Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214647.roa
File: AS214647.roa (raw, json)
Hash identifier: p1oC4U4M2ZGC9QVCJ5Aw7lh/KqYUKM5HuhjEsOvjVBM=
Subject key identifier: DA:A6:1D:CC:01:4A:4C:81:F8:66:86:0A:6A:14:B1:15:CD:9F:E2:61
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 72E87C70AF5E9F5CA2CA8A515E163382E1D8F825
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214647.roa
Signing time: Thu 17 Sep 2026 15:24:27 +0000
ROA not before: Thu 17 Sep 2026 15:19:27 +0000
ROA not after: Thu 16 Sep 2027 15:24:27 +0000
asID: 214647
IP address blocks: 143.14.92.0/24 maxlen: 24
143.14.122.0/24 maxlen: 24
150.241.243.0/24 maxlen: 24
155.117.8.0/24 maxlen: 24
155.117.38.0/24 maxlen: 24
155.117.137.0/24 maxlen: 24
167.148.83.0/24 maxlen: 24
168.222.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e8:7c:70:af:5e:9f:5c:a2:ca:8a:51:5e:16:33:82:e1:d8:f8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 17 15:19:27 2026 GMT
Not After : Sep 16 15:24:27 2027 GMT
Subject: CN=DAA61DCC014A4C81F866860A6A14B115CD9FE261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:91:be:66:fd:5a:b3:e1:2b:70:c0:c8:be:
2d:e4:49:16:bd:50:82:77:9b:7e:69:d9:af:47:ae:
11:0d:64:11:58:8a:32:d9:ef:6e:14:b8:d0:0b:97:
a6:8e:8e:5c:1f:d0:43:93:87:e9:20:3e:13:a0:96:
26:32:e5:3b:9f:23:ef:e3:7e:fd:37:7b:ae:fd:69:
79:f0:7a:1a:38:0f:f5:39:f8:0d:2d:78:3c:f2:3b:
93:0f:3f:89:44:64:f7:2a:fd:05:e2:8d:e4:d0:79:
34:75:59:2f:c4:78:f1:df:8c:dc:c0:5e:67:51:52:
dd:eb:ab:b4:7d:d3:e2:27:7b:6c:9e:5d:cb:df:b3:
f4:62:dd:ac:98:76:c4:9f:14:49:70:3c:b0:31:54:
ec:26:59:6b:e8:59:32:8a:a0:7a:c9:da:a6:4e:f1:
57:2d:4b:46:6a:73:68:62:52:5d:ce:21:fe:61:44:
42:d8:35:aa:03:86:77:42:ec:cf:63:e3:f5:f0:8e:
cd:16:4d:62:bc:6f:94:15:40:b9:ee:d6:7f:71:99:
dc:1e:d3:32:a9:8b:c5:25:ba:a7:37:40:17:a5:29:
0d:b1:67:09:56:c1:6c:3b:ec:e6:c2:8c:0d:92:10:
35:36:28:79:d0:6b:f1:15:a8:53:52:8a:e1:c9:5b:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A6:1D:CC:01:4A:4C:81:F8:66:86:0A:6A:14:B1:15:CD:9F:E2:61
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.92.0/24
143.14.122.0/24
150.241.243.0/24
155.117.8.0/24
155.117.38.0/24
155.117.137.0/24
167.148.83.0/24
168.222.69.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9a:24:4e:57:fe:5d:d4:79:1a:6d:05:3b:d3:77:75:5c:6a:
9b:35:84:22:8c:01:00:50:b8:01:4c:17:98:3a:e3:25:69:e3:
dd:c1:b6:fd:da:76:bb:59:8e:ad:26:d3:7b:47:b6:79:1b:e5:
5e:c3:5a:92:c7:59:72:0f:9b:7e:22:42:6d:d4:c1:1d:c8:1d:
d2:75:52:6e:13:c5:f6:ca:42:66:a4:f6:07:2d:6c:4f:a5:3c:
1a:1b:7c:20:97:99:6b:34:f8:1c:e0:f6:97:b8:82:52:2d:c3:
2c:29:84:2d:20:d0:d1:17:2a:d7:59:c1:41:ab:59:e3:57:b6:
fa:c7:b7:cb:74:df:3e:f2:b5:0e:57:8c:5b:13:dc:6f:60:b1:
b4:99:b5:69:d6:18:c0:37:d2:9c:d1:a8:fe:be:b0:a8:0d:dd:
1f:0c:1a:66:30:b1:84:02:05:6c:b1:d9:a8:73:16:47:a1:66:
0e:de:91:97:e5:d5:f0:4a:c6:b0:63:20:6e:60:a8:c6:8e:b6:
df:cb:76:33:bb:d3:97:c7:c6:95:14:a1:e6:b2:50:57:bd:84:
d8:06:8d:68:5a:59:14:ba:29:70:fa:91:78:f7:9c:0a:27:58:
56:9f:64:bf:fc:25:d4:79:bc:1f:a3:3c:66:0b:72:fc:af:b0:
d0:6b:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:59:06 2026 by rpki-client