Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210940.roa
File: AS210940.roa (raw, json)
Hash identifier: kRYT/I6DqoPpFPmFCpsjapjAUKPbUF9Xju68Dk/rb1o=
Subject key identifier: 3B:A3:BF:BD:30:AC:84:CC:34:5E:A5:2F:6C:F1:31:48:63:32:6B:EC
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3960C6DA66FCBF470D15016E9AB999BF3C5CB539
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210940.roa
Signing time: Fri 12 Jun 2026 05:44:35 +0000
ROA not before: Fri 12 Jun 2026 05:39:35 +0000
ROA not after: Fri 11 Jun 2027 05:44:35 +0000
asID: 210940
IP address blocks: 45.157.16.0/24 maxlen: 24
45.157.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:60:c6:da:66:fc:bf:47:0d:15:01:6e:9a:b9:99:bf:3c:5c:b5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 12 05:39:35 2026 GMT
Not After : Jun 11 05:44:35 2027 GMT
Subject: CN=3BA3BFBD30AC84CC345EA52F6CF1314863326BEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:7a:d3:9f:8a:f7:47:30:21:c2:53:5f:50:
72:08:ba:92:96:37:76:59:6a:70:fe:42:fe:38:5f:
5d:f7:3b:92:13:eb:7f:79:d0:fa:a1:a6:9d:44:03:
39:1b:55:4c:5a:5e:e6:9e:0b:cf:78:89:2e:09:eb:
ea:6d:fe:68:6a:54:7d:2e:d5:02:10:6e:97:68:7f:
e4:a4:b6:af:1d:12:b8:d5:db:bd:73:f5:00:04:b4:
30:ac:37:d8:cb:9a:5a:bc:99:84:70:e8:71:6b:6b:
95:95:e8:5f:ee:76:a0:95:41:b9:01:80:a2:d8:f7:
a2:b7:88:ff:2d:a0:29:5a:41:2c:4d:2c:16:2f:2a:
dd:27:fb:89:14:cd:c9:4f:df:cb:82:ed:15:04:fa:
f2:de:f4:a6:3e:d4:5c:5f:71:ab:49:37:03:b6:8b:
90:dc:70:f3:66:66:61:58:f0:ba:23:1b:c0:a1:1c:
34:39:6e:24:e3:fd:c1:e2:47:02:0b:bf:99:73:1f:
37:5e:98:8f:94:4f:43:15:93:78:ee:df:b1:68:60:
0d:6a:23:d0:4f:cf:dd:aa:4e:63:16:29:06:1c:37:
df:55:37:fc:df:b0:99:36:7f:d8:4f:ed:89:b7:5e:
77:9d:1a:d8:e0:f3:88:01:d3:6c:33:aa:5e:31:d6:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A3:BF:BD:30:AC:84:CC:34:5E:A5:2F:6C:F1:31:48:63:32:6B:EC
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210940.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.16.0/24
45.157.19.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6e:c8:6f:ee:6e:56:87:0e:e9:c0:a4:4d:10:6b:a3:83:f8:
8d:92:a1:be:6f:ed:e5:d7:68:78:f4:68:38:06:fb:aa:19:24:
46:1d:96:78:f4:2c:5a:ee:e4:3c:4a:45:e6:b8:b1:46:f7:4f:
c8:2a:5f:90:ae:7f:2c:5c:cd:fc:f3:92:04:bf:ca:5d:0a:d1:
41:c4:6e:77:5a:2f:5d:a2:7f:c8:47:1f:60:76:6f:99:0d:60:
c6:ef:a8:b8:c9:48:32:59:46:47:ac:1b:28:7b:37:f5:77:e9:
d9:f8:85:4f:87:f7:5c:66:1e:f0:93:54:2f:d3:c8:ca:95:86:
be:a6:8b:1c:a2:01:56:1a:ed:6c:05:b5:87:ab:54:54:c0:69:
3a:88:ed:28:93:64:a5:33:d4:26:6f:35:a0:0d:4f:99:8e:03:
62:4e:75:d3:2b:12:c8:b3:d0:66:44:8c:43:c3:58:4f:2f:f2:
59:65:6f:0f:a7:9b:55:01:a2:c1:b5:87:8c:f5:29:47:6f:dd:
b6:64:ad:c9:c8:93:e9:0b:a6:16:eb:bc:0f:a9:56:b2:ef:a8:
1d:e7:73:65:3b:90:3d:76:11:6b:e7:15:4c:9b:48:35:f3:c6:
e6:75:ec:a6:61:8f:72:29:f0:ed:43:0c:2a:9d:72:ec:e9:04:
04:b0:48:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:24:53 2026 by rpki-client