Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210398.roa
File: AS210398.roa (raw, json)
Hash identifier: wJPC8wzpwoMMU1Tn+LgAjbpJRr0/MrP+DcoF7i1fQ3E=
Subject key identifier: F5:04:CB:62:16:CC:6C:FC:AB:A5:15:4C:A4:61:CF:17:DC:D2:29:E4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0EC2F11AC94E1355BF134C0EA8DBC7033C21B8FB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210398.roa
Signing time: Tue 15 Sep 2026 07:49:35 +0000
ROA not before: Tue 15 Sep 2026 07:44:35 +0000
ROA not after: Tue 14 Sep 2027 07:49:35 +0000
asID: 210398
IP address blocks: 145.223.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c2:f1:1a:c9:4e:13:55:bf:13:4c:0e:a8:db:c7:03:3c:21:b8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 15 07:44:35 2026 GMT
Not After : Sep 14 07:49:35 2027 GMT
Subject: CN=F504CB6216CC6CFCABA5154CA461CF17DCD229E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:32:02:dc:45:bd:eb:d3:e0:af:ed:64:c6:
29:96:5f:f6:e0:08:08:55:d1:bd:6c:d5:47:de:c7:
33:09:86:2f:70:82:cf:a6:c7:b6:1a:61:bd:7a:0c:
09:4c:ce:bd:67:47:cd:a2:65:6d:65:ff:34:53:04:
18:fa:81:58:cb:ca:df:14:42:15:35:19:08:4e:bb:
a0:d0:2a:2d:1c:7b:8d:56:29:1b:64:bb:ef:71:ef:
72:ae:47:97:ce:88:7c:d6:26:a4:70:21:59:5e:7c:
bb:99:c4:4c:e7:0c:44:d7:7c:d1:3b:41:5c:38:d8:
72:3d:d6:5f:7a:55:0f:d5:9e:ad:1a:0e:f1:de:8a:
ac:c1:e0:88:44:5b:75:73:0b:d9:69:26:b7:f4:4f:
b5:c6:74:a5:f0:a4:7d:9b:e6:e7:57:e0:a8:b1:36:
6a:29:83:b0:6e:36:3f:04:c9:62:5c:bb:f5:09:0d:
ec:86:3c:a6:e9:1a:1d:7e:99:6b:9c:aa:01:ce:cc:
ca:cb:3b:57:8b:cd:d3:a8:da:b8:9c:91:3a:af:fa:
93:de:2f:5f:88:0b:1a:9c:3c:df:af:17:b7:f5:61:
47:c7:c2:7b:8e:d9:2c:be:83:fe:d2:8d:be:d3:c7:
fd:0b:42:bb:80:56:76:1a:72:a3:23:24:7d:f7:18:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:04:CB:62:16:CC:6C:FC:AB:A5:15:4C:A4:61:CF:17:DC:D2:29:E4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.66.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:98:87:50:8f:b0:f7:3a:ce:6d:e8:08:c2:2e:fb:c4:b7:8d:
a0:02:67:ae:5c:38:61:dc:94:39:0f:70:42:2b:7d:d4:c9:1f:
29:4f:c7:9e:da:19:66:60:7b:59:06:cc:e7:c1:6b:fb:e5:6e:
fd:98:1d:f8:27:8b:b7:fb:ad:99:1b:4e:59:13:54:1f:2d:49:
3f:7c:ce:f1:ed:ec:16:70:88:40:17:50:fa:8b:72:81:6f:6a:
db:28:5d:05:88:b8:b3:52:8a:46:04:1f:52:3a:24:e3:9a:19:
60:f7:07:75:de:f5:d1:b8:05:19:8d:68:cd:c1:3a:33:b7:9f:
09:89:88:7a:c0:e9:b0:bb:7a:8f:44:c3:b3:21:85:58:f0:c1:
d7:cf:d8:7d:eb:63:05:1b:b6:f8:c8:82:70:b4:a2:96:98:8c:
4e:bb:e7:2c:de:56:49:72:00:13:51:4a:26:6d:cf:f8:82:8b:
67:f9:62:3a:22:c2:3f:4d:5f:dc:84:5c:6e:b1:eb:ff:10:74:
02:1e:7e:62:15:45:b5:ce:88:94:bf:a7:98:3d:b5:a3:94:12:
05:e7:17:b0:ee:83:b4:b3:c9:bd:61:51:2c:13:ce:36:fd:6a:
b9:50:5a:ef:f4:5b:b7:71:e5:65:d7:d5:5b:81:15:df:9b:c5:
91:64:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:06:14 2026 by rpki-client