Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210622.roa
File: AS210622.roa (raw, json)
Hash identifier: sEg8vhljr2Lq/5cnxAsGQB3QOJ3tdzHYpWrLzpN5CGk=
Subject key identifier: 5D:BD:28:CE:8B:04:E2:91:2D:B4:2C:CE:86:26:C4:72:86:66:DF:D8
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 511156A3C7C51714BD1016EEE494A0011E4F9FA4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210622.roa
Signing time: Thu 05 Feb 2026 09:46:01 +0000
ROA not before: Thu 05 Feb 2026 09:41:01 +0000
ROA not after: Thu 04 Feb 2027 09:46:01 +0000
asID: 210622
IP address blocks: 2a14:7580:ffeb::/48 maxlen: 48
2a14:7583:e200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:11:56:a3:c7:c5:17:14:bd:10:16:ee:e4:94:a0:01:1e:4f:9f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 5 09:41:01 2026 GMT
Not After : Feb 4 09:46:01 2027 GMT
Subject: CN=5DBD28CE8B04E2912DB42CCE8626C4728666DFD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:63:62:14:05:3b:b0:60:4b:0d:08:b0:54:
e9:09:ef:35:2c:05:29:6c:9c:61:1b:ab:1b:96:0e:
80:6f:d8:97:56:a4:a1:12:d4:9f:ef:50:e9:d6:2f:
87:c3:82:f2:9c:03:d5:02:7a:95:26:09:85:82:16:
48:f3:b7:71:4d:e1:98:1c:d4:d5:8c:c5:39:ab:07:
1b:e3:14:e9:54:80:2c:41:93:70:25:59:13:73:84:
1e:7f:90:e9:93:e1:13:56:28:0a:f1:0c:1c:f4:0a:
af:a2:98:22:f8:3d:ee:28:21:b0:30:52:fb:09:0d:
ae:09:80:e8:f0:37:b1:1f:48:22:d3:12:02:5e:9c:
d3:fb:45:c6:f4:14:47:37:1e:54:b5:ca:16:8a:3b:
83:32:f1:a5:3b:28:f3:40:1a:2d:c9:e0:cf:09:ca:
d6:9d:19:53:20:cf:6e:b4:15:97:5b:0b:5f:4b:4d:
d3:54:97:5d:6c:bd:55:eb:19:17:42:19:32:d3:82:
cc:f4:4b:87:01:5d:ed:06:ff:22:3c:59:ee:da:b4:
b3:f8:3e:8a:e0:d3:09:34:1a:3f:84:30:22:29:a3:
1d:26:36:6e:71:6c:2b:20:7e:71:6b:67:40:50:f9:
b5:fb:ec:fa:62:3a:66:fc:a3:bb:37:2a:d2:28:49:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BD:28:CE:8B:04:E2:91:2D:B4:2C:CE:86:26:C4:72:86:66:DF:D8
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210622.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ffeb::/48
2a14:7583:e200::/40
Signature Algorithm: sha256WithRSAEncryption
4d:76:fb:25:4a:3e:82:3e:cd:a4:04:17:2c:0d:35:40:d3:d8:
18:b0:07:d8:81:81:d1:48:32:1d:37:c1:4e:57:53:49:3e:e2:
98:39:cd:5f:05:f4:40:0e:45:43:7c:7a:7f:6e:02:96:6c:ef:
95:0f:9e:7c:84:b2:23:b8:52:da:44:5d:da:80:0e:a3:ae:31:
05:66:ff:a6:2f:84:49:07:1b:6a:08:21:32:d8:41:bd:33:76:
6b:99:90:98:a8:3d:21:9c:0b:60:67:29:98:c5:83:54:d4:dc:
4c:58:06:4c:05:aa:17:88:33:8f:d4:b3:69:95:5c:c1:c3:62:
5b:95:9a:30:20:4a:30:01:8a:0b:99:32:a4:1d:d1:f1:b9:ab:
6e:b9:8b:fa:91:4e:1e:ae:e7:fa:01:59:a4:f5:c4:94:8b:8e:
a4:8f:f9:f3:03:d4:ed:76:77:25:0e:ea:e8:1d:3b:8d:21:98:
8b:d1:4e:77:14:a7:7b:85:2e:2a:27:f7:1f:99:08:77:6e:8d:
0d:a4:44:92:5a:7c:8e:aa:a5:d2:2a:12:e6:b1:6a:c2:be:03:
23:eb:24:5e:69:aa:3d:15:3a:1b:4a:ca:29:9d:48:be:87:02:
a9:5b:c2:b5:57:44:d2:37:c6:ba:99:99:63:28:25:0c:6d:67:
05:4f:9f:55
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUURFWo8fFFxS9EBbu5JSgAR5Pn6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjAyMDUwOTQxMDFaFw0yNzAyMDQwOTQ2MDFaMDMxMTAvBgNV
BAMTKDVEQkQyOENFOEIwNEUyOTEyREI0MkNDRTg2MjZDNDcyODY2NkRGRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfGNiFAU7sGBLDQiwVOkJ7zUs
BSlsnGEbqxuWDoBv2JdWpKES1J/vUOnWL4fDgvKcA9UCepUmCYWCFkjzt3FN4Zgc
1NWMxTmrBxvjFOlUgCxBk3AlWRNzhB5/kOmT4RNWKArxDBz0Cq+imCL4Pe4oIbAw
UvsJDa4JgOjwN7EfSCLTEgJenNP7Rcb0FEc3HlS1yhaKO4My8aU7KPNAGi3J4M8J
ytadGVMgz260FZdbC19LTdNUl11svVXrGRdCGTLTgsz0S4cBXe0G/yI8We7atLP4
Porg0wk0Gj+EMCIpox0mNm5xbCsgfnFrZ0BQ+bX77PpiOmb8o7s3KtIoSRzTAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUXb0ozosE4pEttCzOhibEcoZm39gwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEwNjIyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKhR1
gP/rAwYAKhR1g+IwDQYJKoZIhvcNAQELBQADggEBAE12+yVKPoI+zaQEFywNNUDT
2BiwB9iBgdFIMh03wU5XU0k+4pg5zV8F9EAORUN8en9uApZs75UPnnyEsiO4UtpE
XdqADqOuMQVm/6YvhEkHG2oIITLYQb0zdmuZkJioPSGcC2BnKZjFg1TU3ExYBkwF
qheIM4/Us2mVXMHDYluVmjAgSjABiguZMqQd0fG5q265i/qRTh6u5/oBWaT1xJSL
jqSP+fMD1O12dyUO6ugdO40hmIvRTncUp3uFLion9x+ZCHdujQ2kRJJafI6qpdIq
EuaxasK+AyPrJF5pqj0VOhtKyimdSL6HAqlbwrVXRNI3xrqZmWMoJQxtZwVPn1U=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:52 2026 by rpki-client