Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26210.roa
File: AS26210.roa (raw, json)
Hash identifier: g+P2dD7llrJ6F+QMpUTs0Ulq5gN/T6uRyWaGfm1T0xg=
Subject key identifier: D9:8D:20:51:D7:56:C1:1C:D4:53:AB:DC:BD:9D:72:5B:23:8F:7C:D5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6A84E41BE8FBACEA2FE14C03F4490EA6DBE09DFC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26210.roa
Signing time: Tue 20 May 2025 17:31:59 +0000
ROA not before: Tue 20 May 2025 17:26:59 +0000
ROA not after: Tue 19 May 2026 17:31:59 +0000
asID: 26210
IP address blocks: 82.21.149.0/24 maxlen: 24
82.21.156.0/24 maxlen: 24
82.21.187.0/24 maxlen: 24
82.21.206.0/24 maxlen: 24
82.29.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Jun 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:84:e4:1b:e8:fb:ac:ea:2f:e1:4c:03:f4:49:0e:a6:db:e0:9d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 20 17:26:59 2025 GMT
Not After : May 19 17:31:59 2026 GMT
Subject: CN=D98D2051D756C11CD453ABDCBD9D725B238F7CD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:1a:8d:d5:de:65:f3:ee:4d:9d:ba:8a:e3:
9d:0f:fa:f7:c4:79:a2:fa:f8:3e:78:eb:be:e2:bc:
b1:2c:83:af:d3:a0:cd:59:97:c9:68:ab:bd:aa:cc:
26:25:89:6e:88:a6:6e:b8:33:3c:a4:ae:f8:a4:dd:
fa:2d:5a:9d:99:a0:a4:a4:02:ef:3b:3c:c1:87:25:
6d:52:55:12:92:63:c3:7c:6e:ab:61:0a:9e:73:97:
58:bb:1a:b9:7b:5c:cc:f0:cc:71:3c:0a:9f:12:ea:
5f:a7:6b:62:de:36:94:57:7d:92:18:29:65:42:f8:
67:78:54:f1:da:0c:8d:76:93:5b:16:38:e9:ba:96:
80:30:81:bb:f9:1b:19:9c:33:8b:d5:21:5f:cf:ca:
69:6f:2a:a6:68:b1:43:93:01:f1:16:c7:9e:7f:b8:
7c:ad:ac:bb:7a:55:d3:9c:a4:16:1c:3a:55:2b:4a:
89:e8:05:ab:98:ce:34:e5:f0:f1:85:12:fc:e0:ae:
5a:68:32:77:56:ff:e5:71:a6:65:96:35:58:17:f5:
57:82:77:89:d3:86:84:3a:88:ea:70:7e:11:4c:5a:
ad:55:44:c6:b4:5b:52:bb:ca:bd:7b:2c:b3:64:be:
9e:99:0d:1f:83:b7:71:6e:cb:bf:a8:d7:77:88:c6:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8D:20:51:D7:56:C1:1C:D4:53:AB:DC:BD:9D:72:5B:23:8F:7C:D5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26210.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.149.0/24
82.21.156.0/24
82.21.187.0/24
82.21.206.0/24
82.29.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3d:d9:62:55:82:2d:db:22:e3:39:62:94:a6:7e:61:c7:dc:
f3:ca:6a:7d:ff:4e:2d:08:10:56:11:20:ee:51:df:09:8e:ba:
86:6d:07:79:45:c6:ed:6f:42:63:38:34:e1:06:20:95:14:47:
0b:ec:2d:53:7e:77:6b:4a:d5:3b:6d:1d:00:bf:3b:2c:4a:56:
1e:57:23:84:fb:9b:d6:7b:92:15:72:51:df:9d:b1:9f:60:9a:
2e:c6:b7:9d:51:23:81:90:2d:5f:24:85:c4:9a:e7:85:24:8e:
f7:10:1d:3d:97:74:01:06:d8:dd:95:75:4d:c4:ac:7f:05:7b:
3c:c1:9b:7e:9e:80:f8:ad:96:a2:4a:aa:a8:e6:ac:73:e6:3f:
85:e8:83:41:bd:20:4c:e8:30:43:9c:cb:48:35:99:3f:56:5a:
41:5f:c6:6e:cd:71:70:8e:f3:8a:b8:83:70:ee:9e:b7:1a:5a:
12:52:69:e2:b3:a7:51:54:be:59:8b:cb:d0:26:6e:11:10:c5:
49:fc:31:38:47:08:3b:2c:ef:66:5d:da:83:52:b8:a6:db:21:
8d:0c:bc:cc:e8:de:a6:a3:59:40:37:ac:98:9e:c8:59:4e:10:
7f:0d:6b:21:b7:5f:34:e7:c8:c7:1f:42:00:60:e5:87:cf:01:
83:22:66:82
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUaoTkG+j7rOov4UwD9EkOptvgnfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA1MjAxNzI2NTlaFw0yNjA1MTkxNzMxNTlaMDMxMTAvBgNV
BAMTKEQ5OEQyMDUxRDc1NkMxMUNENDUzQUJEQ0JEOUQ3MjVCMjM4RjdDRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm1BqN1d5l8+5NnbqK450P+vfE
eaL6+D54677ivLEsg6/ToM1Zl8loq72qzCYliW6Ipm64Mzykrvik3fotWp2ZoKSk
Au87PMGHJW1SVRKSY8N8bqthCp5zl1i7Grl7XMzwzHE8Cp8S6l+na2LeNpRXfZIY
KWVC+Gd4VPHaDI12k1sWOOm6loAwgbv5GxmcM4vVIV/PymlvKqZosUOTAfEWx55/
uHytrLt6VdOcpBYcOlUrSonoBauYzjTl8PGFEvzgrlpoMndW/+VxpmWWNVgX9VeC
d4nThoQ6iOpwfhFMWq1VRMa0W1K7yr17LLNkvp6ZDR+Dt3Fuy7+o13eIxitRAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQU2Y0gUddWwRzUU6vcvZ1yWyOPfNUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjYyMTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABSFZUD
BABSFZwDBABSFbsDBABSFc4DBABSHZQwDQYJKoZIhvcNAQELBQADggEBAIw92WJV
gi3bIuM5YpSmfmHH3PPKan3/Ti0IEFYRIO5R3wmOuoZtB3lFxu1vQmM4NOEGIJUU
RwvsLVN+d2tK1TttHQC/OyxKVh5XI4T7m9Z7khVyUd+dsZ9gmi7Gt51RI4GQLV8k
hcSa54UkjvcQHT2XdAEG2N2VdU3ErH8FezzBm36egPitlqJKqqjmrHPmP4Xog0G9
IEzoMEOcy0g1mT9WWkFfxm7NcXCO84q4g3DunrcaWhJSaeKzp1FUvlmLy9AmbhEQ
xUn8MThHCDss72Zd2oNSuKbbIY0MvMzo3qajWUA3rJieyFlOEH8NayG3XzTnyMcf
QgBg5YfPAYMiZoI=
-----END CERTIFICATE-----
Generated at Sun Jun 1 09:22:52 2025 by rpki-client