Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210574.roa
File: AS210574.roa (raw, json)
Hash identifier: nFxs4VHX37Pk6qtVa6nxg4IGn3kcKSDNa1yJeJEWpyQ=
Subject key identifier: 26:6A:4F:FB:EA:F6:ED:00:BD:E3:42:D6:8B:43:4E:F9:EC:96:E5:93
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4E05FE9EA3DA6179EB458E17E1F143232EFC6771
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210574.roa
Signing time: Thu 02 Oct 2025 13:55:08 +0000
ROA not before: Thu 02 Oct 2025 13:50:08 +0000
ROA not after: Thu 01 Oct 2026 13:55:08 +0000
asID: 210574
IP address blocks: 193.111.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:05:fe:9e:a3:da:61:79:eb:45:8e:17:e1:f1:43:23:2e:fc:67:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 2 13:50:08 2025 GMT
Not After : Oct 1 13:55:08 2026 GMT
Subject: CN=266A4FFBEAF6ED00BDE342D68B434EF9EC96E593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:94:97:0c:5e:2b:1c:37:02:68:ec:58:d7:
a8:86:4f:66:9d:b7:06:41:87:70:97:aa:bc:71:4d:
55:cd:39:fc:6a:ae:df:61:1d:1e:0c:c8:a4:1d:f3:
f3:dc:e0:2f:64:2c:53:e9:87:42:73:e3:2b:36:cb:
12:aa:27:76:b6:d0:27:b0:f7:a7:f5:76:1c:09:10:
24:ff:32:47:a8:fd:16:02:9b:49:7f:b7:42:03:2c:
ec:33:f6:bd:f3:5e:25:1e:c8:23:f4:02:4d:63:15:
a1:b2:39:0d:e1:88:15:ff:c7:02:8f:08:94:7f:c5:
bd:aa:7d:17:ef:dc:59:06:5c:6e:ba:37:62:ab:4d:
d2:31:23:0a:6d:f5:ba:4d:2c:a6:d8:31:de:98:5c:
78:bd:8e:a4:f3:0d:21:3b:71:f2:9d:ab:25:8c:ce:
f0:35:14:00:1d:db:62:38:94:b7:a4:c2:88:5f:4f:
3b:df:7e:11:27:5c:f3:00:41:d8:17:41:7c:4b:a3:
d7:2d:80:ac:60:1c:cf:b2:73:97:67:95:43:46:7e:
58:18:28:9e:4a:57:7a:6a:a3:eb:c4:de:0d:1e:e8:
b8:92:93:8e:e2:f7:e8:f6:01:a1:5f:4d:9c:fa:33:
ad:29:b6:e7:43:dc:ff:09:e1:86:44:9a:6c:75:b8:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6A:4F:FB:EA:F6:ED:00:BD:E3:42:D6:8B:43:4E:F9:EC:96:E5:93
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210574.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.125.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c2:22:61:76:63:cc:88:b3:96:73:69:40:58:dd:b4:51:32:
a7:b6:4e:98:9f:a1:99:4e:27:fb:b0:91:14:90:1c:93:f8:b2:
b4:85:25:03:21:2d:3d:16:ec:43:9c:26:30:ab:15:cc:d8:51:
81:35:5e:72:27:d0:0b:f7:d3:8a:72:e5:fc:e6:f8:7d:7c:97:
3c:7b:b1:a0:6e:23:12:4d:fa:e5:d7:d5:2d:8a:b2:15:dd:97:
06:53:ed:3a:ac:d3:99:3b:c2:1e:66:db:61:be:18:fc:14:4f:
17:fd:b7:70:38:ad:78:1c:f4:ce:3e:7f:6f:0c:9d:78:46:f8:
4f:ce:63:f5:32:fc:82:d6:61:a1:af:42:ea:e5:ec:b7:4a:c6:
3c:08:91:3e:56:39:73:84:8d:bb:a0:25:d2:38:e7:40:02:a8:
31:1c:47:9d:46:f2:11:70:d2:82:42:5d:8d:7c:b4:f7:3e:61:
d1:c2:b7:20:a0:7a:a7:4c:e6:ed:22:fa:ea:3c:39:58:26:39:
d0:6f:2c:d6:39:57:cd:c4:e4:82:ea:7a:63:ee:af:e9:a8:87:
98:b4:de:87:e3:c0:ec:39:64:5f:c4:6a:39:8d:2b:5a:78:c8:
27:32:3c:fc:02:6c:ec:12:88:d1:c4:e8:bd:7c:ab:8e:44:78:
29:6d:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:19:20 2025 by rpki-client