Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214481.roa
File: AS214481.roa (raw, json)
Hash identifier: y6OYqAUmjo04PMQOZtbnPda5go3ZojdtPh3xKuyDhmo=
Subject key identifier: 89:ED:07:F6:5B:BB:14:C1:3E:12:4E:53:CF:7F:0E:D5:5F:B6:33:9A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 26B81D0774FEECC83BB54C564149C31B0A0F8CC2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214481.roa
Signing time: Wed 04 Feb 2026 18:37:24 +0000
ROA not before: Wed 04 Feb 2026 18:32:24 +0000
ROA not after: Wed 03 Feb 2027 18:37:24 +0000
asID: 214481
IP address blocks: 96.62.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b8:1d:07:74:fe:ec:c8:3b:b5:4c:56:41:49:c3:1b:0a:0f:8c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 4 18:32:24 2026 GMT
Not After : Feb 3 18:37:24 2027 GMT
Subject: CN=89ED07F65BBB14C13E124E53CF7F0ED55FB6339A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:97:63:52:e8:f9:2e:16:b3:1a:35:de:ee:
87:5a:00:f1:57:5a:93:72:1d:89:1a:7f:bb:4c:5e:
9f:84:31:54:84:e8:d5:52:7f:2b:b6:70:b8:6b:55:
bd:d1:f3:1c:90:3d:33:01:11:fc:e6:c5:10:d1:c5:
57:da:53:ac:14:b9:e0:d6:c5:5f:25:91:6b:16:1e:
f1:e8:2d:01:ec:9c:8b:d2:71:20:47:74:f4:4a:46:
45:2b:d5:01:cc:66:e9:34:29:39:3e:66:38:64:ac:
9e:0d:6b:b7:43:e9:f1:65:09:f4:cc:14:1b:06:0e:
49:79:3c:5d:17:b0:ea:61:52:bb:c2:26:e9:db:81:
de:6d:f2:4c:eb:51:9d:f0:c1:f7:44:aa:5e:9e:1b:
0b:4a:a1:80:4e:fb:c3:e6:33:58:44:76:d2:3a:5a:
66:0b:48:95:04:34:fd:ae:b5:4f:f8:03:07:39:e5:
56:a8:85:48:4e:40:04:61:30:bf:2d:a5:46:33:8d:
83:18:39:ae:9d:e0:08:55:05:b5:30:b4:5e:45:f2:
72:de:e9:35:6c:5a:f5:56:48:d3:11:6d:db:b0:cd:
e9:21:d1:ab:d1:29:29:51:b6:68:e4:a7:f6:81:57:
85:84:2b:1d:c8:1d:a1:8c:db:7b:4f:01:f6:42:14:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:ED:07:F6:5B:BB:14:C1:3E:12:4E:53:CF:7F:0E:D5:5F:B6:33:9A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.228.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:aa:c3:c9:17:73:74:92:ae:13:d9:01:28:bf:9d:ab:50:30:
6e:8c:56:1a:44:91:27:17:74:52:92:44:25:b3:43:69:2e:70:
bf:d0:91:1b:ca:2c:77:f7:1b:b2:52:21:54:37:ec:d9:cf:b0:
a9:64:b4:f7:1f:05:ee:d4:eb:3f:65:d3:e8:f3:bb:22:dd:11:
20:d9:80:21:b6:08:df:00:86:09:0a:1c:85:ca:9b:51:dd:80:
d2:53:72:3f:be:3a:14:f6:35:a4:13:85:29:25:7e:41:94:9f:
73:89:f9:f3:7d:e7:1a:1b:43:81:51:b3:5e:52:e9:df:8a:6c:
19:4e:ee:1b:05:20:33:6e:dd:9d:49:80:71:b1:66:d9:20:1f:
96:bb:c4:cc:62:dc:d2:7a:22:e2:7d:db:82:df:c3:01:eb:2c:
a2:8b:8d:76:ed:67:59:d8:81:da:c8:42:83:c4:44:53:f2:5c:
0d:35:af:c6:80:49:c7:6a:a2:f9:e2:24:80:ea:d6:b1:59:7d:
18:85:01:e5:91:e7:86:0f:52:a7:8f:1d:22:bb:05:b4:01:8d:
9d:3e:28:74:0b:9f:c8:31:e3:a9:c9:57:48:8f:2e:a1:2d:e2:
c7:f1:ba:75:b8:e4:f0:13:05:c8:09:3b:7d:52:56:b7:22:fd:
97:92:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:30 2026 by rpki-client