Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210436.roa
File: AS210436.roa (raw, json)
Hash identifier: Cy42b04b9zaeMfmaYzA62R9AkDbkeL2OSqjzTJthXhA=
Subject key identifier: 94:A1:E9:AE:2A:C5:04:22:2F:9E:C3:37:9E:62:58:3A:24:37:DA:D5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5809E9EDDE535CC25373FD5F9888AC3B8AA676AF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210436.roa
Signing time: Tue 15 Sep 2026 06:43:07 +0000
ROA not before: Tue 15 Sep 2026 06:38:07 +0000
ROA not after: Tue 14 Sep 2027 06:43:07 +0000
asID: 210436
IP address blocks: 2a13:9500:1db::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:09:e9:ed:de:53:5c:c2:53:73:fd:5f:98:88:ac:3b:8a:a6:76:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 15 06:38:07 2026 GMT
Not After : Sep 14 06:43:07 2027 GMT
Subject: CN=94A1E9AE2AC504222F9EC3379E62583A2437DAD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:f9:7a:11:fb:16:b6:f0:5d:01:6c:fe:f6:
b3:d9:93:de:20:69:5c:41:89:40:38:fa:44:41:8b:
7e:91:93:a8:be:eb:ac:7d:51:a3:ea:a1:e6:ec:16:
1a:19:cd:7a:4a:d6:33:44:8d:0f:aa:0d:7a:79:80:
3e:2f:17:af:c1:88:ad:8c:35:d3:5f:fc:23:c8:8f:
b5:b1:c2:e4:b2:1f:bc:c6:b2:ba:a0:74:f4:96:7f:
15:00:38:1d:14:6b:0c:06:51:ec:9a:62:b1:07:6e:
ab:5e:65:e6:b7:cf:91:0a:59:ba:3a:73:0f:05:95:
e9:89:4a:34:55:ba:c6:4d:f5:60:eb:9c:fa:43:c5:
c0:05:f2:a0:ef:82:79:50:75:16:14:7b:ae:ea:00:
ce:35:b8:3f:59:8d:a3:a3:4a:d1:a0:6c:72:0a:b4:
03:4f:b2:62:48:49:cd:9a:93:47:0b:7d:25:64:39:
4c:0a:6e:f0:48:f2:ee:81:eb:40:b8:76:cd:9c:d9:
15:13:b3:59:bb:36:eb:b0:8c:3e:59:60:ee:32:d8:
d3:df:65:e8:83:07:f0:4e:33:32:80:d1:c3:a9:42:
a4:49:03:00:fc:b4:45:50:83:3b:1e:46:81:80:f3:
18:4d:27:70:cc:ec:ae:67:d2:e3:49:96:13:58:53:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A1:E9:AE:2A:C5:04:22:2F:9E:C3:37:9E:62:58:3A:24:37:DA:D5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1db::/48
Signature Algorithm: sha256WithRSAEncryption
5f:dc:d2:75:42:a5:75:8f:08:30:9c:99:46:36:22:7b:51:46:
80:fd:f6:97:61:bf:9c:8e:eb:e7:8a:d7:e4:84:59:90:b0:16:
09:97:99:a1:33:0d:38:11:69:2b:31:92:c8:c0:40:5a:a7:dc:
9b:cf:76:de:f2:ee:98:5d:f4:4a:9d:8a:a0:b6:bb:23:36:07:
58:80:ec:04:3e:12:0a:cc:af:94:e7:fc:b3:96:dc:35:d3:2f:
5d:bd:81:ee:13:e6:bf:81:5a:be:75:0b:38:76:44:41:44:ea:
9e:8e:42:f6:32:38:78:3d:a6:9c:e1:a0:8e:a0:d6:e2:b2:9b:
03:89:0c:28:5e:93:80:3f:27:32:83:ed:43:84:d1:4b:a7:a9:
80:46:8e:c6:57:ad:8c:15:e5:b9:eb:bc:00:e6:f6:06:19:f7:
c9:80:ab:3b:fa:d2:51:a0:4b:d8:1b:5f:cf:a6:64:b5:45:e2:
8c:0e:39:ea:56:35:9c:dc:71:10:06:36:6c:14:36:5a:55:73:
f4:6e:6c:d1:b8:32:b8:a1:66:48:a3:c1:b0:65:6b:d8:1f:d3:
c9:54:2e:d8:b2:44:ec:4d:2b:60:d7:1e:7a:8f:b6:cd:54:64:
80:21:25:11:ce:4d:c5:b9:52:51:41:8e:a8:25:98:8d:79:d3:
1a:1a:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:30:46 2026 by rpki-client