Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: dsXhjJD5FsAkwi7CcrshWuu9YCzIPxrJclsqb0ghQZ0=
Subject key identifier: 7E:21:07:AE:CA:9D:93:35:34:86:0D:08:1A:0D:E2:68:D6:70:A5:6C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4F6979D99A2E5CE52BA01AA69653F6B0AA0D26E2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS10753.roa
Signing time: Wed 16 Sep 2026 08:08:56 +0000
ROA not before: Wed 16 Sep 2026 08:03:56 +0000
ROA not after: Wed 15 Sep 2027 08:08:56 +0000
asID: 10753
IP address blocks: 188.221.204.0/24 maxlen: 24
188.221.207.0/24 maxlen: 24
188.221.208.0/24 maxlen: 24
188.221.209.0/24 maxlen: 24
188.221.211.0/24 maxlen: 24
188.221.215.0/24 maxlen: 24
188.221.220.0/24 maxlen: 24
188.221.222.0/24 maxlen: 24
188.221.224.0/24 maxlen: 24
188.221.226.0/24 maxlen: 24
188.221.229.0/24 maxlen: 24
188.221.237.0/24 maxlen: 24
188.221.241.0/24 maxlen: 24
188.221.242.0/24 maxlen: 24
188.221.245.0/24 maxlen: 24
188.221.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:69:79:d9:9a:2e:5c:e5:2b:a0:1a:a6:96:53:f6:b0:aa:0d:26:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 16 08:03:56 2026 GMT
Not After : Sep 15 08:08:56 2027 GMT
Subject: CN=7E2107AECA9D933534860D081A0DE268D670A56C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:98:4c:4d:81:46:5b:e8:b4:02:74:73:e7:
a0:01:7a:9b:12:ca:e7:88:a2:48:24:b5:a1:65:19:
f9:d7:e6:d9:f2:6d:3c:d3:81:b0:c5:be:1b:63:f4:
70:51:d2:2a:09:00:be:11:62:7f:5f:47:9a:d9:19:
95:65:41:8e:f6:08:2d:4e:88:cd:92:6c:76:8b:fd:
2d:84:7a:77:fd:13:97:d0:fd:fc:89:32:57:81:e5:
13:aa:11:6b:96:d2:09:99:cf:c6:42:fb:ba:dd:75:
cd:f2:6d:b0:72:c7:fa:7c:e9:62:d0:22:9a:bd:d2:
34:d3:22:b1:40:79:55:57:8b:54:2a:4e:6a:26:28:
c9:9b:0f:ff:e9:22:1d:01:22:20:f1:cd:7a:08:3c:
3b:27:92:83:7b:d2:67:60:76:ed:96:ab:6c:75:c5:
21:5c:95:de:f4:ed:e8:3e:e7:a5:70:cd:c3:11:c9:
a5:7d:15:a4:0d:ab:54:5c:29:c4:85:ab:4a:fb:ab:
ba:ff:4b:fb:ce:4f:e5:6b:4f:6a:6d:2b:40:a0:dc:
35:fd:81:ca:ca:e7:d2:e0:8d:84:a0:ef:4f:ee:6c:
78:93:b1:a3:ef:eb:6b:40:51:88:55:cb:07:df:53:
47:18:fb:b3:14:01:48:70:d6:a5:b4:8e:53:aa:55:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:21:07:AE:CA:9D:93:35:34:86:0D:08:1A:0D:E2:68:D6:70:A5:6C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.204.0/24
188.221.207.0-188.221.209.255
188.221.211.0/24
188.221.215.0/24
188.221.220.0/24
188.221.222.0/24
188.221.224.0/24
188.221.226.0/24
188.221.229.0/24
188.221.237.0/24
188.221.241.0-188.221.242.255
188.221.245.0/24
188.221.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b7:ca:f0:72:70:a4:65:d5:ba:2a:6c:fc:64:52:41:8b:87:
18:6a:be:3d:80:e5:4b:32:05:6b:95:9d:8f:38:50:f3:77:97:
8e:2a:61:de:32:2a:98:cf:ac:bf:83:3e:10:f8:70:3a:0d:52:
a6:66:c6:25:9c:53:22:ed:bb:e3:53:f9:8e:0b:d1:05:da:44:
b4:15:c3:f1:e7:d1:9e:0d:d8:6c:cf:2a:d0:4d:df:0c:43:7d:
19:95:6b:5a:c2:9d:5f:80:f1:93:e5:7d:4b:eb:ee:d7:ac:58:
20:9c:e6:a4:48:a7:75:7b:78:95:f3:31:c4:e0:52:2e:97:f7:
cd:72:44:05:49:5d:e3:e6:15:29:f7:f8:78:f6:a7:0d:08:31:
89:bd:75:ee:d3:b5:9c:cf:2b:6e:5f:56:79:e8:7b:de:fa:fc:
ca:81:8c:6a:e5:ea:3e:ce:43:aa:52:9c:a3:93:25:f1:83:84:
c9:c4:91:1d:40:19:9e:8c:62:45:29:44:49:0a:03:2c:81:0c:
7f:dd:90:fa:92:fa:cd:9c:df:82:31:23:bb:c2:68:4e:3e:d1:
01:cf:00:32:ed:c2:52:66:3a:09:8f:14:bb:da:f2:44:d0:5c:
7d:d1:c3:d2:41:20:dd:71:9f:8a:05:61:8e:51:04:88:4c:bd:
12:f6:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:58 2026 by rpki-client