Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: ERj5KfY0u8xP4BxpNVI68nIhO1V7y5AXKju8puT2Y+E=
Subject key identifier: 96:36:0C:8D:3D:81:4E:3A:7F:39:2A:0B:F9:03:F8:6A:F7:F6:15:8E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 150C531B96833D329A5D5B242E9FBC824BBA7219
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
Signing time: Tue 03 Nov 2026 00:00:21 +0000
ROA not before: Mon 02 Nov 2026 23:55:21 +0000
ROA not after: Tue 02 Nov 2027 00:00:21 +0000
asID: 10753
IP address blocks: 82.21.210.0/24 maxlen: 24
82.21.216.0/24 maxlen: 24
82.21.234.0/24 maxlen: 24
82.22.250.0/24 maxlen: 24
82.23.19.0/24 maxlen: 24
82.23.20.0/24 maxlen: 24
82.23.23.0/24 maxlen: 24
82.23.24.0/24 maxlen: 24
82.23.59.0/24 maxlen: 24
82.23.60.0/24 maxlen: 24
82.24.66.0/24 maxlen: 24
82.24.75.0/24 maxlen: 24
82.24.87.0/24 maxlen: 24
82.24.104.0/24 maxlen: 24
82.24.124.0/24 maxlen: 24
82.24.147.0/24 maxlen: 24
82.24.173.0/24 maxlen: 24
82.24.180.0/24 maxlen: 24
82.24.202.0/24 maxlen: 24
82.25.225.0/24 maxlen: 24
82.25.250.0/24 maxlen: 24
82.26.234.0/24 maxlen: 24
82.26.250.0/24 maxlen: 24
82.27.210.0/24 maxlen: 24
82.27.220.0/24 maxlen: 24
82.27.250.0/24 maxlen: 24
82.29.239.0/24 maxlen: 24
82.29.240.0/24 maxlen: 24
82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
82.38.215.0/24 maxlen: 24
178.83.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0c:53:1b:96:83:3d:32:9a:5d:5b:24:2e:9f:bc:82:4b:ba:72:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 2 23:55:21 2026 GMT
Not After : Nov 2 00:00:21 2027 GMT
Subject: CN=96360C8D3D814E3A7F392A0BF903F86AF7F6158E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:ed:11:4f:e7:99:2a:c7:c0:9c:05:20:15:
5a:e3:4c:69:16:96:77:d5:96:5b:9c:f3:bb:88:87:
13:8c:9b:31:60:43:20:cc:80:73:d2:4b:4c:e7:10:
c1:48:ee:b7:8e:d4:38:6a:07:5b:81:24:a3:5d:cb:
8e:55:f3:61:27:1e:83:18:93:91:93:0a:92:5c:4b:
34:2e:d5:64:a9:4b:dd:c7:19:25:a6:dc:5b:23:ce:
0c:84:6f:51:d3:1f:5a:46:0e:c7:c7:b0:4c:a7:f0:
0a:ed:2a:77:ad:ee:ce:70:1a:87:c9:d1:e1:1d:2b:
fe:5c:c7:75:df:0b:b7:66:49:dd:21:3c:7d:d0:b4:
d6:66:7f:0a:f3:1d:c0:e6:1b:2e:e3:01:c7:9c:4d:
2b:de:57:ba:2c:42:e5:fb:87:fc:09:f1:b5:c2:ed:
3a:61:7d:87:ed:81:c6:70:b3:c9:14:6a:f0:f3:d7:
0d:6b:3c:11:34:b3:d7:57:43:59:8e:11:56:93:66:
5e:9c:2d:d2:3c:5d:14:f5:e6:5b:4e:61:d6:5d:bb:
5a:82:79:89:28:63:16:fb:a3:60:f6:7b:d3:27:a6:
7a:b4:4a:7b:9f:d1:e6:13:97:ca:31:ab:b4:1d:2a:
f5:7e:e0:0d:17:a6:2a:b6:08:b4:c2:25:5f:dd:1c:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:36:0C:8D:3D:81:4E:3A:7F:39:2A:0B:F9:03:F8:6A:F7:F6:15:8E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.210.0/24
82.21.216.0/24
82.21.234.0/24
82.22.250.0/24
82.23.19.0-82.23.20.255
82.23.23.0-82.23.24.255
82.23.59.0-82.23.60.255
82.24.66.0/24
82.24.75.0/24
82.24.87.0/24
82.24.104.0/24
82.24.124.0/24
82.24.147.0/24
82.24.173.0/24
82.24.180.0/24
82.24.202.0/24
82.25.225.0/24
82.25.250.0/24
82.26.234.0/24
82.26.250.0/24
82.27.210.0/24
82.27.220.0/24
82.27.250.0/24
82.29.239.0-82.29.240.255
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
82.38.215.0/24
178.83.82.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:8a:7d:b2:04:ff:eb:fd:e1:a4:3a:11:97:7a:dd:15:0b:fd:
c7:65:63:2e:67:d0:23:c0:3e:68:a0:c2:8e:5e:f4:c7:75:dd:
25:7c:1a:41:e5:0f:39:be:48:20:a1:75:ea:d2:70:db:5a:5d:
1d:59:c7:2f:1e:10:d8:c2:5b:43:37:c4:09:9a:bf:b3:c2:1c:
19:21:f5:86:57:23:0c:9f:4c:58:4a:3c:90:8f:4b:fc:1d:37:
d2:57:d9:a9:4b:8b:19:5b:8d:23:ad:63:71:79:77:e4:7d:f3:
e3:4c:2b:dc:a2:ee:01:77:64:be:0e:32:69:4a:77:a6:24:e3:
0f:37:8a:17:ff:76:b2:90:9b:13:21:52:fd:ef:ec:94:e8:8f:
f6:44:75:9a:20:3e:51:80:53:71:f3:d6:c7:43:c7:88:2c:4f:
ce:a5:ec:78:52:e3:d9:98:2a:88:c5:73:3f:5e:60:ab:e9:12:
3a:d7:46:08:7e:99:de:d4:1b:95:f5:76:5a:1a:4a:75:70:bf:
58:50:4c:56:05:82:05:ef:bb:9b:4c:34:8c:4d:54:cd:81:a9:
7f:db:71:47:e0:36:b2:91:c4:2d:35:bc:0c:89:6e:be:e4:ee:
94:33:1d:fb:27:fc:ae:c6:68:37:83:22:a0:31:cd:7e:41:e6:
3a:54:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:21:29 2026 by rpki-client