Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210814.roa
File: AS210814.roa (raw, json)
Hash identifier: CPTS/ab3EYQSbSjXy6kdAjY7xL8tU2cTZkP9VQ1xYeQ=
Subject key identifier: 22:89:DE:F5:0D:AF:DB:5F:91:19:34:FC:CB:97:18:F5:4B:81:D6:CD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3193B2C178A34C707CD620A8CCFAC31F94E268DE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210814.roa
Signing time: Mon 21 Sep 2026 00:05:31 +0000
ROA not before: Mon 21 Sep 2026 00:00:31 +0000
ROA not after: Mon 20 Sep 2027 00:05:31 +0000
asID: 210814
IP address blocks: 82.21.41.0/24 maxlen: 24
82.29.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:93:b2:c1:78:a3:4c:70:7c:d6:20:a8:cc:fa:c3:1f:94:e2:68:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 21 00:00:31 2026 GMT
Not After : Sep 20 00:05:31 2027 GMT
Subject: CN=2289DEF50DAFDB5F911934FCCB9718F54B81D6CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:44:f0:c0:17:55:89:58:36:8b:c7:90:b4:35:
d0:49:9d:19:42:de:72:f1:33:3a:18:c9:37:a3:ef:
1b:46:3c:86:6c:b2:b2:e1:3d:ad:a9:ac:e6:7d:d0:
16:ba:ad:bc:4a:2c:3f:9f:2b:9d:76:35:f6:03:e5:
34:eb:21:71:7f:df:8f:11:70:2f:fd:4b:c7:ea:10:
5e:5f:2e:2c:0d:54:b9:0a:b1:75:8e:0f:52:d8:16:
0c:4b:ea:b3:a2:da:4f:18:0f:d5:65:cd:a7:49:80:
09:33:04:9a:00:d4:36:c1:c7:89:9a:f6:16:a7:27:
0d:dd:6c:00:bd:11:39:e9:a2:0e:9a:7c:e7:68:76:
6f:09:0d:4c:5a:c5:56:42:51:b8:17:b5:d9:29:2d:
bb:6c:95:75:68:0d:30:2e:3d:dd:d8:55:95:39:8e:
9e:74:2b:77:b1:f2:1f:26:39:9a:5a:bc:dd:4e:84:
a4:c9:fa:61:19:74:68:c2:42:3b:ac:12:14:f7:ab:
fe:a5:e2:f4:ed:4d:0f:b5:a1:cb:ee:72:9e:54:1b:
6d:6a:ee:29:1f:89:ad:1d:f0:be:91:e8:5b:23:f2:
a2:e1:db:34:76:5b:af:74:3a:05:49:4b:e0:af:60:
0f:31:17:39:b7:08:4e:18:7e:eb:2b:4c:c5:69:a0:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:DE:F5:0D:AF:DB:5F:91:19:34:FC:CB:97:18:F5:4B:81:D6:CD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210814.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.41.0/24
82.29.79.0/24
Signature Algorithm: sha256WithRSAEncryption
38:15:32:9b:6f:9f:ff:b2:21:aa:4a:9f:d4:82:56:c8:6c:d7:
84:1c:58:d8:7f:52:43:cb:f0:f7:1b:2a:78:4a:91:3d:ab:14:
6d:fc:a5:4b:05:14:ee:71:2f:0b:a2:9d:1d:9d:4b:8e:57:57:
9a:cf:61:37:25:2c:e2:66:26:23:33:18:a8:a8:a7:99:09:e5:
0b:3f:91:5d:02:06:f7:7b:76:3c:28:0d:a5:f9:73:e5:1c:27:
00:7c:4b:da:99:c8:e8:16:54:c8:37:a3:9f:07:26:f2:0f:4c:
38:80:18:c6:81:6d:45:57:b3:ce:c6:a8:79:72:5c:f7:58:87:
5e:b8:db:4a:c0:e5:c5:b5:84:50:c5:97:bd:f2:b0:90:91:f0:
34:a0:80:ff:19:a0:8b:54:e1:71:dd:b0:e8:a3:29:fc:73:ce:
24:0b:0b:f9:93:8e:27:d1:df:bb:22:65:05:b4:c0:03:95:16:
9c:de:06:3d:61:52:47:a7:40:3d:48:78:48:8a:a4:80:4a:12:
09:f4:96:18:60:f2:d7:fb:76:04:6c:c0:cb:13:22:66:24:73:
99:53:b5:41:65:d9:ec:2b:74:ee:8f:d7:a9:24:cd:9a:66:fb:
df:d1:7b:d9:f8:90:e6:da:34:c7:3e:43:e9:32:a6:33:27:c1:
19:82:36:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:21:52 2026 by rpki-client