Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS28110.roa
File: AS28110.roa (raw, json)
Hash identifier: 0DbUUCq1jIazb2HQmoUq3qVodgTJHSbjz/bm/N9RyB8=
Subject key identifier: 43:9A:52:09:D1:0B:B5:B4:05:81:29:03:BC:6F:C6:96:5F:44:FD:30
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 293A661AA26D93E96685039DC85640D63EC581D2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS28110.roa
Signing time: Mon 02 Mar 2026 07:46:38 +0000
ROA not before: Mon 02 Mar 2026 07:41:38 +0000
ROA not after: Mon 01 Mar 2027 07:46:38 +0000
asID: 28110
IP address blocks: 82.21.238.0/24 maxlen: 24
82.22.213.0/24 maxlen: 24
82.22.218.0/24 maxlen: 24
82.22.238.0/24 maxlen: 24
82.23.227.0/24 maxlen: 24
82.24.229.0/24 maxlen: 24
82.24.235.0/24 maxlen: 24
82.25.222.0/24 maxlen: 24
82.25.232.0/24 maxlen: 24
82.26.223.0/24 maxlen: 24
82.27.217.0/24 maxlen: 24
82.27.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3a:66:1a:a2:6d:93:e9:66:85:03:9d:c8:56:40:d6:3e:c5:81:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 2 07:41:38 2026 GMT
Not After : Mar 1 07:46:38 2027 GMT
Subject: CN=439A5209D10BB5B405812903BC6FC6965F44FD30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:bd:0b:9c:29:2f:ef:5e:c3:7a:74:ba:26:
50:e7:2d:42:e4:69:b9:18:f6:78:d2:04:19:5e:44:
6e:e1:a1:cf:f3:75:da:a7:a1:c0:7b:f4:3d:ac:c9:
74:37:c5:2e:75:4a:c5:e2:db:95:54:53:da:df:33:
d1:23:74:4a:d3:92:30:ff:c4:78:df:1c:1a:47:e4:
da:c7:3a:dd:9c:15:ce:56:de:52:ab:59:c5:d1:54:
c5:51:00:5f:ac:50:f0:b8:d9:fc:e1:8d:45:96:49:
f2:7b:46:43:29:57:65:ee:fc:8b:98:5c:47:b8:cf:
33:fa:f0:8d:f9:76:ca:9c:8c:43:51:3d:9c:b3:44:
76:83:fd:d2:48:01:7a:b6:5d:28:3f:93:af:89:88:
8d:b0:f8:6b:58:27:2b:b1:39:11:6a:3b:90:d8:0b:
d0:b6:cb:f0:a5:f7:64:fe:c6:7f:47:47:41:d0:b0:
fc:b3:df:4d:e7:9b:bf:9f:13:ee:7c:4c:28:98:77:
ad:1b:10:77:ff:dc:d1:60:9f:f2:43:4c:cf:38:ee:
c1:e0:0b:8e:99:58:a0:84:5c:52:2b:99:ca:30:c5:
ff:3c:94:22:a5:05:70:46:04:82:4b:d1:c2:43:91:
bf:49:dc:63:c7:0e:96:89:49:7e:e3:4d:31:b6:dd:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:52:09:D1:0B:B5:B4:05:81:29:03:BC:6F:C6:96:5F:44:FD:30
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS28110.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.238.0/24
82.22.213.0/24
82.22.218.0/24
82.22.238.0/24
82.23.227.0/24
82.24.229.0/24
82.24.235.0/24
82.25.222.0/24
82.25.232.0/24
82.26.223.0/24
82.27.217.0/24
82.27.232.0/24
Signature Algorithm: sha256WithRSAEncryption
57:eb:2a:e0:43:02:bc:f7:f9:27:24:b1:59:85:9a:87:95:39:
86:b4:97:5c:48:73:4b:34:e7:ba:94:c3:8d:f1:c7:97:d6:da:
47:65:aa:22:14:1e:24:c5:19:c0:20:46:b0:e6:a8:c9:69:b1:
87:79:27:96:ac:e6:2d:19:70:17:cd:e6:85:1f:e3:15:ba:2f:
36:72:7d:a8:0c:a3:28:96:09:00:c4:e3:36:46:61:c9:41:93:
8f:c5:36:75:7f:96:2f:f3:ee:2a:1f:e5:d5:96:02:86:6b:c2:
9c:99:db:a5:3f:a2:58:5b:bf:9b:49:fa:c3:79:c7:a4:89:0a:
4d:cc:ef:06:ca:0b:7e:c7:9e:90:f7:15:f2:66:b7:d0:23:bf:
80:ef:20:61:aa:98:0f:7c:28:12:13:d9:1a:07:b5:d4:9e:08:
e3:e9:37:2b:4a:3f:45:d9:4d:8b:47:e3:f5:ee:ab:5c:04:cd:
ce:7b:c4:ad:12:09:04:28:50:ca:3a:79:26:05:e1:17:2a:5e:
92:cf:76:3b:37:3a:7b:af:c8:d7:54:e4:db:36:f4:d5:20:ad:
4e:30:ba:8d:db:b7:80:fc:80:9b:db:ac:34:06:93:58:f3:34:
70:72:92:e2:59:87:62:ef:f7:08:b3:13:0b:65:aa:83:d6:b9:
05:85:87:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:48 2026 by rpki-client