Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: OAlVcKVxngtPS+jXPA648VHiXivpKfmwvtDfzapP3pI=
Subject key identifier: 28:B4:CA:85:15:46:B2:68:29:87:91:08:69:7A:2A:4F:3F:0D:0F:3B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 76252B449C1373075CA5767EC7E8376D46C140C0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
Signing time: Mon 27 Jul 2026 12:13:05 +0000
ROA not before: Mon 27 Jul 2026 12:08:05 +0000
ROA not after: Mon 26 Jul 2027 12:13:05 +0000
asID: 214432
IP address blocks: 168.222.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:25:2b:44:9c:13:73:07:5c:a5:76:7e:c7:e8:37:6d:46:c1:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 27 12:08:05 2026 GMT
Not After : Jul 26 12:13:05 2027 GMT
Subject: CN=28B4CA851546B26829879108697A2A4F3F0D0F3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:e1:0a:d4:24:55:48:11:c6:19:ba:a1:24:
29:35:ef:f8:2d:93:02:3d:ce:c1:06:f5:e6:18:cf:
24:81:8e:db:81:30:80:2d:5a:84:88:59:03:ba:fb:
58:4a:5d:ca:65:e8:03:e9:7c:28:f3:bd:33:60:0f:
47:52:c4:96:30:74:50:04:2f:32:2d:aa:42:68:82:
d4:75:c6:5e:46:f4:db:4d:78:34:b7:33:24:e8:81:
40:b6:5c:3f:c3:9e:04:3f:11:b9:0f:be:21:ea:ac:
ce:24:7c:50:f4:8c:a0:96:a2:84:fc:4d:52:c7:0f:
9e:0f:4c:07:41:04:fa:b9:a9:49:a2:f3:05:1d:4b:
51:9e:d2:cd:34:7c:41:f2:04:6e:ca:2b:d7:4c:1b:
39:f4:7a:8b:25:29:2a:f9:d4:f4:97:68:06:e1:24:
03:b0:9e:6b:f9:21:4b:0e:59:86:41:b6:4c:63:c3:
f0:ba:98:dd:6a:3a:f9:c0:07:e8:f4:f6:0c:81:90:
2e:9f:30:fb:07:14:b6:b1:25:a9:83:98:93:47:56:
49:4b:7b:b8:1e:2b:96:3c:e1:37:70:90:bf:3e:64:
cd:08:92:94:e9:7f:dd:8a:90:31:fe:6e:25:ef:8c:
20:7b:47:eb:23:c2:80:68:ab:33:95:3a:b5:1f:15:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B4:CA:85:15:46:B2:68:29:87:91:08:69:7A:2A:4F:3F:0D:0F:3B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.41.0/24
Signature Algorithm: sha256WithRSAEncryption
17:4f:62:78:2b:15:9e:22:3a:06:ce:53:26:ac:ad:4f:79:ea:
d5:f5:27:a3:44:53:03:fe:67:8c:ac:7f:1b:61:c7:59:11:da:
88:9d:93:78:94:64:1b:46:d6:61:a5:e4:f4:c8:a6:b5:88:1d:
c5:93:e8:a5:de:5d:f2:c1:b2:a8:c0:5d:49:73:69:55:80:d6:
35:b0:34:13:c2:92:17:79:7a:e7:6a:40:2f:31:c1:59:50:97:
c8:63:96:84:8c:3d:34:69:ae:a6:dd:f3:df:19:f7:14:87:c8:
04:ef:e8:be:22:83:36:4e:9a:50:0e:90:1a:1c:72:98:8d:e7:
5d:b3:35:2a:e7:2e:ec:86:6c:cb:46:2b:6c:09:c9:29:5d:3e:
94:40:d8:55:5a:4c:76:3c:3d:e6:15:7c:a1:21:90:81:da:53:
22:26:6b:db:0e:ff:00:b8:32:6e:38:2f:0c:d2:4c:86:97:4e:
a1:78:30:2b:f4:8d:88:29:a0:ff:f7:53:8f:6a:68:f0:4a:00:
46:83:5b:e2:b7:4c:6a:dd:a6:61:7b:a6:ac:38:fe:84:9e:80:
0e:75:dc:ad:e3:f9:eb:b9:41:c1:95:09:7f:f5:30:7d:75:7e:
e7:4f:4b:58:a0:7d:93:29:41:70:60:f8:f6:a9:d8:34:68:e1:
2b:9f:6d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:00:38 2026 by rpki-client