Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214677.roa
File: AS214677.roa (raw, json)
Hash identifier: /6wUxGv2YFSQn7yz/CY/4w7v59+nX7px2aoRAcwwY88=
Subject key identifier: F9:CC:9A:32:0B:75:3D:9D:49:DA:07:F3:00:4C:37:04:FC:6F:E9:8A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1BC79597B60DF75849EB67390C964715FB2BBF1B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214677.roa
Signing time: Sun 02 Nov 2025 16:02:31 +0000
ROA not before: Sun 02 Nov 2025 15:57:31 +0000
ROA not after: Sun 01 Nov 2026 16:02:31 +0000
asID: 214677
IP address blocks: 148.135.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c7:95:97:b6:0d:f7:58:49:eb:67:39:0c:96:47:15:fb:2b:bf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 2 15:57:31 2025 GMT
Not After : Nov 1 16:02:31 2026 GMT
Subject: CN=F9CC9A320B753D9D49DA07F3004C3704FC6FE98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:3d:cb:96:c0:ef:63:36:61:b2:bd:da:57:
db:29:b5:fe:db:e4:b4:67:6b:e8:c3:b9:f8:95:03:
78:c1:e4:6a:f2:7b:5d:61:d0:45:9e:d4:d3:bc:36:
25:b5:38:26:3f:17:e6:e9:d0:87:90:fd:70:d4:5b:
63:7f:e2:12:cd:93:67:6c:f4:8e:eb:45:d8:38:75:
c0:ba:18:e9:75:6f:18:54:59:15:fb:29:73:5f:2f:
6a:c1:e3:5f:61:81:8d:1c:b6:5a:d8:4d:62:fc:6e:
e0:54:ea:5c:92:f8:a4:00:9b:23:9f:dd:46:0b:33:
fd:62:e4:66:1f:f8:04:86:68:77:13:08:7f:64:f3:
16:2b:22:1e:cb:96:3b:50:e7:e7:17:9a:4f:31:f6:
08:4e:b2:94:64:1c:c0:1e:2c:2b:4f:ed:69:f2:89:
11:17:01:9f:7d:16:35:8e:31:45:5e:dd:db:d4:d4:
6c:f0:e5:42:2b:c1:28:20:e3:13:59:85:af:b7:fe:
e1:a8:d5:5f:3b:1b:cf:79:08:f2:ce:82:72:80:38:
33:98:8e:5c:8d:e0:6e:c6:62:0a:43:ed:6b:f8:7e:
fe:bd:b4:1c:23:ee:7a:82:bd:de:95:27:cb:f2:66:
7a:eb:bc:74:cb:d5:df:69:72:14:08:ce:06:6a:48:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CC:9A:32:0B:75:3D:9D:49:DA:07:F3:00:4C:37:04:FC:6F:E9:8A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.207.0/24
Signature Algorithm: sha256WithRSAEncryption
29:df:f7:07:99:a2:14:96:8b:62:d9:f0:2e:3d:e1:cd:8c:37:
88:bb:c8:39:83:26:ef:ad:2f:eb:58:38:61:a7:7f:d4:bd:34:
1b:11:76:f8:52:07:28:a1:80:a3:45:5a:53:b4:b4:fa:09:e6:
a7:0b:5d:d9:bd:74:ae:bf:8b:10:57:44:03:a3:7b:8e:b5:42:
f2:20:4f:b4:c5:7c:56:7b:9e:95:4e:d4:7b:ad:31:b3:13:6e:
57:4c:4d:f4:20:8f:2a:b2:ab:1c:0e:45:24:ba:f5:b4:bb:7c:
5a:0f:a3:71:76:44:30:8c:d4:4d:6e:3e:0c:79:6d:5d:cb:ea:
01:b4:ed:bd:50:da:cc:ca:18:3f:d8:a5:a8:60:08:b3:95:d8:
2d:11:3f:9f:ec:2e:29:47:b1:cc:56:16:d9:2c:62:b5:3c:a3:
cd:b5:41:8b:20:76:bc:3e:46:d2:bb:33:81:97:1d:88:81:7d:
d0:61:a5:0a:55:94:f3:12:46:d8:cc:9a:e6:82:8d:f1:f2:1f:
34:90:a6:c8:fb:91:e6:a3:5d:f8:5b:eb:c1:4d:3b:c7:b3:96:
bc:1e:31:9b:81:5b:0e:18:9a:26:70:82:1f:c4:5e:d1:5a:ae:
0d:0c:fe:0f:8b:54:f9:9e:ac:c5:5f:23:09:b6:e5:3d:3b:3a:
84:84:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:45:28 2025 by rpki-client