Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210683.roa
File: AS210683.roa (raw, json)
Hash identifier: /98yujEoJYhaQUmVfDa7MpGMFwAbV5PnvgWJom9VQqs=
Subject key identifier: C2:49:2B:AE:48:CB:57:4C:DB:EB:70:45:2F:21:89:68:B6:CB:84:46
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 459E4452B98712D85771E6F51DBC256605A303AA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210683.roa
Signing time: Fri 10 Apr 2026 17:08:30 +0000
ROA not before: Fri 10 Apr 2026 17:03:30 +0000
ROA not after: Fri 09 Apr 2027 17:08:30 +0000
asID: 210683
IP address blocks: 2a0f:85c1:c1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:9e:44:52:b9:87:12:d8:57:71:e6:f5:1d:bc:25:66:05:a3:03:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 10 17:03:30 2026 GMT
Not After : Apr 9 17:08:30 2027 GMT
Subject: CN=C2492BAE48CB574CDBEB70452F218968B6CB8446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:52:af:ea:21:c7:e8:ef:90:1e:ce:82:25:
36:11:2a:d5:64:fa:79:4b:e2:7c:d3:75:91:23:1e:
de:d2:d8:d4:6d:d9:d7:d9:6f:8e:fe:43:3b:09:38:
f0:5f:07:6b:ae:67:7c:00:af:93:aa:f1:10:91:ab:
16:b4:43:00:e6:b7:b4:77:27:c1:b5:96:c8:5d:01:
25:b1:8a:96:25:52:f4:79:90:54:1d:fb:e4:91:7b:
00:db:0e:86:9c:da:32:43:89:5e:0d:da:4d:03:da:
b3:ac:18:9e:fe:dc:be:de:33:fa:fb:4d:30:d5:e4:
e6:28:79:e2:9b:c8:a1:2f:f6:61:b4:92:17:a3:53:
b4:65:5b:25:86:fa:cc:4c:aa:49:8a:4e:9c:43:b1:
eb:82:9a:69:6f:13:0e:be:9a:9e:8c:4f:bb:1d:ce:
8b:9b:36:32:db:ed:d9:4a:ea:db:2b:b1:5c:f2:7d:
73:21:1a:73:98:34:e1:cc:26:d7:78:95:07:cb:8b:
b9:a6:5e:fb:be:e1:cd:d0:26:90:39:56:d3:b4:a1:
fb:5e:b8:cf:48:17:ce:0e:51:19:e9:96:dd:c3:ac:
59:58:fc:6b:5e:b5:7a:c4:db:7b:d1:66:a1:8c:3f:
d7:a0:7d:40:d2:57:19:4a:59:aa:03:0c:f7:62:d0:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:49:2B:AE:48:CB:57:4C:DB:EB:70:45:2F:21:89:68:B6:CB:84:46
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c1e::/48
Signature Algorithm: sha256WithRSAEncryption
4a:aa:3e:e9:d5:1b:b7:da:45:e4:8d:19:17:3f:c4:21:0f:45:
f9:68:59:b0:f3:a9:a6:5e:5d:d4:fe:d4:18:11:8f:c7:cf:26:
9b:8a:d4:93:b1:9a:93:95:71:35:a1:db:6c:28:60:e1:3c:90:
f7:70:aa:8b:61:68:97:f0:94:32:22:1d:bd:56:85:d8:39:0a:
c0:f8:9d:ce:c3:75:48:a3:b8:ad:a9:95:35:b7:f3:fc:cb:d6:
65:51:57:9c:38:de:5d:6e:79:d1:0b:f2:81:35:a0:0d:6e:02:
09:ca:e6:06:48:b9:05:91:13:98:c0:17:12:22:dd:0a:2d:69:
8d:74:ed:5c:27:f4:a1:b2:75:40:e2:21:84:95:44:1d:a2:e2:
7c:06:89:d5:d0:17:a2:aa:80:6a:95:8c:a6:8d:6c:21:d0:e5:
45:d2:ce:e4:a4:fc:43:81:eb:2d:0c:0f:83:2c:25:de:2d:da:
b1:dd:35:88:21:5c:cf:b3:65:71:f4:c4:3b:f1:62:da:aa:1b:
93:db:50:71:d9:bc:49:53:c1:af:8b:b9:95:ef:52:4c:8b:5b:
04:51:5b:7b:cb:a5:1a:65:53:94:3a:2c:78:bf:43:aa:99:ad:
6b:8d:84:4d:b2:47:6d:bf:bf:7f:53:1d:41:ca:0d:7f:da:f7:
80:c5:73:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:10:44 2026 by rpki-client