Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214326.roa
File: AS214326.roa (raw, json)
Hash identifier: VQIedbZpfQN1lccD+3etH4/lf3O3kJrOpH+QN47flpk=
Subject key identifier: 9F:DE:5B:FC:95:49:74:8E:E6:68:45:F3:2A:A6:EF:20:CD:E3:14:A9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 163181523FA300BA974E1D013559856738562467
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214326.roa
Signing time: Tue 04 Aug 2026 16:49:19 +0000
ROA not before: Tue 04 Aug 2026 16:44:19 +0000
ROA not after: Tue 03 Aug 2027 16:49:19 +0000
asID: 214326
IP address blocks: 179.61.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:31:81:52:3f:a3:00:ba:97:4e:1d:01:35:59:85:67:38:56:24:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 4 16:44:19 2026 GMT
Not After : Aug 3 16:49:19 2027 GMT
Subject: CN=9FDE5BFC9549748EE66845F32AA6EF20CDE314A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:16:ef:b1:1f:1d:e0:da:fc:45:4b:a2:7a:
05:2d:b0:28:fe:af:04:02:7e:f9:d0:10:b9:59:12:
bd:6e:a2:2a:dd:a1:8a:31:17:8b:8c:63:ed:f8:fe:
81:c9:f8:93:94:24:0c:f7:00:3a:ec:78:6e:9b:41:
ca:7e:63:19:38:40:e7:f0:89:7e:d7:f5:4b:12:9e:
19:32:e2:0e:db:f9:cd:c0:8c:fa:2e:0f:d0:43:fc:
17:00:fe:e4:ef:0b:62:82:1e:8c:1c:9d:f4:6e:ba:
45:48:d9:9d:c0:4e:5e:3d:d8:47:26:06:9a:02:5f:
7b:e9:e4:f2:01:c6:3f:f9:24:7c:ba:45:5c:38:97:
14:a3:2e:2f:ba:63:20:a3:36:1e:81:9f:8a:f1:9d:
89:59:a6:7e:94:42:98:1f:9f:03:5f:27:83:98:66:
be:27:34:1b:a0:12:0d:6a:dc:18:fb:e8:d0:8e:70:
6e:82:d9:9b:93:88:24:ab:e3:13:c2:3b:3f:e1:91:
81:7b:01:9a:fc:e0:ae:2a:fc:2e:f7:76:42:4d:3c:
33:0c:b4:7c:2e:65:1f:a0:e4:9a:11:37:b0:f2:11:
bb:08:a9:d1:a9:1b:e3:89:d6:1d:dd:cd:9d:90:6b:
98:23:6d:20:19:cc:f3:43:45:76:b4:8d:4f:e6:79:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DE:5B:FC:95:49:74:8E:E6:68:45:F3:2A:A6:EF:20:CD:E3:14:A9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.174.0/24
Signature Algorithm: sha256WithRSAEncryption
27:50:38:c2:43:ea:7d:6c:6f:36:13:ca:ba:cd:22:b6:00:bf:
67:5f:0b:65:61:d2:06:f3:f9:42:19:b5:a7:cd:75:50:af:ab:
25:04:bb:8d:99:b0:11:6e:c4:21:51:09:ff:8d:6b:ea:44:5e:
a3:9c:ff:ba:18:43:d1:f6:63:ef:61:7b:05:5d:0e:02:62:b2:
c4:e6:92:28:4b:89:ea:11:13:cc:e2:cf:06:bb:04:d9:7d:a8:
1e:bc:bc:a7:4a:49:82:65:c8:7a:17:49:c2:ce:28:5e:ea:b8:
68:71:22:5a:6b:91:6c:0b:04:98:b2:21:fe:ee:74:39:16:74:
56:8e:01:ea:43:8a:58:3d:86:87:8e:8f:17:46:cc:86:3b:7c:
1d:a8:03:0d:2b:67:8f:71:00:e7:25:3a:49:d9:65:4a:f6:51:
5b:cf:64:82:3c:c5:25:39:7f:6d:a5:3a:7c:6b:9b:8c:38:b5:
27:f2:cf:d3:b2:07:52:c5:c2:7d:2f:2b:5f:dd:4c:b1:aa:77:
54:54:07:b1:21:59:0b:1f:22:18:21:74:94:9d:dc:3f:39:23:
1f:5f:b1:76:a0:5b:fb:a3:c3:38:02:32:b3:3c:ef:05:5b:c8:
d9:c0:9b:77:b4:1f:c8:3f:2b:cd:34:6d:e9:f6:ab:22:01:88:
70:44:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:09:00 2026 by rpki-client