Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214266.roa
File: AS214266.roa (raw, json)
Hash identifier: AJZo/ZNHi1DSGg4n4mR449Nf0qENPIND4T7F030Y//4=
Subject key identifier: 19:01:D0:48:E9:E2:BC:A4:57:62:DF:AB:B3:18:0F:C7:5C:97:58:35
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 075B2393F3DE92A160CFB6320443DDE1F2427CA7
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214266.roa
Signing time: Wed 16 Sep 2026 10:51:05 +0000
ROA not before: Wed 16 Sep 2026 10:46:05 +0000
ROA not after: Wed 15 Sep 2027 10:51:05 +0000
asID: 214266
IP address blocks: 2a04:f700::/29 maxlen: 29
2a06:99c0::/29 maxlen: 29
2a09:2240::/29 maxlen: 29
2a0b:ca00::/29 maxlen: 29
2a10:e280::/29 maxlen: 29
2a10:f080::/29 maxlen: 29
2a10:fe80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5b:23:93:f3:de:92:a1:60:cf:b6:32:04:43:dd:e1:f2:42:7c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 16 10:46:05 2026 GMT
Not After : Sep 15 10:51:05 2027 GMT
Subject: CN=1901D048E9E2BCA45762DFABB3180FC75C975835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:ee:e6:ea:6e:03:ee:79:38:ac:05:83:70:
cb:61:f3:af:e1:96:fa:92:0f:87:05:10:ce:5a:0b:
98:89:e0:b8:f6:55:33:d3:45:a0:43:79:f9:e3:47:
9d:ad:cc:cc:d5:a4:16:71:5e:a8:5a:14:6d:19:73:
83:72:45:bc:e6:32:37:e6:4f:85:1f:65:6a:0c:90:
e2:55:2d:c4:ce:cf:68:dd:fa:9e:7b:90:51:13:d2:
26:b5:5a:76:15:c9:95:c7:85:60:0d:71:8f:99:22:
14:0b:22:21:0a:de:61:9f:08:0c:3a:e9:c7:ac:9f:
e9:31:52:bc:7f:6b:e9:b9:c8:2a:8d:c7:6d:e0:43:
a8:6e:26:5a:7b:58:a2:a5:90:65:66:ed:78:aa:b1:
3e:ad:7d:03:93:c3:a1:3c:f5:49:0b:82:64:93:61:
78:45:0c:9f:51:ec:28:00:d9:cf:41:90:17:7b:45:
50:36:b7:85:ea:f3:43:bb:86:e0:aa:a8:fc:b9:ce:
22:7d:84:a6:91:f5:58:90:a7:d2:e9:72:68:84:7f:
a6:22:07:8a:3b:29:ea:52:13:f5:cb:2f:af:c6:81:
63:06:d4:12:cd:e7:c0:5f:d8:a1:c9:f9:29:4e:29:
67:89:bc:bc:b4:ec:e0:f8:eb:d4:bf:a5:43:d3:33:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:01:D0:48:E9:E2:BC:A4:57:62:DF:AB:B3:18:0F:C7:5C:97:58:35
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:f700::/29
2a06:99c0::/29
2a09:2240::/29
2a0b:ca00::/29
2a10:e280::/29
2a10:f080::/29
2a10:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
32:5c:e8:0a:b6:47:67:6a:74:81:4d:e6:ad:90:d6:68:35:43:
69:da:05:cf:98:9e:4f:91:bc:0b:40:aa:87:0f:53:d3:1a:4e:
0b:85:95:4c:47:b4:25:ad:b6:31:bb:f4:75:d2:ea:5c:c6:12:
4e:c4:f3:2f:be:a2:93:36:fd:94:d4:e6:37:83:77:7d:f7:f3:
f2:cd:b9:65:e0:16:e6:30:bc:de:b0:c7:70:25:57:76:b0:13:
a4:b2:55:ce:b3:de:a9:da:e3:c0:59:ee:2a:f2:e4:37:8c:1f:
d8:46:80:76:43:8e:9f:2c:51:06:89:26:ec:77:90:b2:39:e9:
36:05:06:b1:70:fe:b5:7f:07:5e:df:47:1e:f4:d3:4b:e3:fd:
7b:1f:35:87:3f:45:c4:53:c5:bc:ed:e0:9a:b1:31:69:c7:96:
42:e0:74:8f:32:87:23:33:1f:fd:b6:75:10:b8:7b:e2:0a:e4:
4f:23:bf:cd:e3:25:e7:d3:db:27:c6:40:9f:61:11:de:8f:cb:
17:30:7c:54:20:63:6b:72:f0:02:1f:77:fd:f3:f6:25:ca:93:
be:e1:6c:aa:5e:aa:7f:46:dd:71:2e:1c:65:75:fa:00:8d:bb:
4b:51:4b:92:f1:26:6e:9c:57:ec:97:e1:cc:e9:14:87:13:c7:
76:5b:80:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:30:59 2026 by rpki-client