Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210554.roa
File: AS210554.roa (raw, json)
Hash identifier: duQaW+jFc4p2F9Ip/7mXYqXLf2QYxAEF7XIc+a/iyYg=
Subject key identifier: F3:C3:70:21:52:06:AD:66:93:D6:F1:49:D7:BF:80:9C:73:1C:93:9D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2CB8FF36679650D5DE7BC1AAED85885813458723
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210554.roa
Signing time: Sat 21 Mar 2026 03:01:27 +0000
ROA not before: Sat 21 Mar 2026 02:56:27 +0000
ROA not after: Sat 20 Mar 2027 03:01:27 +0000
asID: 210554
IP address blocks: 45.157.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b8:ff:36:67:96:50:d5:de:7b:c1:aa:ed:85:88:58:13:45:87:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 21 02:56:27 2026 GMT
Not After : Mar 20 03:01:27 2027 GMT
Subject: CN=F3C370215206AD6693D6F149D7BF809C731C939D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:30:c1:f5:a4:6c:32:40:ee:39:a2:84:71:
02:15:2e:69:bb:2f:63:1d:87:6d:c8:61:a9:51:d9:
be:1d:9a:1f:c1:93:e1:ff:66:67:44:21:71:de:28:
67:dd:8e:3c:94:2e:6a:07:6e:17:57:73:a8:8d:9e:
b5:3b:75:e4:8b:e8:f1:37:38:d5:19:7a:b9:27:3d:
95:95:ac:62:ce:c4:04:16:a5:17:55:a4:33:24:2f:
cd:bd:d5:5c:cd:e9:9b:aa:39:e7:93:ed:6f:30:09:
e5:40:2b:0f:ab:d3:fa:81:b0:86:ad:08:f9:32:a4:
48:6f:1c:fc:6c:06:fb:08:a0:cc:41:b7:80:da:04:
20:1e:df:ea:2f:96:b3:86:25:63:2f:9b:81:1d:01:
1a:96:2d:76:21:c1:2f:92:4a:78:f0:37:78:19:de:
52:51:8c:ad:2d:da:82:d7:66:a2:eb:8c:e3:a9:61:
cf:c7:2f:75:a4:4e:ce:7c:c6:4e:24:48:c6:2a:b6:
b2:98:70:d0:20:e3:a7:a2:97:7a:36:eb:70:8b:82:
ac:46:f4:73:86:25:c8:26:7e:46:63:db:fc:e5:62:
23:6f:81:ca:8f:7a:a2:c8:d2:a3:05:b3:e4:bd:57:
93:d8:8d:58:bc:99:ec:20:5a:49:a8:9a:9a:00:88:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C3:70:21:52:06:AD:66:93:D6:F1:49:D7:BF:80:9C:73:1C:93:9D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210554.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.16.0/24
Signature Algorithm: sha256WithRSAEncryption
09:79:68:de:9d:d7:9f:b4:8f:16:00:92:76:57:8c:c6:5a:68:
1e:69:20:85:8f:46:2e:52:b7:9d:be:b1:48:96:aa:b6:e0:56:
3b:fb:69:fa:40:b6:6d:a7:9a:94:43:5c:63:42:c8:9b:a3:4f:
49:ef:a9:44:bf:7f:68:f4:1f:db:b1:40:66:8e:e8:77:2d:91:
05:1f:22:7e:6b:e7:46:bc:50:cb:9d:41:83:6b:34:05:d6:e0:
dc:f4:8e:31:ca:ed:5b:84:8f:57:c1:08:08:e0:9f:21:db:66:
f2:75:27:af:bd:23:71:a9:de:6d:9e:87:63:df:60:7f:7e:64:
25:e8:22:a5:cc:7f:81:88:5e:24:91:fe:e7:66:b8:34:be:9c:
bf:2f:da:70:59:84:eb:14:fe:5f:89:55:c9:16:41:42:77:94:
82:43:78:d0:ee:6e:7b:df:3a:c2:b0:96:53:88:c7:68:29:5e:
98:ae:ee:d8:6d:a3:b4:82:c5:ce:a4:bb:bf:9b:27:d5:8f:6b:
79:70:e4:d8:e8:c2:3f:27:29:75:c2:4c:d4:46:2a:91:fb:33:
30:56:f3:c6:04:48:7f:88:bc:98:82:b2:70:bc:85:c3:a8:33:
6e:8d:55:fd:6a:e7:39:6b:07:48:dc:2b:ab:a9:80:f0:8a:85:
63:89:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:19:42 2026 by rpki-client