6a:70:
fa:4d:5b:f9:93:1d:9f:68:51:1b:60:a4:c7:a9:ac:
68:8c:d9:42:38:bd:71:63:d1:cd:a0:63:29:1e:37:
60:91:6b:f2:c1:fd:ef:38:7d:a8:72:5b:38:ff:e3:
65:a6:a0:a4:e2:c3:90:35:cb:0b:37:95:f2:00:90:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:06:C1:F2:59:93:6E:A8:55:5C:B6:AF:68:94:88:BC:1A:F6:FB:3B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:6e::/48
Signature Algorithm: sha256WithRSAEncryption
41:0a:39:46:41:68:dd:2c:d1:20:4c:f0:73:46:aa:8c:55:02:
24:d1:d2:75:07:33:5d:cf:dd:d1:8d:ba:77:67:4b:9d:0b:80:
b4:97:12:79:eb:ef:cb:df:40:27:34:bd:58:3e:bf:c6:ff:ad:
91:40:4f:fd:cc:98:b1:ec:fa:4f:70:1e:59:b8:c8:e0:01:97:
46:e0:8d:55:0b:ac:6a:9d:eb:07:b5:45:bb:c1:72:6b:3b:c0:
3a:1b:93:43:6e:f1:85:3a:51:bd:0b:70:b3:0d:4c:ea:75:62:
dd:69:0f:d3:80:62:af:59:8b:1e:63:2e:0b:68:3e:b4:28:35:
9f:e8:8f:84:69:29:f5:5e:b6:9b:0a:53:50:f2:9c:51:0b:ab:
cd:a1:67:2e:2c:44:e0:94:6b:33:9b:95:59:e4:8d:9e:ed:ad:
7c:b1:d7:d7:9b:54:97:92:0b:cc:6e:a6:dc:4c:72:35:f6:3d:
1f:30:c9:4f:a2:e2:53:7a:25:d3:7b:67:67:5c:4d:e1:c4:0e:
73:fd:44:ff:21:a0:f7:66:b1:03:98:97:f8:13:c3:bd:f3:60:
58:68:27:3d:c6:d3:ab:49:2c:09:61:1d:63:47:59:2d:a0:ff:
da:9b:8a:d2:33:4f:1f:94:dc:9f:52:13:16:59:9c:5d:a7:76:
2b:71:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:42:12 2026 by rpki-client