Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214693.roa
File: AS214693.roa (raw, json)
Hash identifier: 6UqUPuDgaUuTYsMAe4pOqONSywbnVySoDB4ReuWkNrg=
Subject key identifier: ED:61:D2:F8:9F:40:D1:E0:58:28:D6:58:FB:34:36:1A:39:B7:52:29
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 174E642EE7D9CEF722177737D5CFA68DDA5887F8
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214693.roa
Signing time: Mon 05 Oct 2026 08:23:39 +0000
ROA not before: Mon 05 Oct 2026 08:18:39 +0000
ROA not after: Mon 04 Oct 2027 08:23:39 +0000
asID: 214693
IP address blocks: 79.182.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 15:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:4e:64:2e:e7:d9:ce:f7:22:17:77:37:d5:cf:a6:8d:da:58:87:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:18:39 2026 GMT
Not After : Oct 4 08:23:39 2027 GMT
Subject: CN=ED61D2F89F40D1E05828D658FB34361A39B75229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:ba:82:b6:08:90:aa:75:3d:06:40:da:ac:
65:b9:af:6b:70:d1:b9:4e:33:ab:5e:88:8e:f8:6e:
de:9b:5a:05:e6:30:1f:4f:a4:56:3f:c4:d6:98:e6:
19:ea:f5:33:b2:4a:14:de:02:13:e1:bb:6b:77:71:
f8:62:57:df:27:b9:d4:82:81:44:5e:09:42:53:ae:
1b:c5:12:a5:e5:5e:39:9d:a0:4b:a0:8d:66:12:4a:
ed:8a:97:ab:eb:ed:57:65:c6:8d:bf:96:a6:8e:2a:
5f:d6:b0:8f:cb:f7:b9:9e:fb:2b:38:3b:f2:06:56:
81:d1:37:17:4d:c2:03:6d:cf:cc:24:29:e0:9a:56:
38:99:f6:16:8c:46:59:d0:44:eb:0c:ce:0b:c7:9f:
83:bc:1a:ab:6e:63:9a:bf:4d:df:cd:03:eb:20:c2:
d1:57:e0:65:cb:06:6a:46:29:bb:a3:8e:7f:fb:43:
c4:da:9c:09:41:ab:95:b6:09:ac:fc:b7:bb:d1:f1:
1d:5f:63:d5:e0:1f:00:8f:8f:a8:61:f2:bc:10:99:
fa:a2:71:c4:8f:4b:49:68:08:e4:ed:e5:4f:f5:a8:
6b:4c:60:b0:43:14:58:40:ad:22:bb:34:3d:3d:2d:
b0:9c:2f:9a:82:86:ce:db:65:ca:60:4f:5f:10:23:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:61:D2:F8:9F:40:D1:E0:58:28:D6:58:FB:34:36:1A:39:B7:52:29
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS214693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.79.0/24
Signature Algorithm: sha256WithRSAEncryption
14:98:b2:08:88:a8:52:0b:9a:3f:fd:29:e9:b5:a3:19:9c:7f:
c9:e4:a0:e3:7e:01:03:2e:35:a4:e6:c2:44:23:19:d5:b9:c4:
96:2d:3b:d0:66:f5:9c:2b:c4:d9:77:8f:56:11:29:64:e1:97:
42:a4:bc:1b:59:7c:b5:57:2d:e1:56:07:21:de:1d:fc:2c:7c:
94:1d:12:ac:b1:d2:03:74:6d:7f:ae:5e:e6:77:42:a4:bd:d5:
ee:de:d8:09:0d:bb:85:f0:b7:84:5c:82:c8:11:01:99:2a:2f:
03:15:32:4f:7c:ef:bc:78:b8:39:8e:fd:af:00:86:ae:60:3f:
0b:3a:28:11:fe:15:bb:8b:06:ab:93:2c:77:31:59:c9:18:16:
9f:2d:63:f5:34:b4:50:a5:93:55:78:d4:62:2d:5a:78:39:a6:
0f:18:50:25:1b:4e:aa:48:1a:f8:9d:9c:6e:e9:5e:57:64:8c:
fd:26:ee:62:26:51:ba:0c:e7:b9:05:2a:fe:88:10:ad:67:1b:
fa:66:52:a8:23:d3:79:58:47:64:af:b5:1d:cf:7c:9e:92:14:
92:87:89:1f:57:a5:a6:f3:ea:b3:ee:f8:1d:7e:e5:cd:64:47:
be:d3:3e:0c:97:19:ce:18:38:03:ec:58:37:16:f8:28:d1:86:
90:63:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:45:29 2026 by rpki-client