Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210152.roa
File: AS210152.roa (raw, json)
Hash identifier: ETvvDfTXmjkpA+nL6EwaV2SqRe1LgT3QZiCB2nhqxDU=
Subject key identifier: 35:DB:0E:16:1E:95:C0:45:BE:9E:0E:F2:53:72:15:79:A7:5B:A4:DF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3E1A7C84A79C183060AA26A47C4306F977B355D4
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210152.roa
Signing time: Tue 19 Aug 2025 05:07:49 +0000
ROA not before: Tue 19 Aug 2025 05:02:49 +0000
ROA not after: Tue 18 Aug 2026 05:07:49 +0000
asID: 210152
IP address blocks: 2a0f:85c1:8a0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:1a:7c:84:a7:9c:18:30:60:aa:26:a4:7c:43:06:f9:77:b3:55:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 05:02:49 2025 GMT
Not After : Aug 18 05:07:49 2026 GMT
Subject: CN=35DB0E161E95C045BE9E0EF253721579A75BA4DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:9d:78:2c:41:f2:50:31:cb:e2:04:8f:b3:
6f:b5:55:68:df:26:3d:e0:e0:d3:42:1f:ba:eb:87:
d9:71:fa:5b:5a:f9:5c:38:bf:3c:6b:52:01:1e:db:
cb:1c:d2:73:a5:d0:9f:36:5c:fc:78:c1:b6:d9:15:
fc:37:67:cd:d8:9f:f6:2b:0b:ab:7d:5b:c5:ff:ad:
94:8e:93:35:dd:0c:62:57:21:98:11:2a:f3:f3:c3:
af:70:43:03:2d:e1:4a:da:b7:09:d5:b5:de:fe:e9:
35:bb:7f:48:73:85:03:f3:91:0a:c1:ff:d5:9e:b2:
5d:80:1b:29:9f:3f:a4:de:4d:07:f0:fd:7d:5e:6b:
a6:aa:36:b1:60:95:5c:93:ee:6e:19:48:02:b8:7c:
8e:c8:50:86:d6:f4:9d:03:c6:55:47:f2:70:ae:f6:
fc:4b:f1:ee:ed:99:cf:b2:b4:01:9e:4b:0e:4a:47:
e1:e4:12:fb:a4:28:df:0b:dd:4a:91:2f:fc:f8:ff:
44:b8:66:0d:d3:a0:aa:f1:75:23:16:e0:4e:04:24:
98:e5:83:d0:d8:58:77:46:85:54:a2:bc:da:d0:1c:
3c:2b:2c:97:36:1d:3d:aa:15:96:5a:45:6a:c1:03:
ac:09:81:6b:0e:f9:3c:4d:98:11:0e:d1:0d:ef:8c:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DB:0E:16:1E:95:C0:45:BE:9E:0E:F2:53:72:15:79:A7:5B:A4:DF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8a0::/44
Signature Algorithm: sha256WithRSAEncryption
95:ab:c0:2e:0f:39:44:d0:99:5d:dd:c4:2d:24:c4:b6:0d:c6:
3f:81:08:f0:f9:6d:9a:17:d9:ec:95:39:eb:44:36:04:fb:c0:
9e:80:07:ba:d5:26:b6:b3:61:5d:bc:52:3c:cb:66:84:6f:a3:
56:e2:9c:78:2f:42:59:7f:40:44:fb:18:61:a5:92:4e:8c:3f:
15:6b:a2:6e:c2:7a:d3:cb:1b:b1:4e:8c:fd:5d:a8:2a:da:4d:
49:21:e1:ff:8e:88:63:69:6f:03:82:7c:27:8d:17:9b:cc:fa:
79:64:25:30:8e:93:4a:b0:59:6c:06:6c:7e:05:2c:0a:ec:fe:
e2:29:fc:9f:00:0c:40:24:24:c4:91:c2:5e:46:29:35:2f:2b:
3f:2f:cc:28:cf:f1:1a:14:79:6d:4d:7d:f8:72:90:fa:3c:6a:
7c:54:84:57:45:a4:98:80:3a:84:e2:92:ac:aa:94:c4:15:90:
1e:38:f6:3b:e0:71:03:a1:20:a6:4c:f9:99:45:b4:b6:fb:41:
eb:8c:35:3f:79:09:8d:6c:47:1e:6e:47:f4:99:ef:21:04:2a:
5c:18:e8:a4:aa:5a:ed:1c:2b:77:fc:9b:48:40:32:89:7a:f3:
87:4b:c2:e7:b4:d1:0c:ff:c5:32:68:ad:4d:2c:60:5f:aa:02:
7e:43:0c:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUPhp8hKecGDBgqiakfEMG+XezVdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA4MTkwNTAyNDlaFw0yNjA4MTgwNTA3NDlaMDMxMTAvBgNV
BAMTKDM1REIwRTE2MUU5NUMwNDVCRTlFMEVGMjUzNzIxNTc5QTc1QkE0REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRt514LEHyUDHL4gSPs2+1VWjf
Jj3g4NNCH7rrh9lx+lta+Vw4vzxrUgEe28sc0nOl0J82XPx4wbbZFfw3Z83Yn/Yr
C6t9W8X/rZSOkzXdDGJXIZgRKvPzw69wQwMt4UratwnVtd7+6TW7f0hzhQPzkQrB
/9Wesl2AGymfP6TeTQfw/X1ea6aqNrFglVyT7m4ZSAK4fI7IUIbW9J0DxlVH8nCu
9vxL8e7tmc+ytAGeSw5KR+HkEvukKN8L3UqRL/z4/0S4Zg3ToKrxdSMW4E4EJJjl
g9DYWHdGhVSivNrQHDwrLJc2HT2qFZZaRWrBA6wJgWsO+TxNmBEO0Q3vjD61AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUNdsOFh6VwEW+ng7yU3IVeadbpN8wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEwMTUyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg+F
wQigMA0GCSqGSIb3DQEBCwUAA4IBAQCVq8AuDzlE0Jld3cQtJMS2DcY/gQjw+W2a
F9nslTnrRDYE+8CegAe61Sa2s2FdvFI8y2aEb6NW4px4L0JZf0BE+xhhpZJOjD8V
a6JuwnrTyxuxToz9Xagq2k1JIeH/johjaW8DgnwnjRebzPp5ZCUwjpNKsFlsBmx+
BSwK7P7iKfyfAAxAJCTEkcJeRik1Lys/L8woz/EaFHltTX34cpD6PGp8VIRXRaSY
gDqE4pKsqpTEFZAeOPY74HEDoSCmTPmZRbS2+0HrjDU/eQmNbEcebkf0me8hBCpc
GOikqlrtHCt3/JtIQDKJevOHS8LntNEM/8UyaK1NLGBfqgJ+QwxG
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:14 2025 by rpki-client