Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210977.roa
File: AS210977.roa (raw, json)
Hash identifier: fomuNaczkNtAsDY7KUDXu/QIZ2G7akuUV0AO4Nd6em8=
Subject key identifier: 78:77:DD:A6:81:79:20:45:9F:A6:AF:09:E0:3A:2A:A4:92:EF:BF:0A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 479041EFB92F26B4EA06CCDAF1B0E3CB3A455DB3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210977.roa
Signing time: Wed 04 Nov 2026 09:49:39 +0000
ROA not before: Wed 04 Nov 2026 09:44:39 +0000
ROA not after: Wed 03 Nov 2027 09:49:39 +0000
asID: 210977
IP address blocks: 191.96.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:90:41:ef:b9:2f:26:b4:ea:06:cc:da:f1:b0:e3:cb:3a:45:5d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:39 2026 GMT
Not After : Nov 3 09:49:39 2027 GMT
Subject: CN=7877DDA6817920459FA6AF09E03A2AA492EFBF0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:33:b1:fa:73:85:8e:e7:12:38:03:b5:45:
a4:2b:1e:4a:ab:13:37:84:92:85:a4:df:b2:7b:90:
11:39:0b:12:d1:a7:dd:c5:d5:9e:5e:8b:9b:84:d2:
d3:44:8d:4e:1c:47:4f:46:b6:8b:59:c5:e9:7a:a6:
71:04:b7:13:c2:8a:ae:c3:d3:7e:ab:f1:20:ae:c6:
52:79:b8:8d:92:f1:94:0d:9f:48:35:14:e9:92:6d:
88:da:3c:f7:71:81:84:37:5d:8d:e3:93:c3:f7:93:
9d:fb:79:e0:ea:cf:7b:55:0a:ea:33:c1:a9:e0:2b:
e3:ea:bf:3e:57:db:09:5f:30:58:45:cc:a5:ec:0c:
70:ac:8c:31:25:0c:b4:b4:4a:15:98:0a:e0:b1:38:
67:8d:9d:f4:23:36:90:c2:02:a6:2f:96:ab:1e:22:
8b:8a:70:5e:31:1e:e6:44:a5:41:15:04:34:77:be:
2d:ff:a0:10:d8:9b:39:8a:62:ca:06:c8:0d:22:d1:
3e:c3:47:14:0e:67:5e:39:ea:9b:34:f8:21:ab:00:
2f:a4:2b:7d:52:d7:0d:19:38:9e:22:dc:12:82:f5:
6d:0a:88:ca:7f:81:9a:ae:7f:63:21:5e:f3:90:cb:
c6:bf:57:6c:b9:db:30:48:02:63:5b:b9:64:10:84:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:77:DD:A6:81:79:20:45:9F:A6:AF:09:E0:3A:2A:A4:92:EF:BF:0A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210977.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:17:20:44:ff:dc:68:40:fd:42:9f:9e:32:a6:dc:2d:41:87:
7c:f7:9a:f9:ad:db:cf:11:b3:94:a2:2a:36:69:a1:44:b5:31:
17:4f:03:b6:a1:dc:a0:b2:40:c7:43:3d:ab:15:64:43:dc:b8:
3e:11:4e:e2:15:05:96:ad:79:b1:75:e9:21:53:e7:6f:2c:ba:
75:52:32:a6:fc:db:6a:23:dc:1f:f1:bf:76:dd:b3:b8:85:d2:
59:fb:f7:66:bc:a1:2b:18:cd:0c:17:f6:a5:de:82:9c:ff:a8:
d3:94:c5:6b:a2:dd:8c:cb:6d:37:93:27:18:cd:53:f1:12:a0:
24:47:51:7e:ca:3f:49:44:db:de:6f:5c:f8:0d:34:54:14:37:
57:87:65:4a:20:dd:a1:25:39:2c:fd:c4:3c:07:23:25:6d:2a:
d5:72:92:41:07:0a:c5:2d:f0:35:f9:fa:78:ef:28:5e:f9:d6:
2a:23:d0:05:e0:7f:2e:cc:a1:66:04:62:72:ed:76:8f:80:8b:
03:e7:53:6c:76:46:0e:7b:cb:e2:68:6f:1a:58:40:bf:29:5d:
06:1b:c0:e2:36:31:66:6e:00:ce:e7:17:c9:63:b1:50:5e:e1:
3b:4b:66:ce:ad:d6:ed:14:62:40:9d:8d:67:e6:02:62:30:0a:
71:f4:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:49:10 2026 by rpki-client