Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214242.roa
File: AS214242.roa (raw, json)
Hash identifier: ebrRhpUBySNYOVMmFciSCqUTdniJbBgn/O/FJZZg1Yg=
Subject key identifier: BC:5B:2B:9D:A8:D5:92:76:30:6D:A7:FC:9E:9E:36:E2:78:F4:3A:07
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 3C0A6BF71F507BDECE4A9489F1539D84C24582D6
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214242.roa
Signing time: Wed 04 Nov 2026 20:32:53 +0000
ROA not before: Wed 04 Nov 2026 20:27:53 +0000
ROA not after: Wed 03 Nov 2027 20:32:53 +0000
asID: 214242
IP address blocks: 2a0e:8f02:2290::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:0a:6b:f7:1f:50:7b:de:ce:4a:94:89:f1:53:9d:84:c2:45:82:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:53 2026 GMT
Not After : Nov 3 20:32:53 2027 GMT
Subject: CN=BC5B2B9DA8D59276306DA7FC9E9E36E278F43A07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:f7:1a:38:c0:a6:75:75:b7:2c:39:8d:c0:
ac:f5:78:72:c2:6d:d8:28:99:a5:e0:cf:a6:bc:a9:
b8:89:cd:fa:d7:c1:88:9d:44:4e:6d:e9:ca:b5:d5:
7a:0a:e2:ec:fa:9f:5b:7d:a7:94:7f:7e:75:01:7c:
21:11:6f:89:db:01:3d:ba:47:0e:0b:af:50:b7:fd:
3a:e7:45:b9:ef:a2:b6:bc:b1:99:a2:d8:99:f1:72:
01:9b:1d:18:e1:c8:70:ca:f5:fc:23:26:a5:6a:f7:
1a:eb:2a:9d:17:b5:85:1a:4f:56:f1:0e:8f:1a:bf:
64:31:1e:46:95:a7:81:50:d7:95:b9:66:fc:6d:66:
9f:f9:3e:d4:4c:ab:72:f1:95:66:1c:4e:41:a8:86:
77:3c:50:63:36:b9:99:d2:5a:31:79:d3:b0:13:15:
b0:b0:fe:6e:18:4f:92:6c:88:b0:df:ad:3a:e9:1f:
ca:a8:8d:55:b5:59:04:f9:2a:23:ee:71:2f:3a:97:
60:37:40:24:a3:28:27:d4:80:9f:54:18:17:eb:da:
42:8d:71:10:a5:2c:0e:1d:5c:aa:53:20:82:51:d8:
e2:d0:71:e4:8e:b6:37:16:74:28:c7:54:f5:da:a1:
82:ed:5a:1b:72:93:42:3c:9a:84:02:d4:b9:fe:5d:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5B:2B:9D:A8:D5:92:76:30:6D:A7:FC:9E:9E:36:E2:78:F4:3A:07
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2290::/44
Signature Algorithm: sha256WithRSAEncryption
09:24:7e:91:65:8e:0a:1e:d8:b8:b4:b3:3d:1a:7b:44:ec:db:
20:f9:d7:a0:51:9c:74:c8:3a:d1:ff:48:1c:a3:67:08:8b:c1:
28:2c:0b:cc:1d:28:39:68:6d:39:3a:10:80:d8:40:ac:75:ee:
f8:aa:ca:fb:32:72:96:23:f1:f1:80:b1:28:c1:77:a9:88:72:
23:c8:94:7e:8c:a8:f6:37:c2:56:9a:e9:66:e5:8c:24:04:8e:
12:23:7f:35:35:f0:5e:e3:30:fb:2d:82:5a:13:6e:e8:8f:f3:
4e:65:be:74:a4:ac:23:85:d9:28:83:39:d2:00:99:e4:2f:d1:
50:ae:c9:a6:61:0f:ab:5d:1a:04:cc:dc:54:73:68:2f:d0:e2:
5b:f9:46:f8:11:65:60:d3:a2:b4:b7:77:8d:91:f0:6d:f3:f0:
bd:7e:8c:bf:b3:72:cd:13:ec:df:f8:cf:b1:cf:ab:9b:e6:9b:
0e:37:95:1c:85:94:8b:22:12:16:7b:de:7e:2e:75:4f:a7:99:
3c:8e:22:d7:13:d9:4d:b6:29:7e:30:87:59:b3:c8:b1:27:ab:
f4:fc:f5:3e:f1:63:b3:a4:dc:dd:58:4d:fd:43:11:fc:30:69:
9a:c8:f8:b4:77:9a:1f:82:79:88:84:f3:3b:c7:fc:f0:b0:16:
c1:f2:c6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:38:51 2026 by rpki-client