Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210535.roa
File: AS210535.roa (raw, json)
Hash identifier: TM9btvPK07gU+ECJ6FhkSWFeSnTq6zi8lYcYmCYqV+g=
Subject key identifier: 22:D9:D3:88:F7:27:0F:5B:7D:A4:3E:E1:D1:06:17:7E:BE:E5:94:E2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1BB2A912870A3096FDB0F0A9ABD8257403F33AB8
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210535.roa
Signing time: Sun 02 Nov 2025 16:55:11 +0000
ROA not before: Sun 02 Nov 2025 16:50:11 +0000
ROA not after: Sun 01 Nov 2026 16:55:11 +0000
asID: 210535
IP address blocks: 141.11.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b2:a9:12:87:0a:30:96:fd:b0:f0:a9:ab:d8:25:74:03:f3:3a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 2 16:50:11 2025 GMT
Not After : Nov 1 16:55:11 2026 GMT
Subject: CN=22D9D388F7270F5B7DA43EE1D106177EBEE594E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:16:55:9d:28:ac:63:2a:09:22:09:7f:03:
59:2e:9d:9c:b0:f2:d4:7e:d4:69:c9:3e:e0:a9:7d:
26:64:c0:5c:61:81:12:55:d4:27:0e:29:5b:c5:09:
37:82:9f:0d:59:f9:7a:38:82:c0:6e:49:2d:85:e2:
a4:af:00:f4:0e:eb:b6:6c:2b:1e:63:1e:6f:96:41:
f3:92:3f:c1:a3:c7:7a:bc:d5:18:62:b8:d3:c5:4f:
3e:73:29:b3:04:71:ae:ee:54:75:47:61:e1:1e:b7:
19:19:70:ab:4d:62:a2:3d:53:8e:d3:9f:0b:ca:e1:
e2:21:a4:45:00:15:5b:ba:75:d9:5d:a7:9a:13:fa:
62:e6:d2:a7:e3:bc:9d:3f:37:4e:9b:05:c7:5a:61:
d0:e3:21:8e:0b:10:2a:ff:54:47:6e:37:dd:26:c7:
3a:11:66:8a:fb:87:90:10:d7:d1:63:35:45:d8:bd:
0f:50:17:03:6a:9c:11:bf:74:9e:5d:b5:84:61:8b:
75:ec:ad:f3:65:fe:bc:d4:e8:a2:78:59:17:3e:e0:
7a:42:2d:66:57:9c:d0:a2:7d:db:4e:ce:69:8c:88:
b5:40:74:70:6d:e0:9a:6a:b2:3b:9d:2c:55:b7:46:
e3:d3:e4:6b:02:19:26:c5:09:f9:9a:4a:c5:bc:66:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D9:D3:88:F7:27:0F:5B:7D:A4:3E:E1:D1:06:17:7E:BE:E5:94:E2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.165.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:8e:db:5e:4d:c1:9a:bd:74:f8:97:d2:0d:b3:e4:63:c8:eb:
35:13:10:1c:b9:3c:e3:97:9e:9a:21:92:4c:9b:5f:94:3f:a8:
66:73:d8:b7:2c:5c:d5:6f:54:03:5c:a6:49:46:3e:e9:1a:56:
c3:16:2d:5d:9c:36:94:f3:71:a3:4e:88:9e:17:8f:ec:7d:07:
f6:2c:bf:90:78:d7:bc:96:cf:1d:0a:f3:e1:61:25:eb:8e:20:
75:03:99:ed:2e:6d:4f:ba:e2:df:9d:c3:75:b5:05:a4:66:f4:
75:d4:3c:b2:c3:ee:ea:7b:86:54:cb:54:14:7f:05:7c:e3:4a:
48:c5:ad:0c:8c:d6:e5:a2:fd:d7:f4:67:86:ac:3b:25:04:6b:
7b:60:e1:b1:50:00:76:fb:50:5d:c7:b7:16:f2:cd:3d:77:e2:
17:72:b0:8c:d7:3c:2b:29:70:b8:2f:b1:4f:a6:54:6c:14:75:
44:92:41:b2:5c:00:cd:4a:df:2b:fd:d4:50:bb:2a:bd:0f:9a:
fd:12:cd:2b:d2:71:ce:c3:bc:c4:29:7c:45:df:cd:3b:e1:38:
54:4b:4a:30:c7:5f:4b:b9:aa:fb:3d:21:15:23:70:44:af:ba:
8f:d8:3f:b7:9b:a0:4d:dd:fe:1b:8e:93:8f:49:6b:d6:03:72:
cf:82:56:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUG7KpEocKMJb9sPCpq9gldAPzOrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTExMDIxNjUwMTFaFw0yNjExMDExNjU1MTFaMDMxMTAvBgNV
BAMTKDIyRDlEMzg4RjcyNzBGNUI3REE0M0VFMUQxMDYxNzdFQkVFNTk0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPZxZVnSisYyoJIgl/A1kunZyw
8tR+1GnJPuCpfSZkwFxhgRJV1CcOKVvFCTeCnw1Z+Xo4gsBuSS2F4qSvAPQO67Zs
Kx5jHm+WQfOSP8Gjx3q81RhiuNPFTz5zKbMEca7uVHVHYeEetxkZcKtNYqI9U47T
nwvK4eIhpEUAFVu6ddldp5oT+mLm0qfjvJ0/N06bBcdaYdDjIY4LECr/VEduN90m
xzoRZor7h5AQ19FjNUXYvQ9QFwNqnBG/dJ5dtYRhi3XsrfNl/rzU6KJ4WRc+4HpC
LWZXnNCifdtOzmmMiLVAdHBt4JpqsjudLFW3RuPT5GsCGSbFCfmaSsW8ZlUTAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUItnTiPcnD1t9pD7h0QYXfr7llOIwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjEwNTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQul
MA0GCSqGSIb3DQEBCwUAA4IBAQDDjtteTcGavXT4l9INs+RjyOs1ExAcuTzjl56a
IZJMm1+UP6hmc9i3LFzVb1QDXKZJRj7pGlbDFi1dnDaU83GjToieF4/sfQf2LL+Q
eNe8ls8dCvPhYSXrjiB1A5ntLm1PuuLfncN1tQWkZvR11Dyyw+7qe4ZUy1QUfwV8
40pIxa0MjNblov3X9GeGrDslBGt7YOGxUAB2+1Bdx7cW8s09d+IXcrCM1zwrKXC4
L7FPplRsFHVEkkGyXADNSt8r/dRQuyq9D5r9Es0r0nHOw7zEKXxF38074ThUS0ow
x19Luar7PSEVI3BEr7qP2D+3m6BN3f4bjpOPSWvWA3LPglYg
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:32:28 2025 by rpki-client