Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS214663.roa
File: AS214663.roa (raw, json)
Hash identifier: IgcTAqfwEnnorVaXBfTHiaBAg2zqpzCcInP1lbU8MMY=
Subject key identifier: 74:56:7F:FE:D4:F1:78:E1:FA:67:6A:3D:30:63:24:81:4F:4F:DF:12
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 0CE37F604AA835467459EF3FBB14A19875F22EAB
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS214663.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 214663
IP address blocks: 5.199.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e3:7f:60:4a:a8:35:46:74:59:ef:3f:bb:14:a1:98:75:f2:2e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=74567FFED4F178E1FA676A3D306324814F4FDF12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:a6:ce:cc:df:ce:bb:86:9f:99:85:0b:e0:
ec:c7:3b:f6:90:af:77:61:0a:ce:09:7e:7d:31:a3:
49:ab:5c:10:d2:8b:80:dd:53:70:ed:3d:58:50:03:
83:94:a4:3d:cf:7e:17:69:eb:2e:2b:c1:36:a3:f5:
de:69:82:c1:c1:65:b6:4c:c1:79:9d:df:9d:67:6c:
99:62:1b:fd:10:9b:2b:5c:21:cf:ca:bd:32:c4:21:
64:4c:5f:2f:78:90:f2:a2:47:99:c5:13:0f:11:34:
dd:c7:b9:0e:e2:8e:d5:5d:f9:42:6b:2c:35:00:6f:
03:d0:3c:11:38:ae:62:37:fb:39:7f:ad:eb:ae:af:
29:3f:ff:00:a3:57:e2:35:57:66:28:5d:ec:46:e0:
1b:f4:74:a4:93:1f:8d:76:27:5d:86:15:77:5a:06:
a6:cb:9d:48:ab:8a:26:9c:0f:00:0d:cd:f6:63:93:
e6:ec:26:b3:5a:2c:ac:fa:5d:b8:2b:fe:d8:7d:22:
59:0f:32:50:af:df:35:13:18:96:05:7a:45:7c:8c:
62:ea:cd:7a:20:f3:49:bc:fb:0c:41:d0:3f:2a:4c:
98:3a:40:d6:43:b1:5b:c8:ec:1f:3a:44:8b:bd:d4:
36:05:0e:90:1a:75:92:4b:e5:99:fe:10:47:ff:04:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:56:7F:FE:D4:F1:78:E1:FA:67:6A:3D:30:63:24:81:4F:4F:DF:12
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS214663.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.2.0/24
Signature Algorithm: sha256WithRSAEncryption
03:47:c3:a1:d6:40:49:60:05:c3:e6:1f:17:05:d9:a8:b5:b1:
46:2e:16:37:ce:e0:af:65:f5:c5:fe:0f:ad:25:e0:49:4a:af:
5e:9f:5c:3c:a8:64:78:5d:6d:50:51:7a:26:6c:a1:8d:24:20:
c6:46:6f:c8:af:56:6d:75:55:e7:13:e3:8a:a9:05:da:10:95:
ba:a9:69:a2:b8:48:a4:d3:e7:36:3f:89:ac:7a:ea:12:3c:18:
36:66:99:4f:e2:3f:8f:45:46:39:13:ae:4a:9e:36:e2:50:87:
32:4e:30:dd:df:12:7c:28:95:7b:c5:d7:e9:6a:c7:e5:90:20:
2c:2a:79:1c:c8:64:62:27:bd:35:3e:22:4e:b3:20:5a:d1:05:
13:c6:a8:39:c9:64:68:c8:13:28:1f:c7:e5:bb:10:ea:03:7f:
b3:a2:04:3a:82:91:c4:16:19:f5:fc:b2:3a:41:e9:ad:29:b8:
4c:b1:f0:35:54:f1:79:93:d3:c7:d5:5f:47:85:97:7a:fd:8c:
cd:65:3e:12:4f:b6:17:81:13:22:ba:1c:14:80:17:57:93:a4:
0d:e4:2b:f9:ef:cd:8e:06:a8:31:87:83:28:68:79:8d:8e:88:
e3:64:14:a7:b7:0f:e2:5d:e6:25:9c:b6:bb:92:72:80:de:79:
23:aa:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:38 2026 by rpki-client