Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210464.roa
File: AS210464.roa (raw, json)
Hash identifier: RM559SlslqXEkoP8BPbTfwBYRaYwxCQPjmI0MTR4VCA=
Subject key identifier: 3A:99:04:35:70:61:36:27:73:FF:45:C5:E8:67:73:10:FA:0F:95:CB
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1EADEB6D0FE3F13D52BF5EFE46911696F9AD23D1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210464.roa
Signing time: Mon 04 May 2026 14:11:14 +0000
ROA not before: Mon 04 May 2026 14:06:14 +0000
ROA not after: Mon 03 May 2027 14:11:14 +0000
asID: 210464
IP address blocks: 2a14:7580:ff99::/48 maxlen: 48
2a14:7583:5b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ad:eb:6d:0f:e3:f1:3d:52:bf:5e:fe:46:91:16:96:f9:ad:23:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 4 14:06:14 2026 GMT
Not After : May 3 14:11:14 2027 GMT
Subject: CN=3A9904357061362773FF45C5E8677310FA0F95CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:f1:fd:35:66:00:8a:e4:a9:b3:dd:8b:b6:
f7:bc:8f:e3:77:43:b9:fc:e5:33:12:d3:59:bc:e3:
89:be:4e:34:e6:17:b0:90:00:b9:c0:1a:36:1a:84:
2b:e3:34:63:cc:91:ff:17:e0:6d:8e:65:7a:c8:d0:
2c:46:ad:b0:b1:9e:72:75:32:c3:c3:9e:ef:01:49:
05:da:cd:0b:6b:be:61:17:37:e5:c0:13:a4:84:42:
41:d4:0a:5b:41:ed:df:66:6f:d0:c5:0f:02:bb:58:
be:1b:75:f9:e8:95:0d:6f:05:c9:0f:57:07:12:b5:
92:87:0f:64:62:c9:07:c3:0b:86:bd:98:91:d2:ae:
9f:6c:7b:37:81:13:8f:e0:40:e5:ef:94:0e:24:24:
33:54:58:49:b2:5b:f7:83:fb:f6:50:ef:dc:53:98:
7f:12:76:4a:07:bf:de:d7:7b:9b:cc:dc:42:e3:42:
ed:a4:1d:80:6c:23:9d:9f:24:45:02:c6:e9:f1:0a:
f8:2c:6d:40:5b:f8:1e:a7:7b:a3:1a:10:82:50:88:
3c:37:81:bf:e9:99:55:ab:b3:a7:93:f8:08:60:a0:
e7:6b:af:3d:07:17:42:cd:ac:29:6d:86:7a:ac:f1:
8b:9a:c2:63:01:97:df:a5:3d:45:52:15:22:9f:09:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:99:04:35:70:61:36:27:73:FF:45:C5:E8:67:73:10:FA:0F:95:CB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff99::/48
2a14:7583:5b00::/40
Signature Algorithm: sha256WithRSAEncryption
94:4b:34:6b:41:51:61:99:c4:f1:18:99:c3:22:77:26:5a:b0:
7c:1f:5c:a1:74:5a:cc:84:99:a4:aa:d3:2e:0b:fc:cf:6f:c2:
4c:e0:6c:21:8d:8b:90:82:44:9c:cc:66:df:51:f4:f5:5a:aa:
4e:70:5f:ff:92:86:26:1f:93:9c:e7:4e:e9:e3:c8:80:af:42:
fc:a7:e7:13:13:e3:af:00:34:ae:4c:bd:d8:bd:fb:d1:8b:e7:
ac:77:36:07:a0:fd:09:b7:02:76:aa:52:c9:4b:4a:99:d6:40:
4e:4b:19:81:00:99:ff:3c:ed:fc:97:ad:97:9b:e4:21:d3:75:
90:34:eb:91:de:fa:42:82:47:53:f5:c2:19:f9:83:08:33:50:
d9:31:1a:17:34:4c:5e:a9:e7:1a:b8:92:eb:aa:69:45:d1:de:
f2:ca:16:a7:36:1d:e1:a4:e0:a3:1c:6e:8c:81:3d:ca:e1:03:
44:2d:19:ce:fe:8f:ec:ed:63:b3:60:59:06:8c:c4:34:57:b8:
1e:74:24:56:8d:c8:99:ab:f1:5b:1c:b8:53:6c:17:f4:a6:ee:
68:96:33:e9:2e:5d:38:3e:f9:1f:73:6e:74:f6:a6:7d:e1:f2:
72:91:d1:d5:ba:25:9c:89:3b:cc:ef:14:c3:83:cc:da:93:29:
a1:f0:58:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 21:48:35 2026 by rpki-client