Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210634.roa
File: AS210634.roa (raw, json)
Hash identifier: T3D5HJyqCRDZUouRAGlk7KNFT9keaE1DzxUTa5qZOok=
Subject key identifier: 56:27:56:67:4A:43:89:77:81:59:94:AC:F8:75:01:55:F5:1F:E1:F6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 34F6A155F79FDD933EEB711EAF9217526E9C5019
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210634.roa
Signing time: Mon 27 Jul 2026 20:49:16 +0000
ROA not before: Mon 27 Jul 2026 20:44:16 +0000
ROA not after: Mon 26 Jul 2027 20:49:16 +0000
asID: 210634
IP address blocks: 155.117.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f6:a1:55:f7:9f:dd:93:3e:eb:71:1e:af:92:17:52:6e:9c:50:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 27 20:44:16 2026 GMT
Not After : Jul 26 20:49:16 2027 GMT
Subject: CN=562756674A438977815994ACF8750155F51FE1F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:b5:be:c3:13:ad:b4:c4:c9:cb:61:1f:07:
49:cc:aa:92:e7:b7:3a:dc:2c:9b:24:c8:22:30:c9:
8d:b6:20:36:c0:7b:a1:bc:eb:90:5f:a2:9f:a3:bd:
c6:e5:d1:9f:fd:9c:7e:c3:a2:14:14:8b:ca:42:dc:
ce:f9:b4:f2:ea:d3:08:65:69:5a:54:b9:d3:91:d2:
07:2f:43:86:0b:34:fc:81:ff:5b:21:14:d6:10:4a:
0e:5c:16:ae:75:88:2d:a8:7a:21:01:c4:c9:e2:88:
c1:f6:8b:3a:cd:4a:f6:6e:e5:57:1d:49:b3:68:73:
41:d4:88:19:d0:8e:cc:b6:4e:8d:37:89:07:9d:ac:
da:ec:1d:1a:6d:bb:6c:b4:67:32:36:6b:07:26:12:
dc:4e:35:e5:b6:eb:5b:b3:75:bf:c0:d8:9a:ca:d6:
29:cf:02:44:9e:19:e0:7b:84:45:d7:3b:73:a1:d0:
03:ba:46:1e:78:c7:19:52:f1:d3:12:13:6a:32:db:
6e:8e:1c:8b:53:7e:68:b5:b2:e8:4c:d2:fa:f9:99:
7f:e7:47:b8:1f:39:5b:1a:50:dc:62:43:fe:07:84:
9b:1b:c4:eb:7e:b0:a6:12:3f:6f:ca:4e:bd:77:20:
3a:01:4e:00:99:23:75:bb:0d:8d:24:f2:eb:5f:0d:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:27:56:67:4A:43:89:77:81:59:94:AC:F8:75:01:55:F5:1F:E1:F6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.188.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a1:0a:14:7b:fa:a7:42:94:8e:b8:d8:0b:56:7a:8f:91:de:
66:b1:4d:eb:26:5a:7f:03:08:dc:d4:12:97:ac:65:76:76:06:
f9:37:44:00:33:a8:c9:81:53:42:56:98:02:14:ec:60:a1:ea:
73:0b:0a:b7:f9:5f:e0:89:b1:2f:31:7f:e9:65:cb:fc:56:52:
5a:b7:3c:a9:a1:c6:f1:67:09:0e:e7:fb:5f:51:5c:2a:f4:73:
45:42:97:6b:6a:1d:2c:d5:7a:7e:2f:df:14:a5:55:7d:58:f6:
ae:34:fa:16:7a:74:72:ae:9c:1f:95:25:eb:6d:11:c4:2b:7b:
a8:66:41:7f:6f:a5:c6:5e:a3:82:4c:5a:ba:79:f0:09:ae:63:
c8:81:6b:56:23:90:fa:7e:79:fd:f1:b4:5f:13:7f:7c:16:e2:
8c:10:b8:64:6b:9a:fb:66:45:be:18:ae:88:10:d8:5c:fd:62:
cc:ff:a0:9b:96:e5:77:2b:00:7e:eb:0a:c9:e6:5e:06:89:95:
0c:0d:04:92:e3:a2:28:61:f8:13:21:79:95:45:ea:6d:13:d0:
81:8d:1c:f4:e4:55:2c:a1:17:a3:e2:c3:de:c6:a6:e1:a5:d0:
2f:82:31:7f:b0:27:a2:60:55:1d:26:5b:5c:4a:48:1e:1d:62:
87:7f:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:02:04 2026 by rpki-client