Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214132.roa
File: AS214132.roa (raw, json)
Hash identifier: Rk+NZCA2rBe2CYBr01TeO35Cnkaun8xYAVziDo3Fcm0=
Subject key identifier: BA:A7:20:F8:C9:E2:56:90:D7:2B:B0:74:35:8D:EC:29:B8:9B:AE:79
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 07FE0B04B61744E8254ECA4D01E80ECDCF0807B4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214132.roa
Signing time: Thu 06 Aug 2026 17:49:19 +0000
ROA not before: Thu 06 Aug 2026 17:44:19 +0000
ROA not after: Thu 05 Aug 2027 17:49:19 +0000
asID: 214132
IP address blocks: 185.170.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:fe:0b:04:b6:17:44:e8:25:4e:ca:4d:01:e8:0e:cd:cf:08:07:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 6 17:44:19 2026 GMT
Not After : Aug 5 17:49:19 2027 GMT
Subject: CN=BAA720F8C9E25690D72BB074358DEC29B89BAE79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:0b:e9:10:16:8b:17:1e:5d:cb:af:21:e6:
1a:f7:32:e3:75:df:93:a1:b7:c9:93:76:12:78:23:
2a:27:93:34:20:85:a4:f9:02:6a:87:7a:23:74:36:
cc:7c:66:7c:a9:d8:c4:67:73:37:71:ca:d9:fd:1b:
76:1c:77:b7:5c:df:e6:ba:84:fa:e8:02:84:c8:1d:
3b:d0:a0:c2:87:92:46:05:b0:98:aa:d1:7b:5d:57:
25:69:eb:da:80:47:e2:23:ee:a1:e6:4d:a8:a3:0c:
1e:d4:7a:61:d2:4c:e8:18:a6:21:28:67:ea:bc:70:
7c:a2:4b:73:8b:3f:72:19:d9:98:15:31:42:41:28:
43:b1:2d:4d:38:23:69:3d:4f:a1:7b:1a:6a:29:b8:
6b:1b:30:f4:1d:12:43:ad:10:4f:1e:78:13:80:0e:
5a:39:50:a4:39:c5:05:f0:30:70:81:22:b5:d4:37:
84:72:f4:ee:dc:9c:b2:f2:12:40:3e:ff:b6:a3:20:
d2:35:20:0e:8c:cc:91:cd:aa:26:2d:de:20:58:a9:
b4:72:8e:c3:3e:49:34:0d:f0:3c:90:43:c9:39:f1:
3c:65:82:3b:c5:8e:a0:8f:95:d4:0a:21:f6:34:e0:
29:8d:27:d8:1d:0b:6b:2f:7c:8b:94:70:23:a0:8f:
67:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A7:20:F8:C9:E2:56:90:D7:2B:B0:74:35:8D:EC:29:B8:9B:AE:79
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.59.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8a:40:b1:3b:25:2a:91:5e:b3:86:60:7f:a4:85:09:8d:2a:
e6:3d:ec:21:63:1a:ab:db:60:41:c5:55:7f:d4:be:ae:c3:e5:
54:5c:dc:d8:da:54:e4:cf:8b:b7:64:97:0f:09:42:56:b5:1a:
66:2c:7f:11:39:9b:a0:22:17:e6:c5:ee:f5:c8:31:f9:8a:32:
75:c8:69:0c:c9:81:29:6e:40:ec:89:03:23:dc:2f:d0:a7:77:
ec:0c:5a:d6:e6:83:f8:a6:57:8d:66:d5:9b:26:aa:eb:4c:34:
59:de:61:71:ec:3f:8f:76:e1:71:64:59:b1:ee:40:13:01:ea:
8b:ac:39:15:8f:41:66:83:b3:49:89:78:c2:de:be:f2:47:29:
8d:b9:28:7c:25:4e:c2:d4:2f:5a:f8:2d:7a:cf:31:9f:64:59:
5f:cb:dd:b2:e6:da:8c:11:24:c7:f3:5a:61:42:0c:d6:86:92:
f1:96:ce:14:7a:d6:75:eb:6d:7c:7e:e7:2a:27:6f:a3:49:da:
1e:30:76:71:3f:0f:52:c8:04:60:ed:6a:31:08:c1:36:e1:34:
47:01:e4:c1:d6:e1:44:55:91:bc:41:66:b1:4c:8b:fa:47:7d:
0e:ff:80:70:18:13:c7:09:1f:a8:1a:5f:73:81:6a:30:9d:ba:
92:bc:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:22 2026 by rpki-client