Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213134.roa
File: AS213134.roa (raw, json)
Hash identifier: wdsx7hfzdTWV70INgr+3NYT7IFywVPTPswPV+jg9GxI=
Subject key identifier: F6:CC:4B:E0:32:B7:EF:AA:A9:DC:6E:97:EE:5F:E9:B1:0B:D2:46:F4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 69C406BE4672178A9CE3A7EBE669EA5851CF3BE9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213134.roa
Signing time: Fri 13 Feb 2026 12:10:53 +0000
ROA not before: Fri 13 Feb 2026 12:05:53 +0000
ROA not after: Fri 12 Feb 2027 12:10:53 +0000
asID: 213134
IP address blocks: 143.14.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c4:06:be:46:72:17:8a:9c:e3:a7:eb:e6:69:ea:58:51:cf:3b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 13 12:05:53 2026 GMT
Not After : Feb 12 12:10:53 2027 GMT
Subject: CN=F6CC4BE032B7EFAAA9DC6E97EE5FE9B10BD246F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:18:48:4e:5f:83:37:e7:e8:14:b4:8a:ec:
fb:d7:66:e8:ab:81:9e:a8:ae:6f:9d:8b:11:3f:14:
8d:d2:0d:e4:3d:49:b5:73:ed:86:c6:13:9d:2c:4e:
a3:c3:41:d6:b2:17:6e:da:9f:32:62:47:08:64:ae:
16:d9:08:22:7c:c1:d4:66:2c:d4:29:0e:df:2f:68:
aa:01:78:9a:e9:ea:89:d9:eb:1a:9a:41:67:2f:82:
02:e5:33:67:a5:f8:f0:93:47:2b:a2:59:91:04:4a:
cb:9a:c3:4d:2f:a0:12:64:0f:c7:98:50:0a:29:a6:
be:ed:df:00:80:60:85:49:e7:90:27:bb:62:b4:5f:
30:1f:96:87:3f:7c:c8:2b:91:5a:12:30:2a:a5:9b:
ed:c3:83:d4:33:78:ec:a5:17:25:fe:5e:f4:ae:15:
75:10:0d:cc:3f:24:d3:fd:01:5b:fc:8f:e4:6b:84:
4a:d0:1b:ac:29:dd:bc:d4:6b:f3:db:16:eb:16:e6:
68:37:d9:60:c7:88:93:d3:9c:f7:f7:ae:be:aa:08:
d8:e2:0f:0a:2d:fb:99:a5:6b:57:f7:93:c8:33:84:
6c:a4:59:fc:46:ca:d4:5f:bb:24:d7:13:b5:ec:af:
3b:70:54:aa:44:6b:33:f9:6b:7d:00:6d:7b:22:52:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CC:4B:E0:32:B7:EF:AA:A9:DC:6E:97:EE:5F:E9:B1:0B:D2:46:F4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2a:2b:78:c4:bc:3a:74:70:58:f8:d9:e1:d5:67:66:4d:38:
5e:ad:46:e5:5d:8e:4b:7f:d4:68:51:f9:44:93:2f:c5:3d:76:
bc:64:6e:4d:fd:c2:58:31:2c:65:b4:c5:9f:71:b2:c8:fe:09:
49:ab:95:dd:6c:54:0c:d1:6c:ee:6b:bf:b7:45:86:b3:72:02:
76:14:2e:d0:cc:d2:fe:61:62:e0:e2:ba:e6:ef:fc:cb:f9:e8:
af:be:d4:4f:e3:5c:fd:d7:b6:6b:74:2c:6a:f0:5a:67:0f:70:
c2:07:38:33:a2:49:70:ca:69:68:a3:f0:58:3e:a1:c0:0f:29:
82:4c:64:ef:9a:97:95:a7:e2:a3:9b:4f:4f:8a:37:8f:c3:e6:
f9:73:b9:f8:1b:37:c2:98:27:01:b6:88:86:ac:ba:02:5f:06:
7c:49:1c:38:d7:72:b0:dd:1d:e0:d5:f1:4e:62:4f:62:bd:9d:
bd:db:9e:c1:12:73:4a:0a:0a:c6:8a:7d:97:da:c5:09:c9:2d:
44:e9:cb:69:60:3c:d5:89:d4:ac:1b:d8:90:db:71:00:ad:51:
41:9a:2c:6e:13:34:f8:11:22:d5:ae:7f:40:f6:ab:1f:16:52:
64:39:78:77:04:14:e1:f6:3b:c3:a2:ef:4f:e2:7c:62:49:70:
d6:c6:59:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:35:19 2026 by rpki-client