Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214143.roa
File: AS214143.roa (raw, json)
Hash identifier: Xj1JV8EfBPiEX3DB03PLZGB/GnoLshxKZgk20MwTUIM=
Subject key identifier: E9:02:5D:39:8E:BE:8A:40:5C:41:AC:4C:F2:2E:72:37:3D:FB:13:AC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 155AF3867B5EF0737C459B917E8B49172AFDD2B0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214143.roa
Signing time: Fri 23 Oct 2026 09:38:43 +0000
ROA not before: Fri 23 Oct 2026 09:33:43 +0000
ROA not after: Fri 22 Oct 2027 09:38:43 +0000
asID: 214143
IP address blocks: 143.14.32.0/24 maxlen: 24
143.14.108.0/24 maxlen: 24
143.14.228.0/24 maxlen: 24
143.14.240.0/24 maxlen: 24
167.148.10.0/24 maxlen: 24
167.148.116.0/24 maxlen: 24
167.148.128.0/24 maxlen: 24
167.148.134.0/24 maxlen: 24
167.148.165.0/24 maxlen: 24
167.148.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:5a:f3:86:7b:5e:f0:73:7c:45:9b:91:7e:8b:49:17:2a:fd:d2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 23 09:33:43 2026 GMT
Not After : Oct 22 09:38:43 2027 GMT
Subject: CN=E9025D398EBE8A405C41AC4CF22E72373DFB13AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:ea:0a:64:a4:63:12:9e:ee:62:2f:7a:59:
68:3b:d9:64:3a:e2:cd:fc:d3:68:1e:70:ce:63:38:
05:22:49:d4:ec:06:97:b5:6a:c4:b9:bc:a8:1d:10:
91:fe:97:69:20:ca:77:ca:05:3f:67:ba:b8:d4:bb:
f2:23:80:02:06:fc:23:88:3a:7c:2b:94:c0:3d:e7:
de:f5:b8:d9:4c:8f:86:87:6d:b1:7e:a2:f3:4d:46:
fd:43:b4:7b:83:a7:39:91:0e:6c:10:f5:4e:6d:6a:
76:76:dc:e0:b3:d2:fe:37:47:5a:47:fd:a3:4d:39:
b6:39:96:ea:c8:cd:ce:d8:12:3d:64:61:6d:20:39:
8e:e4:b6:38:dd:11:ee:26:42:d1:7d:03:ca:f6:18:
ab:1a:dd:79:70:3d:48:0f:de:56:79:32:76:df:9c:
0a:c4:cf:fd:00:9a:d9:71:fd:2d:8a:30:19:2e:23:
99:33:39:3b:45:8a:25:78:c9:a1:31:ee:f2:22:9a:
f6:83:4f:69:3b:b2:49:75:95:67:ff:06:b3:c1:58:
9a:67:dc:fe:7b:5a:cc:f8:f4:18:88:66:ae:5a:d4:
60:b1:62:6b:16:c1:90:83:e6:6a:a3:ae:88:62:8f:
16:7e:57:12:6b:29:59:0b:19:ba:7a:9b:22:cb:ce:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:02:5D:39:8E:BE:8A:40:5C:41:AC:4C:F2:2E:72:37:3D:FB:13:AC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214143.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.32.0/24
143.14.108.0/24
143.14.228.0/24
143.14.240.0/24
167.148.10.0/24
167.148.116.0/24
167.148.128.0/24
167.148.134.0/24
167.148.165.0-167.148.166.255
Signature Algorithm: sha256WithRSAEncryption
58:a4:4c:2d:71:0d:54:9b:55:ac:81:6b:fe:db:06:35:db:91:
f4:ac:e0:de:a6:22:7c:5a:57:c8:e8:3f:69:7a:04:c8:61:9d:
d4:66:e4:aa:95:07:8e:5e:a1:6d:9b:e1:56:8f:69:c4:5b:3a:
66:9f:ca:a5:92:80:ae:6f:8f:ef:9b:b6:ac:7b:b3:69:1d:b2:
e7:17:a1:f4:5b:ec:b8:31:61:d7:a7:51:a0:76:00:25:b8:18:
de:d0:e6:a2:f1:af:50:df:6d:04:0c:e8:f6:5e:9c:76:6f:9f:
1f:80:07:03:15:77:b3:85:fa:7d:80:7b:d2:a9:bb:61:dc:89:
4d:df:b0:5e:64:5b:cf:d6:e2:86:3d:1a:31:b8:57:82:11:e5:
77:e9:22:9a:85:4f:1a:e7:0a:50:3c:ab:ae:d5:33:c1:b0:72:
dd:9d:f2:b2:11:b2:94:07:98:41:c3:d0:20:9d:aa:7b:c3:36:
0b:9f:ab:ad:30:89:d3:13:c7:9c:29:72:89:40:fe:9a:cd:93:
e5:1b:94:d0:f8:f6:eb:0b:cb:e1:af:fa:1f:c1:9a:fc:d1:9d:
d9:4c:b9:18:7f:2d:f6:84:3f:50:23:88:12:fa:b3:6a:b8:b0:
87:2e:98:d4:5e:73:60:d4:38:66:72:2f:62:74:e1:8c:38:4b:
ba:09:d9:62
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUFVrzhnte8HN8RZuRfotJFyr90rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjEwMjMwOTMzNDNaFw0yNzEwMjIwOTM4NDNaMDMxMTAvBgNV
BAMTKEU5MDI1RDM5OEVCRThBNDA1QzQxQUM0Q0YyMkU3MjM3M0RGQjEzQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHOoKZKRjEp7uYi96WWg72WQ6
4s3802gecM5jOAUiSdTsBpe1asS5vKgdEJH+l2kgynfKBT9nurjUu/IjgAIG/COI
OnwrlMA95971uNlMj4aHbbF+ovNNRv1DtHuDpzmRDmwQ9U5tanZ23OCz0v43R1pH
/aNNObY5lurIzc7YEj1kYW0gOY7ktjjdEe4mQtF9A8r2GKsa3XlwPUgP3lZ5Mnbf
nArEz/0Amtlx/S2KMBkuI5kzOTtFiiV4yaEx7vIimvaDT2k7skl1lWf/BrPBWJpn
3P57Wsz49BiIZq5a1GCxYmsWwZCD5mqjrohijxZ+VxJrKVkLGbp6myLLzjVvAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU6QJdOY6+ikBcQaxM8i5yNz37E6wwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE0MTQzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAjw4g
AwQAjw5sAwQAjw7kAwQAjw7wAwQAp5QKAwQAp5R0AwQAp5SAAwQAp5SGMAwDBACn
lKUDBACnlKYwDQYJKoZIhvcNAQELBQADggEBAFikTC1xDVSbVayBa/7bBjXbkfSs
4N6mInxaV8joP2l6BMhhndRm5KqVB45eoW2b4VaPacRbOmafyqWSgK5vj++btqx7
s2kdsucXofRb7LgxYdenUaB2ACW4GN7Q5qLxr1DfbQQM6PZenHZvnx+ABwMVd7OF
+n2Ae9Kpu2HciU3fsF5kW8/W4oY9GjG4V4IR5XfpIpqFTxrnClA8q67VM8Gwct2d
8rIRspQHmEHD0CCdqnvDNgufq60widMTx5wpcolA/prNk+UblND49usLy+Gv+h/B
mvzRndlMuRh/LfaEP1AjiBL6s2q4sIcumNRec2DUOGZyL2J04Yw4S7oJ2WI=
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:15:19 2026 by rpki-client