Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210083.roa
File: AS210083.roa (raw, json)
Hash identifier: aP6mIE2gsEmv8tOcCLYLPdUdiBknJqeRxdgjfQPO0no=
Subject key identifier: 86:0A:0F:94:FE:A3:C0:10:80:E2:AC:99:B4:7B:F2:21:01:35:CA:C5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 06FCD60A8B459F04FAF3FC4F040586982BBF5598
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210083.roa
Signing time: Wed 09 Sep 2026 16:34:29 +0000
ROA not before: Wed 09 Sep 2026 16:29:29 +0000
ROA not after: Wed 08 Sep 2027 16:34:29 +0000
asID: 210083
IP address blocks: 82.41.208.0/24 maxlen: 24
2a13:9500:1d5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fc:d6:0a:8b:45:9f:04:fa:f3:fc:4f:04:05:86:98:2b:bf:55:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 9 16:29:29 2026 GMT
Not After : Sep 8 16:34:29 2027 GMT
Subject: CN=860A0F94FEA3C01080E2AC99B47BF2210135CAC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:a3:f0:c9:02:b0:a0:7e:9b:02:3d:34:9f:
f5:b1:a8:71:ab:26:fd:c3:fe:04:94:2e:e9:7a:e6:
c8:8d:ba:eb:53:f7:10:c5:f9:a8:d4:57:57:de:b7:
8a:3f:4d:67:a1:d9:19:bf:0d:69:e9:02:9a:15:d8:
77:64:ba:0a:17:85:fc:f8:71:13:2d:8b:bd:5f:d8:
76:81:50:c4:85:95:d7:db:6c:e6:43:e5:67:07:1c:
2a:c9:a8:0f:02:8b:bd:d4:f4:51:89:07:b6:f1:4d:
20:22:29:ec:38:37:7b:1c:b1:a7:b1:0b:62:51:5d:
ad:eb:97:ed:9b:8f:3d:c1:65:f4:19:fd:bc:fd:e8:
e8:a5:5c:1c:d1:87:68:ad:58:78:36:fa:29:59:61:
ca:70:f1:d0:19:5e:61:b4:07:1f:ee:bb:49:2c:d2:
c0:77:17:99:b8:07:2b:27:e3:17:4a:32:e6:8a:25:
82:27:96:46:94:0e:e4:1c:34:36:25:71:5e:1f:82:
03:dc:db:9e:06:a3:9c:8e:2f:e5:09:8a:45:c8:25:
42:02:ce:f8:45:14:c5:ab:80:b5:82:3f:74:42:65:
58:62:e8:86:cf:2b:da:40:40:9e:76:2f:ca:d1:1e:
ed:de:fa:3f:31:f6:1e:08:28:18:0a:57:78:ab:1d:
d0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0A:0F:94:FE:A3:C0:10:80:E2:AC:99:B4:7B:F2:21:01:35:CA:C5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.208.0/24
IPv6:
2a13:9500:1d5::/48
Signature Algorithm: sha256WithRSAEncryption
68:9f:a5:8b:56:ac:f1:77:06:18:5c:d3:5a:69:02:75:2f:d8:
73:81:45:4a:15:de:23:06:e9:11:9b:68:8f:ce:f5:89:d4:72:
d2:c6:77:43:94:dc:08:0d:52:14:4f:43:56:8e:b1:57:53:7f:
8f:13:b2:e6:98:57:46:2b:a1:0c:cb:5f:18:19:d6:2c:f5:e5:
fe:f4:81:4d:c1:36:55:22:33:17:ee:66:04:37:46:52:f7:06:
57:92:08:91:23:81:ab:f1:fb:76:87:6e:20:bb:00:56:18:89:
3d:2d:c1:44:f2:f0:10:bd:17:67:3a:70:d8:bb:d9:09:76:71:
43:8e:35:cb:be:fc:fe:f3:35:67:5d:1e:fc:ce:eb:1d:d2:0c:
06:d4:a2:1a:27:d9:83:4b:c6:f1:52:61:97:35:fa:86:8d:fb:
05:c1:76:c8:6f:e1:c0:fc:2a:08:99:b2:3a:e0:26:46:32:21:
dc:ed:cc:e0:eb:0a:1b:e5:78:d2:9f:9c:48:16:4f:a4:4e:78:
54:81:1f:1b:41:91:1e:a3:08:e5:9e:ce:78:26:4e:37:c6:43:
43:62:88:6e:80:36:fd:1e:fa:20:55:b0:6c:03:5b:72:fb:ed:
2e:9b:e3:18:07:43:15:51:d7:de:7f:bc:4b:45:c4:b5:ef:4f:
a7:f0:9e:f6
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUBvzWCotFnwT68/xPBAWGmCu/VZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MDkxNjI5MjlaFw0yNzA5MDgxNjM0MjlaMDMxMTAvBgNV
BAMTKDg2MEEwRjk0RkVBM0MwMTA4MEUyQUM5OUI0N0JGMjIxMDEzNUNBQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFKPwyQKwoH6bAj00n/WxqHGr
Jv3D/gSULul65siNuutT9xDF+ajUV1fet4o/TWeh2Rm/DWnpApoV2HdkugoXhfz4
cRMti71f2HaBUMSFldfbbOZD5WcHHCrJqA8Ci73U9FGJB7bxTSAiKew4N3scsaex
C2JRXa3rl+2bjz3BZfQZ/bz96OilXBzRh2itWHg2+ilZYcpw8dAZXmG0Bx/uu0ks
0sB3F5m4Bysn4xdKMuaKJYInlkaUDuQcNDYlcV4fggPc254Go5yOL+UJikXIJUIC
zvhFFMWrgLWCP3RCZVhi6IbPK9pAQJ52L8rRHu3e+j8x9h4IKBgKV3irHdAtAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUhgoPlP6jwBCA4qyZtHvyIQE1ysUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEwMDgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUinQ
MA8EAgACMAkDBwAqE5UAAdUwDQYJKoZIhvcNAQELBQADggEBAGifpYtWrPF3Bhhc
01ppAnUv2HOBRUoV3iMG6RGbaI/O9YnUctLGd0OU3AgNUhRPQ1aOsVdTf48TsuaY
V0YroQzLXxgZ1iz15f70gU3BNlUiMxfuZgQ3RlL3BleSCJEjgavx+3aHbiC7AFYY
iT0twUTy8BC9F2c6cNi72Ql2cUOONcu+/P7zNWddHvzO6x3SDAbUohon2YNLxvFS
YZc1+oaN+wXBdshv4cD8KgiZsjrgJkYyIdztzODrChvleNKfnEgWT6ROeFSBHxtB
kR6jCOWezngmTjfGQ0NiiG6ANv0e+iBVsGwDW3L77S6b4xgHQxVR195/vEtFxLXv
T6fwnvY=
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:03:05 2026 by rpki-client