Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210083.roa
File: AS210083.roa (raw, json)
Hash identifier: K5ou/gcymnC3hOqiojl/9fmDUf2gtYuegGOQn1HPOjg=
Subject key identifier: 6F:68:C5:98:34:28:DF:9C:2F:97:51:3E:BC:C7:93:8A:1E:44:FD:B9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 48A4C60C67753CBF6D2C3137D44034C6FB6C55C5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210083.roa
Signing time: Tue 07 Apr 2026 00:09:37 +0000
ROA not before: Tue 07 Apr 2026 00:04:37 +0000
ROA not after: Tue 06 Apr 2027 00:09:37 +0000
asID: 210083
IP address blocks: 82.41.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a4:c6:0c:67:75:3c:bf:6d:2c:31:37:d4:40:34:c6:fb:6c:55:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 7 00:04:37 2026 GMT
Not After : Apr 6 00:09:37 2027 GMT
Subject: CN=6F68C5983428DF9C2F97513EBCC7938A1E44FDB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:6f:f9:32:78:a7:3d:2d:35:3a:dd:47:55:
57:b8:85:a0:e1:7f:1e:d7:30:e4:b0:5a:3a:08:69:
cd:54:6a:e2:8c:cb:bb:ea:98:97:43:d7:0d:ba:ea:
bb:ac:a4:62:a3:b3:a2:a5:30:75:b5:45:3f:da:2d:
9b:b1:9e:f3:9e:fa:a1:48:7e:f7:68:a6:33:d9:ca:
ec:37:54:c1:be:5b:90:e7:8d:00:71:04:5a:a2:08:
a7:5f:5a:24:f6:e4:95:9b:87:8e:ce:6a:ba:31:a1:
97:80:e7:21:74:4c:76:38:97:71:33:ce:07:97:1c:
30:36:75:1a:7c:f8:ac:8b:7e:85:e2:d4:63:23:bc:
10:8d:db:9a:e9:9e:52:c5:88:fa:e5:6e:cc:6d:d0:
5b:b5:7d:a3:5b:17:43:d1:fc:b6:25:07:f4:91:54:
25:63:4a:6f:46:a2:50:f7:49:7f:d4:49:87:f0:8b:
ba:a4:e4:e3:d3:d8:44:88:56:3d:52:ac:46:52:ed:
8c:f4:2c:14:3e:6a:27:94:1e:56:48:76:3e:fb:9f:
9f:f0:15:81:0b:c5:bb:0d:81:0f:2d:af:76:c9:b0:
b2:6a:57:1e:91:6e:7a:82:6d:34:eb:cd:8f:25:31:
4e:f4:cd:43:27:4d:33:33:a0:11:2e:13:95:5a:5b:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:C5:98:34:28:DF:9C:2F:97:51:3E:BC:C7:93:8A:1E:44:FD:B9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.208.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d4:45:f4:9e:cb:91:08:29:41:53:59:fa:3b:65:b3:29:60:
cf:ad:1b:13:5a:df:3f:c0:39:6b:80:c0:37:d8:7b:0f:5a:b6:
7a:5a:32:88:ab:66:40:55:61:15:21:95:7f:92:7f:66:c2:dd:
2a:a6:c7:b4:2d:b5:66:1e:af:f6:ff:65:0e:66:44:81:e8:8f:
d7:2e:59:de:93:58:93:9e:dc:06:f4:68:69:ee:c8:78:d9:ea:
54:13:65:13:a3:36:33:ca:b0:b8:e7:b6:7b:38:34:19:b2:2c:
12:4f:f5:a5:6f:dd:77:8f:d9:6d:fe:09:1e:f6:db:61:80:2f:
64:ac:3f:a4:cf:bc:96:03:ef:8e:2a:63:c5:68:ac:8a:ef:0e:
6f:d8:e5:dc:c8:4c:dc:42:c0:4d:54:30:64:4a:7f:b2:e0:b7:
af:19:6c:dc:0c:82:59:9b:51:39:db:ed:b6:ff:c2:d7:21:52:
87:81:91:47:d8:7d:ad:d0:ef:d1:95:5f:29:15:74:e0:3d:59:
e4:ea:19:5f:64:49:10:4b:b6:cd:fc:08:27:9d:13:f1:16:ee:
96:3e:75:f3:aa:ad:1f:01:05:13:eb:19:b2:b7:4f:45:41:b9:
0b:69:8f:77:df:63:d6:fa:58:f5:43:3b:d1:75:ed:a8:36:7b:
92:1d:a4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:05 2026 by rpki-client