Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: u0xKlLLGbQO4PyqT/w6Km5ZCpuM4nDz8c1qElxA2QWQ=
Subject key identifier: 41:0A:44:14:2A:BA:77:9B:8E:C0:0D:43:9D:0F:38:2E:51:A1:85:1F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3D4F358034A3DB08A9FA3F51871D153A97DBB56C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS10753.roa
Signing time: Fri 09 Oct 2026 12:31:58 +0000
ROA not before: Fri 09 Oct 2026 12:26:58 +0000
ROA not after: Fri 08 Oct 2027 12:31:58 +0000
asID: 10753
IP address blocks: 94.116.188.0/22 maxlen: 24
94.116.204.0/22 maxlen: 24
94.192.36.0/22 maxlen: 24
94.192.44.0/22 maxlen: 24
188.221.204.0/24 maxlen: 24
188.221.207.0/24 maxlen: 24
188.221.208.0/24 maxlen: 24
188.221.209.0/24 maxlen: 24
188.221.211.0/24 maxlen: 24
188.221.215.0/24 maxlen: 24
188.221.220.0/24 maxlen: 24
188.221.222.0/24 maxlen: 24
188.221.224.0/24 maxlen: 24
188.221.226.0/24 maxlen: 24
188.221.229.0/24 maxlen: 24
188.221.237.0/24 maxlen: 24
188.221.241.0/24 maxlen: 24
188.221.242.0/24 maxlen: 24
188.221.245.0/24 maxlen: 24
188.221.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4f:35:80:34:a3:db:08:a9:fa:3f:51:87:1d:15:3a:97:db:b5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 9 12:26:58 2026 GMT
Not After : Oct 8 12:31:58 2027 GMT
Subject: CN=410A44142ABA779B8EC00D439D0F382E51A1851F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:e5:55:76:bf:d7:52:4d:0b:27:8c:a9:e2:
cc:8f:32:f5:91:5e:95:a2:5f:48:f6:38:3d:4c:49:
a4:c2:83:98:5b:5d:e1:5a:be:f6:9f:2c:e7:d6:42:
8d:e1:b3:4c:31:14:40:88:52:dc:43:7e:4f:be:72:
cf:0c:85:f6:58:82:23:33:7a:99:a9:ca:30:7e:58:
96:90:dc:c8:e3:a5:98:c7:88:ea:c3:70:d5:95:14:
36:b2:31:a3:af:a4:9d:2e:f9:9d:70:13:a1:ba:c2:
61:d7:6b:8f:6b:71:30:c5:47:1c:13:94:c3:91:59:
36:4b:29:84:55:b6:6f:ef:c5:01:c9:41:8d:ef:0f:
8e:5f:e2:b6:0d:bf:29:2b:41:23:7f:4b:87:79:c7:
ba:c1:ff:33:5d:cf:c6:46:d3:64:a6:e7:12:be:49:
30:bf:1b:81:d1:42:e6:ce:98:24:94:2b:6a:be:d6:
82:a8:40:53:0a:16:01:07:a7:ad:7e:8c:8c:35:07:
21:9e:6e:a3:04:22:d6:69:8c:b3:21:0e:e3:fc:93:
27:d6:e6:c8:bc:b2:3f:6c:72:f1:89:ef:a5:0d:38:
0a:18:c1:c6:81:a8:3b:76:b0:aa:c8:24:58:5d:ac:
88:08:e7:a3:f1:8e:ca:0b:9c:9b:ec:ec:42:a9:5c:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0A:44:14:2A:BA:77:9B:8E:C0:0D:43:9D:0F:38:2E:51:A1:85:1F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.116.188.0/22
94.116.204.0/22
94.192.36.0/22
94.192.44.0/22
188.221.204.0/24
188.221.207.0-188.221.209.255
188.221.211.0/24
188.221.215.0/24
188.221.220.0/24
188.221.222.0/24
188.221.224.0/24
188.221.226.0/24
188.221.229.0/24
188.221.237.0/24
188.221.241.0-188.221.242.255
188.221.245.0/24
188.221.253.0/24
Signature Algorithm: sha256WithRSAEncryption
98:db:36:eb:9c:c3:32:6d:ff:6f:d6:24:05:fd:d8:9f:da:e9:
43:d9:11:a7:07:5c:3a:8d:11:88:af:78:aa:27:2f:6f:f9:04:
57:6e:fe:fd:5b:ad:b4:de:97:d5:9c:77:de:b4:aa:20:d1:c7:
2f:a2:c5:2b:99:83:9b:96:8b:df:3d:b0:db:f1:87:06:ab:d0:
fb:41:6f:ac:4d:29:3c:b7:98:54:34:48:2f:55:06:a3:81:36:
ba:4e:ce:b1:96:1b:76:bf:8b:e3:9f:49:45:aa:6d:d8:ba:4c:
fe:44:af:ce:5b:de:70:a6:12:7f:68:63:1b:a9:29:43:fe:1f:
15:3a:22:8b:b1:a2:a3:a1:78:b7:23:06:2b:aa:69:47:3b:a3:
83:03:e8:e9:ed:84:67:d2:10:01:61:8a:bc:48:79:e6:aa:27:
12:77:b9:90:93:6c:52:99:1f:45:1c:5e:68:2a:05:87:2f:eb:
33:1f:64:a5:06:36:e2:02:f0:e2:02:be:e3:c1:25:7f:8e:ea:
9e:e1:fd:32:66:53:ab:4b:14:12:79:40:7f:1b:e7:47:cb:a6:
fc:82:3c:ec:b2:eb:3c:fe:73:22:9e:bb:01:d2:08:64:df:ec:
98:96:e7:f2:29:0b:b9:b3:6a:06:8e:e4:f9:9d:53:88:bf:68:
97:05:02:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 05:36:52 2026 by rpki-client