Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26210.roa
File: AS26210.roa (raw, json)
Hash identifier: NKrmYILYtdc49MHbqC9sdkk+WhZcwo+Hkbe3HszcGE8=
Subject key identifier: E9:1D:C9:A9:85:D8:D5:17:D9:3E:B0:A5:BD:63:07:38:83:CE:52:04
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3D911179847DFB8810625475FAEAB8AB180D3AF9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26210.roa
Signing time: Thu 26 Jun 2025 14:03:16 +0000
ROA not before: Thu 26 Jun 2025 13:58:16 +0000
ROA not after: Thu 25 Jun 2026 14:03:16 +0000
asID: 26210
IP address blocks: 82.21.156.0/24 maxlen: 24
82.21.195.0/24 maxlen: 24
82.25.21.0/24 maxlen: 24
82.25.32.0/24 maxlen: 24
82.29.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:91:11:79:84:7d:fb:88:10:62:54:75:fa:ea:b8:ab:18:0d:3a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 13:58:16 2025 GMT
Not After : Jun 25 14:03:16 2026 GMT
Subject: CN=E91DC9A985D8D517D93EB0A5BD63073883CE5204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:03:04:e9:a7:ac:f2:34:36:76:57:4f:db:
94:22:bd:a0:33:1c:dc:6e:c0:80:d8:e5:4f:13:2f:
cd:3c:27:3d:73:32:01:ac:2b:bb:19:6d:74:a6:de:
44:61:8e:90:59:5a:d5:c1:8c:22:38:c2:89:e9:20:
9e:f9:97:8d:19:42:3e:96:50:83:52:55:f2:a2:3b:
20:e0:04:b9:1e:d6:0a:db:a2:e9:48:7f:95:2b:97:
69:f8:10:f6:0a:35:17:7d:6b:06:91:ce:54:96:07:
ae:3f:10:40:36:99:ea:a2:77:95:92:c1:e2:71:fd:
0b:c2:0a:3e:1d:25:1d:25:1e:ee:f6:79:fb:bd:18:
9c:1e:98:45:25:9e:2f:96:0b:35:f8:b3:34:f2:b4:
ba:92:cd:66:17:46:9a:de:e8:58:fe:36:14:94:72:
cf:00:61:bf:78:bd:28:a9:2e:2c:ba:72:4b:12:f0:
0e:ff:b5:49:53:5a:3b:f7:c9:83:25:5f:4a:60:72:
92:9c:d1:85:81:5a:e6:a4:b1:3c:f1:26:5e:45:6a:
2d:4b:b4:1a:6a:a2:cd:55:f6:4f:fc:a7:a6:15:2f:
43:7f:e2:df:6b:51:d1:83:82:f7:85:fa:70:b0:95:
b4:b7:31:6d:94:e1:13:6d:4a:9a:49:dc:7a:24:08:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1D:C9:A9:85:D8:D5:17:D9:3E:B0:A5:BD:63:07:38:83:CE:52:04
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26210.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.156.0/24
82.21.195.0/24
82.25.21.0/24
82.25.32.0/24
82.29.148.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4b:58:4e:bc:e9:ee:d7:27:b2:4f:79:ea:40:04:80:0a:0e:
78:db:b9:cf:96:4f:13:6c:f5:1e:a6:de:ef:db:7e:81:b8:2b:
4d:a9:f4:bf:c4:cd:3d:12:fc:0c:cc:2e:b6:28:58:7e:85:cc:
1d:9b:0b:8e:f0:3b:cd:04:44:f3:d2:7e:99:c9:af:a4:82:c4:
e1:66:8e:1c:21:72:df:74:2e:2a:a2:a0:a4:a6:11:0a:a9:35:
63:d9:1a:03:ff:95:ee:6b:0a:02:e5:ce:da:0a:0d:9d:96:0c:
36:42:63:54:f4:34:ae:55:40:84:2a:3a:50:96:26:75:07:68:
73:64:ef:1e:21:05:9b:8f:1f:45:de:0e:25:08:4f:57:1a:48:
68:02:f0:1a:d0:32:56:f5:06:d0:da:10:67:13:e6:29:b4:88:
26:30:08:2d:35:5d:f9:a6:e7:e5:2f:6c:d1:f2:85:95:14:ba:
32:51:5b:79:8f:2b:97:61:5a:e9:bb:6c:5e:8c:90:f0:00:0b:
16:9e:9c:6c:df:48:ac:8e:91:f8:e2:90:44:3b:ae:1c:b5:23:
08:00:d0:82:62:fa:30:23:7c:da:aa:e8:3a:06:92:df:38:6e:
aa:13:48:75:24:47:25:18:17:5c:31:f0:5e:a8:7a:39:85:f2:
4d:6e:50:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:49:53 2025 by rpki-client