Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214677.roa
File: AS214677.roa (raw, json)
Hash identifier: L7jgtknTRsG0XSFeDplH33dcw5CqpJbxzN9k1GUa768=
Subject key identifier: 9A:7D:79:87:9A:1E:4B:9F:7E:6E:70:87:38:9E:C6:26:A3:99:F8:C5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2CDA3EA2CBF9FABFCEB353C60C4C39B248147B6F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214677.roa
Signing time: Sat 28 Feb 2026 15:27:43 +0000
ROA not before: Sat 28 Feb 2026 15:22:43 +0000
ROA not after: Sat 27 Feb 2027 15:27:43 +0000
asID: 214677
IP address blocks: 96.62.250.0/24 maxlen: 24
148.135.207.0/24 maxlen: 24
162.141.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:da:3e:a2:cb:f9:fa:bf:ce:b3:53:c6:0c:4c:39:b2:48:14:7b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 28 15:22:43 2026 GMT
Not After : Feb 27 15:27:43 2027 GMT
Subject: CN=9A7D79879A1E4B9F7E6E7087389EC626A399F8C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:10:64:ae:33:f8:52:e2:57:69:a7:a5:09:
0e:70:20:e5:39:15:79:e3:c7:32:94:cf:7d:90:3e:
05:6d:58:ca:6e:33:61:80:fc:10:4e:b4:59:74:e7:
58:e3:af:1d:fc:e1:08:b1:89:26:2d:9a:73:cb:24:
f4:b9:bc:27:96:74:ac:68:54:cf:55:1d:e9:38:7d:
9d:e1:92:38:24:33:60:9c:b1:95:0d:12:cf:80:cb:
5b:69:55:9c:1b:c5:94:5e:00:5b:c0:5f:42:56:f3:
b2:b8:de:48:52:68:cb:5d:cf:52:2d:09:92:dc:28:
3e:84:19:45:3f:90:6c:37:d6:8d:12:ea:99:b0:1a:
b6:2e:4b:78:9a:a2:d7:bc:ef:c7:fe:60:fd:c3:08:
b9:f6:00:a2:08:4d:32:9f:e7:45:b7:1e:99:62:6e:
1c:fc:1d:73:79:6f:53:cf:34:15:c1:fc:e0:94:ec:
e2:5b:d9:ed:3e:c3:f7:01:69:bd:6e:15:d0:72:3f:
cf:7e:c8:4f:98:35:2e:b4:2c:23:e8:55:52:28:6f:
e8:18:30:47:56:79:be:20:b0:9b:83:66:bf:28:83:
28:1c:17:27:fb:d0:35:8f:5a:71:a6:f7:56:61:4a:
72:5a:8e:96:cf:c1:00:a4:04:de:93:3c:77:a0:2f:
42:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7D:79:87:9A:1E:4B:9F:7E:6E:70:87:38:9E:C6:26:A3:99:F8:C5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.250.0/24
148.135.207.0/24
162.141.92.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e0:d3:a0:d5:77:71:61:cd:86:53:f8:b1:c3:44:a8:8e:b0:
5d:70:85:ce:37:ef:d6:11:f1:86:b6:2e:81:60:75:af:79:df:
ce:c5:d1:60:e6:d4:33:a9:78:2e:dc:d8:56:f9:24:02:01:57:
c6:78:a5:91:99:09:46:15:fc:b4:70:aa:5a:2b:64:c0:de:a1:
1c:4b:e4:0e:5a:3c:a1:7d:ca:e5:ea:d1:7b:65:06:66:f7:78:
5f:ee:99:5a:73:2a:a3:9c:49:44:77:9f:55:f3:49:a2:f2:47:
3b:dd:4e:30:84:a3:c1:8a:ec:03:1c:4c:be:af:25:1c:d2:fa:
e1:68:99:b6:7f:a1:24:9d:28:d5:2d:80:a5:01:03:95:ff:55:
91:c3:4e:97:8f:e5:4c:f0:bf:8d:57:74:ee:ae:10:52:9d:42:
11:6e:17:47:1d:f5:af:81:ae:ff:38:93:8f:32:04:c3:90:ac:
96:e5:45:0b:ce:27:72:34:cb:77:7b:8f:61:1c:f6:24:ad:04:
fc:6d:62:80:0f:82:b0:ad:63:c7:6d:20:d5:1e:9b:68:ce:00:
8c:39:2d:ef:dc:8e:2c:79:c6:20:7b:96:51:f7:ce:9c:3d:7d:
70:f7:6e:9d:85:38:6a:b1:5d:c9:d2:c1:99:2e:2a:44:4e:70:
10:93:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:44 2026 by rpki-client