Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214640.roa
File: AS214640.roa (raw, json)
Hash identifier: 6SwVElfj+Thzh3+66R6Y6cHSShYugJFWjuhjD0Jmi1k=
Subject key identifier: 8E:CD:31:FB:6E:CC:88:15:B3:C6:29:68:F4:96:49:FE:F4:92:C8:D4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 56FCCCD7B443122D632352222969C730B5D2212F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214640.roa
Signing time: Mon 16 Feb 2026 05:40:53 +0000
ROA not before: Mon 16 Feb 2026 05:35:53 +0000
ROA not after: Mon 15 Feb 2027 05:40:53 +0000
asID: 214640
IP address blocks: 143.14.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fc:cc:d7:b4:43:12:2d:63:23:52:22:29:69:c7:30:b5:d2:21:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 16 05:35:53 2026 GMT
Not After : Feb 15 05:40:53 2027 GMT
Subject: CN=8ECD31FB6ECC8815B3C62968F49649FEF492C8D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:63:d2:22:46:3c:c4:20:71:39:9a:e9:00:ad:
2e:e6:b1:c3:6e:7b:b9:41:0c:ec:f7:ad:11:29:ce:
e4:4d:59:83:13:68:f0:4c:d2:b2:19:86:4f:c8:a7:
bd:56:ae:7f:0a:82:3e:6b:69:d4:ce:ab:53:30:76:
8f:29:83:fc:cc:fa:3c:45:c1:c7:6c:3c:ec:43:07:
53:a5:e7:1e:d7:6c:92:3b:cd:29:08:0b:b4:02:7f:
3c:de:aa:ce:a7:c0:a7:33:d0:41:1e:40:43:87:09:
97:16:01:94:82:de:2a:9f:ea:64:ef:64:33:a7:f1:
eb:b7:c3:ed:3d:e2:44:a9:4b:c9:6c:86:49:28:1e:
73:be:ba:eb:33:43:1a:a2:3c:73:60:a1:b5:1e:fd:
0d:d9:32:4c:aa:6f:4d:19:fc:83:9b:9b:00:71:37:
0d:66:b1:0c:a7:f8:57:11:9d:bb:31:3c:2c:c7:b4:
62:70:b9:5d:95:df:27:71:36:17:f8:4d:af:6d:ee:
cc:38:3a:0f:a8:47:d9:9c:40:e0:ab:99:65:86:7e:
a6:cd:97:90:37:7c:54:54:58:9b:1a:02:33:b8:43:
8a:a4:9d:b7:7f:80:b3:c7:3c:9d:3c:e8:c0:34:71:
13:e2:8f:c1:8e:c7:17:0b:00:d4:39:7c:5e:5d:69:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CD:31:FB:6E:CC:88:15:B3:C6:29:68:F4:96:49:FE:F4:92:C8:D4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214640.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:05:65:92:66:9c:cc:b9:df:ad:5b:f3:03:1a:ed:0b:2e:6b:
33:25:5f:83:9c:db:61:8a:e0:ca:e0:eb:85:f2:2e:da:8f:b3:
8e:75:c4:d8:4f:85:27:4a:df:1d:5c:c1:98:56:fd:ea:ea:3d:
a3:4d:95:91:9b:c1:95:68:b7:4c:53:15:27:1d:a1:7c:3a:97:
b4:c6:c6:b7:8c:49:67:39:68:fc:6b:b1:cf:44:af:dc:c4:a2:
d5:7a:36:ef:1f:69:33:3d:bb:43:91:7d:06:59:5d:d1:b6:a6:
a0:fa:1c:01:62:95:20:83:98:5c:83:cf:8b:5f:97:45:63:b2:
e1:62:06:87:29:bb:03:a5:21:ca:8d:4a:f0:f6:38:0d:59:78:
d1:23:4b:37:f3:82:78:5b:14:be:de:f0:e9:73:c3:3d:a4:68:
50:d7:2e:06:7c:64:1e:ef:18:fc:b5:5b:f7:02:1f:da:c6:fe:
5f:b2:72:61:6b:f8:38:ff:79:4c:2e:57:e9:8d:44:a3:de:c2:
5f:c0:4d:e2:72:8b:22:d8:7c:d4:4c:7e:db:9a:1c:7a:f4:e3:
64:ec:5e:9c:5b:45:9a:23:e7:f5:b8:5c:39:f6:6b:bf:05:cb:
a8:75:37:93:19:01:f6:1f:72:f0:52:2d:ae:ab:1e:a3:38:0b:
e8:04:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:48 2026 by rpki-client