Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: BJ1TaorEvabVZ/NicOXC/ReBjWgucD2xXfND+dSmC+c=
Subject key identifier: C3:3B:10:7D:D0:5B:7D:29:30:54:A7:A6:0F:88:99:6C:46:0C:6D:10
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0929CC90E9FEE6B804D7139636725D11F7B9DF3C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS10753.roa
Signing time: Mon 28 Sep 2026 05:28:33 +0000
ROA not before: Mon 28 Sep 2026 05:23:33 +0000
ROA not after: Mon 27 Sep 2027 05:28:33 +0000
asID: 10753
IP address blocks: 141.98.91.0/24 maxlen: 24
179.61.160.0/24 maxlen: 24
179.61.162.0/24 maxlen: 24
181.41.218.0/24 maxlen: 24
191.96.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:29:cc:90:e9:fe:e6:b8:04:d7:13:96:36:72:5d:11:f7:b9:df:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 28 05:23:33 2026 GMT
Not After : Sep 27 05:28:33 2027 GMT
Subject: CN=C33B107DD05B7D293054A7A60F88996C460C6D10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:53:f5:26:b4:8f:8a:da:82:9c:26:df:27:
f6:8f:fe:00:4f:ca:43:27:be:ae:68:c3:c0:9b:ce:
9d:f9:62:00:1f:7e:28:a5:56:c9:51:7c:29:46:ff:
5c:54:5b:e1:ce:e3:6f:e5:1a:1c:c5:92:f3:7e:12:
6f:fe:da:f2:af:83:58:22:c2:d2:88:02:09:cb:85:
5f:89:5b:66:a1:7a:a8:90:48:37:35:ea:48:ef:c6:
19:3c:7a:0f:ea:00:ce:72:24:35:56:17:a2:74:be:
bf:53:3f:49:dd:32:81:8f:14:0e:2b:74:8f:90:61:
ef:bb:31:0e:5e:23:98:27:b9:c7:97:7b:76:1d:38:
4e:3f:e0:8b:85:b4:a2:65:8b:40:ef:d2:3c:d2:4b:
0e:5c:bb:fa:a5:c7:23:f8:21:f2:fd:f1:7d:b5:66:
75:1b:bc:3c:bb:d9:5e:6b:08:f1:55:39:f4:ba:ca:
7d:46:75:98:99:3a:93:d6:87:24:85:50:b4:11:15:
e3:33:4f:12:d8:cb:43:f3:90:3c:a0:63:84:54:7f:
8a:ba:08:6d:28:08:65:ab:bf:98:4e:0f:c7:30:fa:
a1:76:6a:89:df:63:5f:b7:89:aa:1d:f4:2c:47:82:
76:fd:20:56:51:d8:92:9d:a8:de:f0:88:51:32:34:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:10:7D:D0:5B:7D:29:30:54:A7:A6:0F:88:99:6C:46:0C:6D:10
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.91.0/24
179.61.160.0/24
179.61.162.0/24
181.41.218.0/24
191.96.174.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3c:a7:72:dd:8f:94:2a:c0:f6:c7:33:fe:4d:e5:86:d8:64:
8d:0c:72:f3:9e:d4:cd:ae:3a:64:f0:c7:c5:0e:9e:bf:a3:6a:
7c:45:b4:1b:ac:93:2e:17:31:8b:5f:1c:3e:b3:26:9b:45:a2:
4f:ab:91:e0:2e:af:23:f1:de:f2:da:89:42:6f:4b:bb:b5:20:
86:3c:e5:c1:75:01:b4:4e:0b:56:29:0c:30:a0:dc:9c:e4:2f:
8c:27:9b:32:63:8a:1f:47:47:44:0a:4b:2e:42:8f:7e:ac:21:
a3:3e:3e:82:42:84:36:a4:ee:97:af:24:2a:8b:2c:7c:be:71:
96:cc:68:14:67:7a:76:21:82:b1:f9:48:50:37:60:8b:1f:ff:
76:9b:74:16:d5:f9:33:c3:8e:cb:07:51:ad:8f:53:98:24:00:
fe:bf:83:f3:a0:93:64:4c:bd:00:e9:5f:8d:20:8c:e4:40:e2:
f6:e0:31:9d:30:34:5c:97:71:f2:1a:b1:4a:49:17:d5:86:4b:
70:af:68:32:85:e5:35:5a:e3:ed:df:4f:0b:3b:32:49:5d:7a:
11:c1:4e:8e:a4:33:fd:a8:61:00:df:26:ff:4b:a7:fe:8d:9f:
ca:cd:19:4f:d8:49:0e:06:56:78:71:a1:2f:28:f7:6e:36:fd:
5a:0e:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:55:03 2026 by rpki-client