
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa
File: AS210376.roa (raw, json)
Hash identifier: ATVhqyignKltfaPO5HG0iGt/shr14gKv9cpQ+s2/Sds=
Subject key identifier: 83:86:40:CA:26:D8:9F:8D:B8:A9:8B:20:9F:DB:56:98:6D:F9:15:D8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 71B40DF94C7B6B5F97B0E766E8E66C0614A04B2F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa
Signing time: Fri 25 Jul 2025 08:07:46 +0000
ROA not before: Fri 25 Jul 2025 08:02:46 +0000
ROA not after: Fri 24 Jul 2026 08:07:46 +0000
asID: 210376
IP address blocks: 2a0f:85c1:29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b4:0d:f9:4c:7b:6b:5f:97:b0:e7:66:e8:e6:6c:06:14:a0:4b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:46 2025 GMT
Not After : Jul 24 08:07:46 2026 GMT
Subject: CN=838640CA26D89F8DB8A98B209FDB56986DF915D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:8c:ba:9e:ed:9b:7e:e5:12:cc:ee:22:94:
fa:90:78:cf:79:a1:2f:47:77:b8:8d:72:45:b7:df:
c1:58:7a:b8:37:f8:f5:b0:44:f8:b3:08:8a:7f:0a:
0b:8f:58:aa:71:19:3f:d2:1c:cd:b4:08:05:71:2d:
a4:ef:e2:bd:74:e2:4e:80:e3:df:eb:0e:1b:a4:ce:
72:ee:85:bc:27:68:33:04:91:1a:77:92:ad:f4:61:
ca:bc:14:93:0d:95:61:3e:50:8b:1a:bf:b8:e6:1f:
2d:71:38:0f:73:5a:56:7c:33:52:ae:c9:f5:3a:6f:
a3:46:52:b5:60:26:7f:fd:0d:0d:ce:59:44:18:47:
9b:a0:4a:cb:65:6e:98:7d:32:b7:91:d7:89:cb:ef:
fc:9f:7c:5e:9b:75:61:6f:5e:bc:0d:c9:7e:d1:a8:
e3:35:1c:25:b6:26:dd:de:1f:48:87:53:c9:e5:90:
ee:24:f0:b0:95:da:f5:8f:fa:46:20:56:b3:2d:50:
cd:ac:e7:db:f2:df:09:cf:b2:3c:97:7e:26:09:f7:
71:36:4f:cb:9b:02:9d:ce:e7:d6:89:8b:3f:7c:aa:
8a:5a:0c:ea:f0:e7:20:89:fe:0d:02:5b:0f:3e:de:
7c:4b:f0:49:51:c6:14:54:5c:88:0b:c2:7a:33:2f:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:40:CA:26:D8:9F:8D:B8:A9:8B:20:9F:DB:56:98:6D:F9:15:D8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:29::/48
Signature Algorithm: sha256WithRSAEncryption
aa:c1:b9:ec:31:99:89:7a:ed:53:6f:82:0b:f9:c4:b9:a8:1c:
31:01:21:84:23:4b:c3:e8:92:06:74:ce:50:ff:2b:ff:5f:f8:
ad:22:8d:61:31:6f:d7:0c:b9:89:a6:5d:da:b6:21:8f:09:b6:
57:e0:4d:b5:0a:44:40:9d:2c:6d:70:18:d4:ca:d9:f5:15:1b:
0f:bd:28:36:34:1b:a1:83:c9:5a:82:66:c9:b9:5f:0c:2d:24:
22:7c:da:85:e8:3f:9c:df:5d:f7:f0:1b:30:8f:13:4f:59:1b:
f0:8e:1c:6b:7f:f4:0a:1a:90:21:76:90:d4:1e:14:7e:ae:3c:
c2:92:bb:9c:09:14:3b:e1:26:a9:7a:a4:da:4d:e1:22:e3:ca:
5c:9e:ee:96:45:b9:80:a6:38:0a:30:b6:36:91:98:2f:bb:18:
32:7b:ef:c3:e2:f3:3a:be:2a:e8:32:00:4e:7f:b7:34:8e:3c:
4b:24:8e:75:0a:c1:e6:01:20:dd:e6:96:49:dd:78:c4:33:a0:
53:2c:52:75:a2:20:39:d7:f1:c0:64:21:a6:87:49:d1:b0:7f:
25:06:b2:b3:a5:46:a9:b8:11:73:84:d1:d3:2e:3c:ed:9f:e7:
f4:e5:5e:07:00:b7:40:21:66:32:dc:c3:cf:cb:75:5f:07:c8:
b8:60:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:21:20 2025 by rpki-client