Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210814.roa
File: AS210814.roa (raw, json)
Hash identifier: eeu+xEwsgewM+rPtcv1ST4ot3hwAc8Z7M4YGNImD4ek=
Subject key identifier: 48:36:CA:B5:47:A8:5C:44:66:E0:BE:96:69:B7:31:5E:E3:D4:83:17
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7D958F812281D9ACEA93DC6D2971FE2191B75F8E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210814.roa
Signing time: Mon 29 Jun 2026 00:52:15 +0000
ROA not before: Mon 29 Jun 2026 00:47:15 +0000
ROA not after: Mon 28 Jun 2027 00:52:15 +0000
asID: 210814
IP address blocks: 82.21.41.0/24 maxlen: 24
82.21.149.0/24 maxlen: 24
82.29.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:95:8f:81:22:81:d9:ac:ea:93:dc:6d:29:71:fe:21:91:b7:5f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 29 00:47:15 2026 GMT
Not After : Jun 28 00:52:15 2027 GMT
Subject: CN=4836CAB547A85C4466E0BE9669B7315EE3D48317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:6a:22:c5:ec:97:09:2f:aa:f3:03:bb:4e:
ea:1f:18:81:df:f5:2a:f3:ea:4a:e4:4e:b0:db:2a:
99:96:3d:79:4b:ae:12:96:d0:b1:db:ae:9c:81:b1:
8c:30:a5:ab:88:c4:9d:85:e7:9d:61:b6:c3:10:1b:
7f:47:d9:d7:cb:d8:b5:a8:c5:78:ff:0e:e0:c5:9e:
c8:62:31:a7:0e:8e:c6:56:0f:e6:49:7e:e3:c2:ad:
7e:40:20:bb:f8:b1:22:cb:ff:0f:94:a4:df:99:5f:
cf:99:81:b9:26:6a:e0:e0:d3:67:ac:8a:31:b4:6a:
3e:3d:bc:11:54:c4:e7:20:00:f7:17:c5:a5:a9:b4:
03:66:5a:61:b3:0d:f1:06:df:41:b6:f6:f9:d5:da:
5c:c7:01:1f:13:8b:63:97:be:a5:e1:94:74:28:91:
51:b1:a1:64:b6:22:a0:fa:b2:0a:06:f7:99:6a:ad:
f2:e3:53:79:b3:00:e5:ef:8e:96:29:fd:6f:45:f0:
38:e9:6b:89:93:2f:74:13:55:b7:69:1d:54:aa:6e:
1f:f2:7f:cb:90:a3:9a:d2:be:91:1e:e4:c2:9e:90:
d7:ca:f6:8d:77:bc:db:50:d9:98:a8:92:5c:4d:57:
ae:a3:69:af:38:11:d3:ba:08:34:32:36:0b:51:fd:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:36:CA:B5:47:A8:5C:44:66:E0:BE:96:69:B7:31:5E:E3:D4:83:17
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210814.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.41.0/24
82.21.149.0/24
82.29.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1e:c4:5b:fa:5d:5f:5b:09:41:f6:87:8c:81:25:3e:2c:96:
d6:e0:2d:d7:36:25:3d:cd:17:3d:bd:bc:10:f3:73:df:26:f2:
a9:9d:26:cd:e6:35:e1:70:0e:ee:3d:c7:0c:67:71:a8:7d:29:
16:fd:c8:42:5a:98:75:2c:a8:e5:8a:d9:9d:b2:81:6a:aa:78:
9c:ce:c1:82:6e:3a:71:f3:c2:7b:20:27:c3:d1:b6:96:07:08:
ab:ad:59:10:d1:3d:23:d9:5c:18:22:0d:6a:f2:d0:82:77:42:
74:ad:44:d9:6a:26:4b:3b:f9:72:28:da:f4:03:bd:1e:97:7f:
80:37:a5:ef:f8:5a:f9:f0:8d:ef:88:08:89:54:58:90:a6:58:
e6:ec:3b:7d:75:3d:16:b4:a4:fb:9e:42:64:d1:01:76:b5:64:
cc:24:63:46:b7:d6:4a:dd:36:43:75:43:bb:8d:62:69:1d:0c:
91:2e:a5:69:ef:18:42:ec:ad:15:d5:2c:bb:76:bb:56:9f:09:
3d:d1:7f:ea:4f:5c:b6:6f:2c:81:bc:aa:38:8d:33:9a:03:b6:
7b:7b:79:b7:20:75:f5:29:b4:10:e9:4c:ba:6d:2c:de:85:47:
4f:f7:02:0a:12:a6:89:e6:fb:49:5d:97:3f:bf:e2:1e:94:7d:
0f:d7:24:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:17:23 2026 by rpki-client