Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210574.roa
File: AS210574.roa (raw, json)
Hash identifier: gPYhjVwErCx0PTGPwy2Qg13vP7hvXsTv7omPpgBwMso=
Subject key identifier: 64:B9:BD:E4:9B:63:F3:95:F6:57:6B:4A:67:37:04:ED:2B:0C:B8:C1
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 03077F7DDF98E417892533E33330B006EA424ECD
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210574.roa
Signing time: Thu 03 Sep 2026 14:49:32 +0000
ROA not before: Thu 03 Sep 2026 14:44:32 +0000
ROA not after: Thu 02 Sep 2027 14:49:32 +0000
asID: 210574
IP address blocks: 193.111.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:07:7f:7d:df:98:e4:17:89:25:33:e3:33:30:b0:06:ea:42:4e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 3 14:44:32 2026 GMT
Not After : Sep 2 14:49:32 2027 GMT
Subject: CN=64B9BDE49B63F395F6576B4A673704ED2B0CB8C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:10:1b:1b:af:5a:ab:a5:0d:05:f7:05:53:
e1:02:2c:47:86:6d:73:b7:4d:34:ba:0e:c8:cb:0f:
3f:17:f7:9b:f6:ac:05:c5:85:35:90:91:06:f0:2d:
89:37:dc:d3:0e:d1:1c:0c:0f:fe:28:e5:65:57:38:
d9:98:7d:74:f6:1c:d3:cb:c7:72:28:fd:ef:a8:26:
55:85:88:ee:18:d7:c2:d1:ea:1c:f1:39:24:04:9f:
85:b2:85:9a:00:72:f7:4f:b1:77:c2:1c:13:f5:a4:
b7:61:f0:dc:6f:cd:3c:5b:6a:49:a3:9e:2e:d8:ea:
51:2d:32:10:28:ff:e7:3c:d3:5d:6c:73:09:28:a4:
b8:fa:45:e4:db:a9:6a:99:51:11:b9:5e:5c:52:2b:
6a:e1:16:1c:cd:35:e7:73:19:e3:3a:67:ed:1c:c4:
d3:11:f3:10:58:39:60:59:cd:5a:85:d3:fd:64:a1:
92:4d:ee:f4:d4:05:04:39:0d:28:1d:bc:a4:54:ef:
f1:31:28:d1:95:d8:9c:97:2e:c2:2d:c8:ac:2e:e2:
90:51:ed:dd:12:00:6d:e9:82:17:d9:92:ac:00:56:
c7:9c:c7:34:05:7d:50:90:b7:02:52:10:ef:1b:a7:
13:b1:33:ce:1d:f2:ef:e6:75:f5:ce:f2:55:b4:1c:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B9:BD:E4:9B:63:F3:95:F6:57:6B:4A:67:37:04:ED:2B:0C:B8:C1
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210574.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.125.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:48:8b:3d:e8:7e:35:68:90:76:91:29:d9:fb:70:0f:c0:d0:
6e:40:e4:3c:43:a0:3e:e8:98:4a:08:14:19:e5:94:df:27:33:
69:4e:82:03:d4:c0:bd:56:1a:55:c3:29:e5:61:54:b4:ac:61:
78:b4:be:53:35:72:f7:bb:c5:16:6f:f8:11:2c:84:cd:1f:15:
ba:56:e3:95:c7:71:a9:e1:5e:2a:60:1f:2b:f9:f2:4e:a6:40:
f4:77:da:57:5a:68:81:6c:62:bf:f1:02:e6:43:f6:1f:76:36:
5a:04:e9:0a:32:ae:02:0e:c1:0e:17:b0:da:05:16:b2:54:30:
e9:0d:00:02:36:8b:34:6e:c7:4b:ef:c9:aa:d6:d3:62:7d:04:
bd:bc:c2:8b:a7:50:3c:dc:21:cd:33:30:eb:1f:d9:ec:63:21:
14:e0:f6:de:48:54:ba:d6:52:ef:e2:57:06:29:e0:fb:2e:ab:
86:87:3d:5c:67:27:d0:72:5a:f8:22:e6:64:1d:21:06:ac:3a:
aa:80:cf:9d:8c:7c:5e:6a:c1:32:c0:4c:ef:8e:61:80:ac:d3:
c4:0c:ee:1a:ce:8c:14:61:b8:ae:73:87:a7:ef:34:1a:e0:bb:
53:ef:38:d5:0a:23:f2:82:bb:41:52:bf:df:73:ea:3b:ad:c4:
16:0b:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:01:07 2026 by rpki-client