Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210699.roa
File: AS210699.roa (raw, json)
Hash identifier: WQQq2Jgx5dV2DKR6Q8v1WXIV6NdtgubOiSieWIGix8A=
Subject key identifier: B9:B0:30:BF:3B:57:74:16:7D:7B:D2:15:23:3C:4B:D9:0A:12:0F:E2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 50455A99E19CC53AE4546D66A0EDA35BE839AFDC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210699.roa
Signing time: Sat 07 Feb 2026 17:55:35 +0000
ROA not before: Sat 07 Feb 2026 17:50:35 +0000
ROA not after: Sat 06 Feb 2027 17:55:35 +0000
asID: 210699
IP address blocks: 96.62.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:45:5a:99:e1:9c:c5:3a:e4:54:6d:66:a0:ed:a3:5b:e8:39:af:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 7 17:50:35 2026 GMT
Not After : Feb 6 17:55:35 2027 GMT
Subject: CN=B9B030BF3B5774167D7BD215233C4BD90A120FE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:48:7c:8f:16:0e:03:a4:e5:77:a2:51:8f:
46:7f:98:8f:25:4a:32:75:fc:95:a5:3a:1c:1b:e9:
25:e8:bd:d2:30:1d:65:f9:ef:33:a6:e4:cc:5a:39:
0f:e8:ab:c7:de:52:7b:44:8b:eb:e2:4d:65:0a:1b:
cd:d5:86:04:ab:54:f2:a2:d3:b1:4e:e8:98:45:35:
1f:97:96:b5:df:01:b1:c8:e6:60:69:b4:f1:f7:8d:
d2:db:65:d5:66:b2:8b:31:20:22:d6:c7:1f:10:01:
58:9e:63:e8:08:7c:ae:fa:e7:2d:ed:62:0d:de:d7:
a4:de:6b:ee:b3:2e:a9:31:7f:a9:79:b0:3d:4e:06:
aa:86:dc:07:62:50:58:0d:82:3e:36:07:1f:99:5b:
cb:c7:d3:b6:63:f9:aa:f4:e6:f1:9c:f5:d9:e3:b0:
29:30:26:b4:26:9c:ee:63:5b:2d:f8:c3:e6:fe:bc:
4c:33:00:29:7d:e5:13:52:19:38:9f:55:78:38:d8:
57:27:ed:68:04:17:5b:b9:ad:49:56:23:1e:18:cd:
5b:46:7d:70:bb:5b:38:35:51:67:6c:7c:d1:fb:05:
f6:95:a8:06:4f:df:7e:48:c6:30:04:68:12:fa:cf:
1b:66:c3:88:50:e1:78:2e:fc:e5:de:f4:c7:ca:8d:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B0:30:BF:3B:57:74:16:7D:7B:D2:15:23:3C:4B:D9:0A:12:0F:E2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210699.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:42:5e:29:34:37:d2:b1:50:9c:d3:9d:3c:f9:f8:35:ee:c3:
25:13:0e:8b:91:bc:fb:67:46:68:3a:5a:c9:cc:ff:12:0b:d9:
76:58:f4:31:6e:9c:1e:be:f3:80:63:6e:db:4a:67:3e:f7:81:
4e:02:ef:73:e2:03:49:3f:3a:0f:b9:e5:99:02:26:28:30:0a:
fd:f0:67:9c:4c:9a:bf:12:69:37:25:f8:36:51:4e:65:98:b3:
35:cd:a3:98:7d:fb:1e:7e:23:cb:21:0f:2c:63:c0:1d:ad:44:
18:5e:e5:cc:0b:57:80:ca:3b:22:98:7c:26:05:08:d9:1f:f1:
90:89:78:36:ab:22:75:b5:8f:3d:65:6a:15:be:b0:5f:15:e0:
a4:b2:c0:c6:a2:87:0a:b1:cf:50:79:f5:e9:9a:d2:ac:fa:75:
c1:7e:c9:c4:4d:8a:20:5e:0d:eb:6c:c7:aa:5b:a2:20:26:bd:
76:37:8d:d1:b5:4f:8a:55:fc:07:df:e1:4f:c8:85:02:c1:03:
da:12:9c:df:21:08:2b:72:5a:bf:e7:a6:01:c4:a2:9b:4b:f0:
1b:0c:81:f3:a2:0d:61:29:f7:8a:66:67:1a:60:73:c0:b0:75:
f7:1a:11:25:b5:a0:2c:b6:9d:f6:e8:06:b3:0d:45:dd:ba:3e:
14:2b:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:08 2026 by rpki-client