Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214208.roa
File: AS214208.roa (raw, json)
Hash identifier: w3v9rRJRFCBoE8QnYIq3/7TLO3PTM8/u2EB7Cc4G2A4=
Subject key identifier: C2:E9:C6:FD:F6:9F:8F:E8:AE:A5:D8:2E:E7:7C:86:C6:08:33:AD:EF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4156F2798450D66C171C9499F3E20A87BFE4B5DB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214208.roa
Signing time: Tue 04 Nov 2025 13:27:25 +0000
ROA not before: Tue 04 Nov 2025 13:22:25 +0000
ROA not after: Tue 03 Nov 2026 13:27:25 +0000
asID: 214208
IP address blocks: 148.135.154.0/24 maxlen: 24
150.241.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:56:f2:79:84:50:d6:6c:17:1c:94:99:f3:e2:0a:87:bf:e4:b5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 4 13:22:25 2025 GMT
Not After : Nov 3 13:27:25 2026 GMT
Subject: CN=C2E9C6FDF69F8FE8AEA5D82EE77C86C60833ADEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e7:7a:dd:fb:04:12:83:9c:d9:bc:87:70:29:
59:91:9c:d4:d3:38:1a:fe:ad:12:7d:5c:e0:18:27:
14:e0:d8:04:ed:f0:6c:66:f3:02:40:55:ad:11:16:
a7:42:bd:b5:7c:87:5a:e8:07:a2:ba:f7:24:c4:fa:
71:a0:3c:ba:6d:71:d2:36:6f:d3:a0:74:8c:be:e2:
78:15:d4:10:bf:3b:9d:9c:65:53:eb:c7:96:ad:bb:
7d:82:06:2b:76:64:0b:fc:0e:13:25:48:b5:8a:45:
3b:9e:b8:ca:17:18:a2:09:af:ac:c3:d2:ef:a5:85:
7a:1a:0d:2b:ba:54:dd:bf:df:c5:03:98:71:f5:58:
ad:7e:1a:cd:88:fc:f3:e2:3f:54:c3:9a:60:be:82:
e6:2f:d8:72:64:22:5b:63:11:88:80:25:be:3a:39:
ce:5d:48:05:06:01:4b:78:37:f6:3f:50:04:80:40:
e3:0b:16:a3:9c:c1:e8:32:48:d9:16:35:ad:22:a5:
fd:22:33:05:b4:c2:8c:8f:6e:c9:14:60:3a:15:51:
0f:5a:0e:98:30:97:29:43:6c:12:1b:08:bb:91:6e:
35:ff:27:b6:5c:68:94:d2:71:24:57:70:f7:8d:85:
ef:d4:41:fc:d1:6d:33:ed:b4:01:ff:49:59:ca:23:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:C6:FD:F6:9F:8F:E8:AE:A5:D8:2E:E7:7C:86:C6:08:33:AD:EF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.154.0/24
150.241.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9c:a5:1c:eb:d8:ba:22:b6:87:44:d1:68:b1:ec:b4:09:0c:
bd:fe:8c:df:be:cc:d8:8f:79:a5:26:c0:6d:7a:24:97:92:56:
7a:90:b8:e5:56:9c:fc:48:75:02:f2:06:37:72:92:53:19:13:
ff:b1:77:5d:11:e4:d4:05:29:e1:41:32:a2:57:3d:57:b4:f6:
24:e6:ab:e2:b1:ff:f6:f6:64:f7:68:7c:34:fa:32:9f:7a:d3:
13:70:78:ff:15:c7:b9:e2:57:45:57:b5:15:d4:f7:41:45:59:
c0:4b:6c:29:23:06:6c:05:d2:7d:1a:32:6e:74:65:96:dc:93:
d2:31:3b:41:77:31:50:bd:09:ae:49:1d:dd:74:7d:57:f5:64:
14:78:60:95:e9:26:0f:37:d5:01:67:62:17:3a:91:14:1d:a2:
21:23:cc:64:cb:8d:b7:05:35:37:4a:65:ad:65:cf:7e:cb:ad:
c7:23:ec:8d:af:42:4b:4a:99:87:95:88:e6:1e:99:88:1c:f5:
49:4d:a7:eb:28:da:ea:37:b0:94:dd:78:84:76:1a:f7:e3:1b:
bd:9f:68:60:32:72:b4:83:71:b1:c3:67:7d:f9:65:af:60:aa:
f3:02:78:d2:d1:46:68:b8:e2:41:ac:b3:40:a7:b0:b5:07:73:
1b:c8:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:31 2025 by rpki-client