Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214209.roa
File: AS214209.roa (raw, json)
Hash identifier: 4HkUI8+Yy4V7T53D22FJQocGylzCLxm8C1uwOhDxEaI=
Subject key identifier: 95:8D:65:BB:65:3E:34:94:59:CB:38:C3:34:6A:4F:87:C5:2D:CA:1E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4F1BE436304BEB3520D79415F00F96ABC2EB5A98
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214209.roa
Signing time: Mon 27 Jul 2026 20:49:16 +0000
ROA not before: Mon 27 Jul 2026 20:44:16 +0000
ROA not after: Mon 26 Jul 2027 20:49:16 +0000
asID: 214209
IP address blocks: 140.233.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:1b:e4:36:30:4b:eb:35:20:d7:94:15:f0:0f:96:ab:c2:eb:5a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 27 20:44:16 2026 GMT
Not After : Jul 26 20:49:16 2027 GMT
Subject: CN=958D65BB653E349459CB38C3346A4F87C52DCA1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:5a:56:eb:da:6c:55:ed:9a:31:29:f8:62:
72:68:08:27:2c:db:01:a2:6a:b4:8e:83:83:7d:05:
ce:ab:dc:8f:b9:54:f9:d9:6a:fc:8c:da:73:1f:6e:
6a:74:fc:e6:52:a3:1e:6c:60:34:9f:71:6e:56:5b:
fe:e5:2d:f1:3d:d7:0d:6f:ba:d1:ad:b1:69:30:1d:
c5:bc:ba:af:c7:bd:15:ff:8e:ac:6d:c2:4a:ad:b4:
c2:ca:97:e9:7b:3f:7b:66:b4:1c:7d:64:5d:f6:ca:
24:ec:af:f2:e9:d0:58:c1:5e:4a:af:dd:ea:3d:c9:
ae:e7:4c:b2:eb:6b:be:1c:b9:f1:7d:14:a2:da:b1:
11:a8:1a:3f:e2:e3:e7:d3:f1:17:2b:9d:ad:50:9d:
46:55:8d:91:7c:11:fa:da:68:49:59:e5:1f:06:b3:
fa:fe:c7:c4:04:b9:35:b7:1d:02:8c:14:50:30:2a:
a7:4e:f5:42:95:67:db:b5:59:3f:12:0c:26:88:c1:
eb:3d:04:eb:e7:5b:0c:44:f0:52:64:87:73:ef:33:
6f:4b:61:21:3d:98:d7:73:74:4b:4d:c5:38:39:6f:
c2:cd:f8:88:73:ee:2c:10:c3:da:db:c2:37:60:f6:
2a:08:b7:aa:36:b9:e2:97:79:9e:5a:e0:b8:e1:4a:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8D:65:BB:65:3E:34:94:59:CB:38:C3:34:6A:4F:87:C5:2D:CA:1E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214209.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.190.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b6:45:ed:79:fa:f7:02:67:34:e1:b5:26:24:38:ef:3b:8f:
e9:7a:13:1c:92:65:f4:78:9e:fa:9b:73:50:60:3e:26:ba:77:
70:63:44:c1:e2:03:28:09:c1:7e:26:06:f3:37:f3:61:dd:b9:
90:47:e5:df:d0:17:4b:be:e6:f0:f7:62:44:35:cc:1d:9a:b6:
9b:0e:22:6b:20:bd:ca:c6:45:42:81:af:3b:88:15:a2:7b:1b:
db:1d:0b:49:1c:2a:d7:db:17:8b:0a:36:5b:99:74:31:b8:86:
ab:33:03:bd:50:30:7f:2a:48:09:55:12:e1:a0:33:e6:7c:ac:
9b:51:f9:61:96:3a:bc:a6:1c:82:d0:05:f8:ca:cd:62:0a:94:
70:2d:db:fc:11:76:7e:53:f9:43:04:9e:bf:2d:2c:48:5a:5c:
d7:55:25:42:80:40:99:21:fe:b4:3c:eb:89:fc:25:b7:32:3c:
8f:67:20:e9:00:fc:aa:6b:8b:77:3a:5c:d2:25:7b:14:e7:0e:
2f:1f:f6:a1:10:b6:5c:a8:9f:b2:8d:a4:19:3e:f0:20:08:4a:
95:83:cf:41:24:b3:4f:f5:1a:ab:d6:1a:4d:3b:11:55:07:f7:
98:ef:1a:8f:d5:d4:53:58:e9:9e:12:6c:ed:49:62:f6:d2:75:
e7:a5:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:03:43 2026 by rpki-client