Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214669.roa
File: AS214669.roa (raw, json)
Hash identifier: 2jk5DjagwDnozgLxm13X3I2HrT54n7WKVkbHgJrrl8g=
Subject key identifier: BD:36:A3:91:7E:0F:CE:75:4A:5A:6C:F9:ED:19:5F:EE:7C:8C:8D:F5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3B72DE2055BDC7C6C1A9B63454ECCD2F0480CDA0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214669.roa
Signing time: Wed 02 Sep 2026 09:49:32 +0000
ROA not before: Wed 02 Sep 2026 09:44:32 +0000
ROA not after: Wed 01 Sep 2027 09:49:32 +0000
asID: 214669
IP address blocks: 143.14.151.0/24 maxlen: 24
150.241.237.0/24 maxlen: 24
155.117.163.0/24 maxlen: 24
167.148.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:72:de:20:55:bd:c7:c6:c1:a9:b6:34:54:ec:cd:2f:04:80:cd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 2 09:44:32 2026 GMT
Not After : Sep 1 09:49:32 2027 GMT
Subject: CN=BD36A3917E0FCE754A5A6CF9ED195FEE7C8C8DF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:3b:34:da:37:82:a7:35:e2:7a:99:76:8d:
81:f7:8d:a1:83:c2:1f:33:54:76:ae:fc:b8:65:4a:
77:fc:71:fb:35:81:84:c0:cc:07:44:63:8b:bb:be:
ab:dc:45:a6:63:e3:07:89:b6:75:8d:bf:0f:18:84:
e7:f4:87:10:7b:83:9b:74:b4:e4:46:37:b7:17:98:
ab:96:0e:1b:39:8c:4f:be:33:76:26:e3:e0:a5:e5:
e0:06:54:5a:7d:67:13:7d:35:be:bc:72:98:b9:d9:
df:a6:37:05:b6:d3:7b:3b:46:1f:e0:4d:2d:9f:65:
26:52:9f:a9:65:59:08:7f:a1:7b:1b:aa:4e:46:2d:
53:65:9e:5f:9a:92:35:64:68:13:11:de:3b:e4:85:
26:e3:05:fe:ac:4f:24:cc:3a:84:85:f7:4b:94:e3:
f1:96:50:e0:77:41:dd:20:9e:ab:bb:68:b4:f7:10:
a3:fc:69:53:22:e9:b9:8b:a3:38:52:5e:13:f4:27:
1d:76:3e:f8:a7:a2:24:a8:13:a9:74:dd:32:73:8d:
56:f9:e2:58:60:d7:75:ef:5a:49:86:7d:b1:49:ab:
54:9a:73:cd:74:ff:fd:6a:d5:e3:d3:c0:aa:b3:13:
28:15:b1:55:d1:39:a2:11:81:6b:3a:f9:82:f4:82:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:A3:91:7E:0F:CE:75:4A:5A:6C:F9:ED:19:5F:EE:7C:8C:8D:F5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.151.0/24
150.241.237.0/24
155.117.163.0/24
167.148.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:31:20:ce:cd:f1:5c:dc:e3:3a:37:ed:b5:cc:34:be:a7:74:
64:37:5b:aa:e2:cf:53:1d:0e:f1:2c:73:e7:28:7b:af:a1:70:
df:66:14:5a:98:22:2c:20:9b:08:cc:d7:f5:33:d6:95:b6:59:
9e:ef:08:a0:ef:35:fc:02:18:f1:48:ea:91:fa:f3:68:d0:a1:
2b:35:ed:1f:3c:e3:7a:8a:0d:1a:70:4c:cd:2a:47:a6:ab:c6:
e8:e5:5c:d4:fc:e0:7f:cf:43:72:3c:1d:32:e1:77:9e:74:19:
be:ff:5b:67:c6:51:e9:4c:f3:da:ff:00:73:60:2d:97:b7:34:
91:ba:fa:cb:25:1d:55:03:8f:36:8d:f4:d3:e3:fb:c4:69:6c:
24:49:8f:5f:d1:4e:ff:2d:64:58:7c:e8:0e:89:05:70:41:66:
72:6b:9f:72:de:49:8e:d3:ae:f3:c7:52:f2:f2:a4:1a:03:4e:
d2:8b:80:51:6f:6a:69:3f:f4:0b:52:e2:85:6a:cf:01:08:e8:
af:a2:2a:6d:dd:bf:e9:93:b8:6e:4e:3a:b9:d1:a0:5e:ec:22:
0d:3a:76:af:58:f5:8e:64:7f:70:dd:3f:37:a5:3f:85:21:8a:
3f:69:45:35:b4:ea:df:e2:51:c5:c5:2a:25:b1:d6:1a:13:09:
22:39:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:03:28 2026 by rpki-client