Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS210187.roa
File: AS210187.roa (raw, json)
Hash identifier: cqKhhC2ZhxnjeWlhkB9HUWme/kdPftZdBpKwO8zz+QY=
Subject key identifier: F3:A8:67:69:7C:B9:75:F4:4D:24:8F:C1:D2:91:5A:FC:01:19:36:15
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 5A36597B6A9BBF32264B1478F96C4D8148E4C516
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS210187.roa
Signing time: Wed 04 Nov 2026 20:32:52 +0000
ROA not before: Wed 04 Nov 2026 20:27:52 +0000
ROA not after: Wed 03 Nov 2027 20:32:52 +0000
asID: 210187
IP address blocks: 2a0e:8f02:f079::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:36:59:7b:6a:9b:bf:32:26:4b:14:78:f9:6c:4d:81:48:e4:c5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:52 2026 GMT
Not After : Nov 3 20:32:52 2027 GMT
Subject: CN=F3A867697CB975F44D248FC1D2915AFC01193615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:39:11:35:6c:df:1b:b6:30:d5:ec:1a:ef:e0:
17:c6:9e:af:4b:36:0e:a6:a7:0a:aa:56:04:9e:86:
23:ef:80:99:da:03:60:88:db:b6:7d:0e:3b:db:49:
06:78:41:cc:d4:40:ab:6b:b3:4a:4a:e5:1c:6e:9b:
51:a9:40:79:a1:e8:ac:40:f0:ff:0f:67:4b:c9:97:
70:a2:05:8b:5f:5e:f8:e8:34:4d:8c:a1:00:16:a2:
c2:f0:8f:4b:fa:0a:bf:27:5f:b2:ce:74:30:61:23:
42:97:b8:24:76:76:ed:9c:61:87:97:5b:8a:a6:69:
13:1f:20:3a:de:eb:73:bb:b1:1d:ce:df:f2:5a:27:
dc:2b:f6:1e:c6:56:7e:71:e1:3a:e7:7c:ac:78:43:
bc:30:e7:7e:43:57:87:95:df:e9:a9:9e:59:78:9b:
41:71:33:60:d6:2f:0a:56:f3:b2:de:6d:34:ca:b5:
29:c3:dd:8d:5b:d8:93:32:8b:6d:1a:2e:70:4d:5d:
8b:c4:fa:ac:dd:ce:d2:99:5b:2f:34:80:0d:de:b5:
d1:01:12:24:26:41:f0:0c:b0:91:bf:8b:03:20:8d:
2b:16:9c:9e:66:eb:48:2a:bd:8f:f3:70:c7:a5:60:
6d:17:4b:ab:c5:38:40:23:5b:10:82:f3:a4:11:be:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A8:67:69:7C:B9:75:F4:4D:24:8F:C1:D2:91:5A:FC:01:19:36:15
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS210187.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f079::/48
Signature Algorithm: sha256WithRSAEncryption
40:e2:41:4f:f0:be:06:9d:74:82:46:ff:85:64:45:61:84:47:
06:64:95:a2:b9:39:e1:cc:1e:4b:25:eb:37:0d:8e:63:5d:ad:
28:4b:de:75:80:f1:be:2b:ac:55:63:3d:98:b3:02:be:d5:f9:
c1:0d:eb:50:d0:df:52:29:b0:22:72:12:c7:32:87:1d:5c:78:
1e:1f:5e:9c:f5:4a:22:06:a9:07:e6:11:ca:00:92:11:b8:cc:
32:ef:bb:30:10:af:8a:8c:c4:ba:2c:a8:fb:e0:fc:92:26:0f:
2e:c0:e7:43:b6:42:ca:dd:31:36:d0:21:59:d4:d0:55:40:33:
c9:7d:dd:62:f1:e8:75:22:25:ee:f6:c4:85:ee:4f:00:a3:2d:
ff:7c:2d:3b:43:78:c1:f5:22:2d:f6:33:4e:fd:2f:b9:66:b9:
36:6a:b3:eb:b2:11:fe:41:83:68:c8:75:bc:29:17:9d:81:1e:
88:26:81:9a:1f:01:9c:98:43:92:db:66:e4:7d:b4:ff:28:e3:
5e:63:30:49:ef:ba:ab:4a:21:94:bd:b2:47:7f:1e:a0:1b:5b:
df:2b:0c:c3:fb:27:80:86:86:43:de:d0:94:e6:fb:b1:56:8d:
14:2a:b9:7a:88:85:fa:f5:e1:39:30:09:f1:1d:f8:2b:3c:77:
ba:93:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:18:42 2026 by rpki-client