Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214803.roa
File: AS214803.roa (raw, json)
Hash identifier: iz/0Ut1CjOXOUuZIH7gRikUChkfPApwAQ1PDWCbL4tY=
Subject key identifier: 2C:B2:6A:99:B2:6D:CB:29:18:77:F8:B4:3B:36:1A:EF:5D:48:83:EC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 447BA7622812ACA4C3ACE9DF1994F509C037C4B5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214803.roa
Signing time: Fri 03 Apr 2026 09:36:02 +0000
ROA not before: Fri 03 Apr 2026 09:31:02 +0000
ROA not after: Fri 02 Apr 2027 09:36:02 +0000
asID: 214803
IP address blocks: 146.103.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7b:a7:62:28:12:ac:a4:c3:ac:e9:df:19:94:f5:09:c0:37:c4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 3 09:31:02 2026 GMT
Not After : Apr 2 09:36:02 2027 GMT
Subject: CN=2CB26A99B26DCB291877F8B43B361AEF5D4883EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:47:66:d0:58:a7:c0:db:79:37:40:0a:91:
08:78:a2:39:11:a2:ba:8c:59:61:38:da:00:69:75:
1e:a2:5a:f8:bf:b2:28:82:9c:d9:2e:38:11:2e:ab:
1c:44:21:4b:25:67:19:0a:1d:d2:62:73:22:e6:81:
9d:56:35:fd:e1:45:60:97:8f:00:94:64:0e:0d:1d:
1c:c3:e3:4f:9b:ea:97:71:e6:80:19:84:4d:47:61:
69:ff:98:af:41:31:4f:4c:95:d9:22:74:cd:c2:e5:
cf:dc:fb:0f:4c:7b:8e:01:f1:6b:2a:92:5d:34:54:
14:b7:24:cc:2c:89:e3:c5:a2:22:3a:fc:9a:e1:4c:
14:e1:78:41:96:d9:27:ae:b6:f7:ff:4e:5d:90:38:
81:57:95:4d:7d:d2:81:59:0b:10:2d:a8:a0:5f:8f:
2d:d4:32:6d:3c:f1:53:13:09:c2:42:d5:40:1a:09:
69:08:88:8e:b7:08:d7:92:ae:00:20:20:64:93:7a:
60:db:ff:e4:81:90:f5:78:b5:c1:88:5a:45:40:99:
9c:ae:64:d9:67:a1:8e:20:72:d7:94:ba:43:5d:27:
13:81:bd:11:16:ae:b9:ef:60:71:46:32:52:ab:ff:
e8:6f:2e:b6:fc:85:65:50:62:f0:1b:65:cc:ba:6f:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:6A:99:B2:6D:CB:29:18:77:F8:B4:3B:36:1A:EF:5D:48:83:EC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214803.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.24.0/24
Signature Algorithm: sha256WithRSAEncryption
90:fc:5a:d4:f7:bb:25:7b:50:1a:b4:53:4e:c0:e0:26:bf:47:
7a:6e:fa:d0:93:21:50:91:14:5e:fd:01:5b:c0:a5:9d:85:d2:
ef:b0:dd:59:b6:00:24:5f:2c:7c:87:7c:14:41:69:d3:a0:fc:
e1:56:e8:b0:46:5b:ca:a1:d2:9e:a3:ea:fc:ab:42:61:b0:79:
91:02:fc:08:03:d0:dd:92:53:fa:62:b7:6e:8c:79:62:a3:ed:
47:e8:93:29:bb:62:69:04:7f:20:1c:8e:9f:04:66:d1:8c:a2:
89:bf:cc:41:d5:32:76:df:45:e3:b6:61:17:de:04:dc:32:00:
6d:09:25:ce:c5:05:5a:41:ba:c3:90:0f:13:3d:7b:67:5f:4d:
98:96:e8:0d:70:93:87:07:1e:74:f2:b0:76:64:52:7f:05:45:
20:4e:99:47:5a:8d:f1:01:97:a4:94:2a:68:27:92:d3:72:f6:
be:4d:a2:ce:93:e1:f6:06:b9:d1:85:e4:3f:fa:d3:25:b1:c8:
7f:59:27:7a:8f:64:82:51:13:99:30:02:9b:4e:69:23:25:37:
b8:2c:a9:e6:7f:30:a5:21:2c:e3:0d:ef:b3:a1:c2:dd:de:9c:
9b:92:30:10:84:54:81:66:5b:f5:70:2a:2e:66:12:91:9f:66:
5c:1d:cd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:11:30 2026 by rpki-client