Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210940.roa
File: AS210940.roa (raw, json)
Hash identifier: VWB295H++1Dlb2qnCBZmKJMR2JTufUU1n+HqwboFspg=
Subject key identifier: 14:BE:2B:D4:CF:1F:15:22:38:4D:CD:93:73:95:76:21:17:39:16:21
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4091C98B035EA14BB17B1080AD09FFC267EBEFEF
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210940.roa
Signing time: Sun 22 Feb 2026 20:05:28 +0000
ROA not before: Sun 22 Feb 2026 20:00:28 +0000
ROA not after: Sun 21 Feb 2027 20:05:28 +0000
asID: 210940
IP address blocks: 2a14:7580:ff10::/44 maxlen: 48
2a14:7580:ff20::/44 maxlen: 48
2a14:7580:ff20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:91:c9:8b:03:5e:a1:4b:b1:7b:10:80:ad:09:ff:c2:67:eb:ef:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 22 20:00:28 2026 GMT
Not After : Feb 21 20:05:28 2027 GMT
Subject: CN=14BE2BD4CF1F1522384DCD937395762117391621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:05:ea:7c:67:1e:54:3c:06:35:51:ba:61:
55:d5:3b:3c:0a:02:24:70:2c:db:f2:7c:b0:ed:10:
15:b1:ff:a2:e2:cf:79:7a:d5:50:ec:46:3c:c2:d9:
be:90:c6:63:a7:58:10:22:d7:88:c2:c3:a2:a1:ab:
8d:b2:01:db:0e:0c:9f:6f:74:00:1c:a0:c7:22:f8:
57:72:2a:20:b7:49:26:eb:b5:55:65:a2:97:f4:47:
32:ff:0b:55:57:86:c2:2b:dd:2d:9c:5f:f8:dd:3b:
45:4d:c9:9e:df:12:af:f1:0a:a8:0f:36:62:f7:05:
03:28:f7:3b:76:e0:5d:27:25:42:57:6e:ee:12:40:
95:4c:60:45:66:a1:cf:3c:68:33:c5:8e:f8:06:8a:
b9:d5:38:00:1c:62:6b:0d:92:2d:0e:c6:70:00:18:
b9:cb:55:77:9e:ce:20:20:fe:8e:8d:5d:10:a5:d0:
80:e5:1f:f6:14:66:46:6a:5f:fc:bb:6d:8b:5c:fc:
c9:64:fb:c8:ee:79:26:dc:e0:2e:a8:6b:43:e7:95:
2d:09:4d:ac:c8:ff:cc:b7:57:74:76:48:2f:2c:43:
33:3c:35:5c:35:bf:69:0f:a6:6c:c5:fa:0a:e6:f1:
61:26:61:bd:1c:83:3a:9f:13:9b:89:84:1e:f9:46:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BE:2B:D4:CF:1F:15:22:38:4D:CD:93:73:95:76:21:17:39:16:21
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210940.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff10::-2a14:7580:ff2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
88:aa:08:fe:c3:e1:9f:2d:6a:92:76:cf:9c:02:97:54:f7:77:
9b:dd:88:2f:51:f2:55:16:20:93:13:5b:64:72:4d:43:22:f8:
a2:d0:df:b2:28:31:c3:bc:b2:46:fd:6b:1c:f1:c2:67:04:87:
54:60:8d:f8:39:7f:55:a1:bf:33:19:0f:49:06:fc:3b:fe:32:
7e:e1:ab:05:fe:df:9b:9a:23:c1:ed:b8:d8:96:72:23:40:56:
8f:a7:a8:cf:eb:8b:4a:97:83:31:3d:28:24:2f:86:46:ce:99:
de:b6:1c:2a:35:dc:b8:da:c8:81:28:5e:71:bd:6f:b1:cc:97:
ad:7f:a8:e6:21:8e:9a:29:14:c5:dd:c4:81:74:58:25:4a:a3:
b2:6e:8c:41:a5:a3:fd:dd:16:d3:e5:de:5b:d4:4b:e3:f3:da:
20:7f:b8:e7:78:93:84:c6:bb:93:54:34:63:e9:0f:d6:e7:a9:
07:66:91:6d:a6:6d:fc:8d:c0:09:24:ae:a4:d9:17:64:0f:0f:
bd:7c:40:9f:96:3e:ba:fd:cb:f3:1e:3d:f7:27:b6:22:58:f9:
26:2e:82:53:ab:04:33:c6:53:f5:0c:93:5a:9d:78:0e:71:d5:
1c:f3:f4:7c:c7:d7:1c:a0:03:df:5a:4b:30:16:71:f6:4a:4b:
17:0d:cd:7e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUQJHJiwNeoUuxexCArQn/wmfr7+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjAyMjIyMDAwMjhaFw0yNzAyMjEyMDA1MjhaMDMxMTAvBgNV
BAMTKDE0QkUyQkQ0Q0YxRjE1MjIzODREQ0Q5MzczOTU3NjIxMTczOTE2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyAXqfGceVDwGNVG6YVXVOzwK
AiRwLNvyfLDtEBWx/6Liz3l61VDsRjzC2b6QxmOnWBAi14jCw6Khq42yAdsODJ9v
dAAcoMci+FdyKiC3SSbrtVVlopf0RzL/C1VXhsIr3S2cX/jdO0VNyZ7fEq/xCqgP
NmL3BQMo9zt24F0nJUJXbu4SQJVMYEVmoc88aDPFjvgGirnVOAAcYmsNki0OxnAA
GLnLVXeeziAg/o6NXRCl0IDlH/YUZkZqX/y7bYtc/Mlk+8jueSbc4C6oa0PnlS0J
TazI/8y3V3R2SC8sQzM8NVw1v2kPpmzF+grm8WEmYb0cgzqfE5uJhB75RuX7AgMB
AAGjggIYMIICFDAdBgNVHQ4EFgQUFL4r1M8fFSI4Tc2Tc5V2IRc5FiEwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEwOTQwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQq
FHWA/xADBwQqFHWA/yAwDQYJKoZIhvcNAQELBQADggEBAIiqCP7D4Z8tapJ2z5wC
l1T3d5vdiC9R8lUWIJMTW2RyTUMi+KLQ37IoMcO8skb9axzxwmcEh1Rgjfg5f1Wh
vzMZD0kG/Dv+Mn7hqwX+35uaI8HtuNiWciNAVo+nqM/ri0qXgzE9KCQvhkbOmd62
HCo13LjayIEoXnG9b7HMl61/qOYhjpopFMXdxIF0WCVKo7JujEGlo/3dFtPl3lvU
S+Pz2iB/uOd4k4TGu5NUNGPpD9bnqQdmkW2mbfyNwAkkrqTZF2QPD718QJ+WPrr9
y/MePfcntiJY+SYuglOrBDPGU/UMk1qdeA5x1Rzz9HzH1xygA99aSzAWcfZKSxcN
zX4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:51 2026 by rpki-client