Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210100.roa
File: AS210100.roa (raw, json)
Hash identifier: DTo54Kevr/84Kx8SkqBvAYJUp8H/LLM2k0wOPUIwoSQ=
Subject key identifier: F8:3E:DE:A5:DD:F0:FF:58:E7:E2:D4:5E:37:15:06:52:B2:46:60:65
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 458CD9DDAF282DF7273D71C4A9346DC5F3A8F2F9
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210100.roa
Signing time: Sun 19 Apr 2026 07:00:17 +0000
ROA not before: Sun 19 Apr 2026 06:55:17 +0000
ROA not after: Sun 18 Apr 2027 07:00:17 +0000
asID: 210100
IP address blocks: 2a14:7583:f600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8c:d9:dd:af:28:2d:f7:27:3d:71:c4:a9:34:6d:c5:f3:a8:f2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 19 06:55:17 2026 GMT
Not After : Apr 18 07:00:17 2027 GMT
Subject: CN=F83EDEA5DDF0FF58E7E2D45E37150652B2466065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:0f:a5:8d:83:23:a7:30:38:d4:64:ae:bb:
64:40:f0:6d:5a:10:c0:2a:d4:47:5b:04:05:82:47:
34:18:43:8e:58:47:e0:b1:4d:da:43:21:82:de:c6:
81:7a:90:d1:51:97:d5:93:5a:01:09:5d:ad:2b:cb:
db:36:b8:1a:18:fa:50:9d:fd:bf:9a:4c:2f:80:aa:
25:69:6b:a8:fe:dd:fd:42:07:32:3a:97:8b:01:b8:
36:e0:18:c7:92:ec:52:94:cb:b5:c2:83:e7:1d:5b:
97:cb:f8:2d:69:56:0e:b4:78:9b:b8:15:8a:52:f8:
c7:0c:a6:8f:4c:c6:38:2a:b0:20:96:4d:1a:1e:38:
ef:39:d1:51:48:73:fc:57:93:7f:93:3a:15:98:98:
e5:85:e1:1f:65:ec:82:92:a3:4e:8d:19:1f:fe:47:
aa:e5:e4:6f:f3:ce:6c:b4:4f:23:1e:e9:3d:16:4b:
d5:2c:ec:e9:22:0f:f2:62:db:0f:23:85:2d:93:1a:
da:38:42:cf:c9:b5:75:ae:5c:6c:71:e0:b8:a8:0d:
75:c0:65:25:b9:9d:3e:ca:75:14:f6:28:9e:54:bb:
89:67:ef:e8:ed:a7:d5:b6:a7:a2:86:6b:33:b3:0b:
60:65:dc:16:2a:54:fe:48:0d:bc:c1:5f:55:72:0d:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:DE:A5:DD:F0:FF:58:E7:E2:D4:5E:37:15:06:52:B2:46:60:65
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f600::/40
Signature Algorithm: sha256WithRSAEncryption
57:71:00:4c:31:91:37:bc:42:17:ce:48:7c:ef:23:34:bc:95:
8e:e2:b1:6d:06:1a:45:4a:13:a9:89:88:e2:20:aa:b9:08:9a:
3c:cc:08:1b:bc:f9:3d:73:e6:f8:d9:83:9a:2d:6f:ba:d6:bf:
9f:7c:aa:6c:20:72:33:2d:d2:0d:be:f0:37:60:06:6a:0a:72:
a5:84:9f:0e:db:48:35:4e:7c:2b:7a:9d:ed:57:f9:26:d0:4c:
4f:19:87:17:06:3a:7d:a5:ae:bb:e0:5a:ef:f2:fa:13:e1:f6:
a4:10:72:16:e5:eb:f5:25:af:3e:64:0e:d7:d6:ae:ee:e5:dc:
e1:c6:d4:d0:fc:f9:07:62:d6:be:c1:d8:ef:00:aa:02:ea:f2:
3f:fb:b3:d9:08:05:ab:89:7f:5e:72:70:0c:bc:2b:58:34:72:
6c:d4:f5:cb:92:d2:2c:86:f8:05:a9:11:be:b8:71:1e:3b:69:
99:f5:38:5b:9a:95:db:0e:c1:54:03:95:57:d9:98:f0:aa:e4:
f3:03:e4:d0:ff:76:b3:98:f4:ba:fc:e2:c6:de:95:8f:62:3d:
39:0a:66:3f:b1:9f:a3:01:37:f0:7e:53:ea:34:1b:19:fc:3f:
38:8f:f9:d4:04:73:97:2b:86:b7:ff:27:fe:4f:bb:ca:fa:48:
3b:f3:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:16:42 2026 by rpki-client