Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: NTdtXqKDqDQXhOA8NPzMNrMN6i7Ln9noeQIcbPCGfoA=
Subject key identifier: 3D:0C:A1:02:92:D7:F7:AF:88:94:0F:00:1A:FA:85:8F:3A:C5:DD:90
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 375E11F5AAB2371D4260E79D943AEC905A042BCF
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214483.roa
Signing time: Tue 15 Sep 2026 12:58:29 +0000
ROA not before: Tue 15 Sep 2026 12:53:29 +0000
ROA not after: Tue 14 Sep 2027 12:58:29 +0000
asID: 214483
IP address blocks: 45.158.11.0/24 maxlen: 24
2a05:5040::/29 maxlen: 29
2a07:6a40::/29 maxlen: 29
2a09:22c0::/29 maxlen: 29
2a0c:1c00::/29 maxlen: 29
2a10:ec80::/29 maxlen: 29
2a10:f100::/29 maxlen: 29
2a10:ff80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5e:11:f5:aa:b2:37:1d:42:60:e7:9d:94:3a:ec:90:5a:04:2b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 15 12:53:29 2026 GMT
Not After : Sep 14 12:58:29 2027 GMT
Subject: CN=3D0CA10292D7F7AF88940F001AFA858F3AC5DD90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:21:ce:45:dc:a4:32:20:d8:35:76:e7:9d:
20:45:67:f3:b8:a2:3c:69:eb:bd:25:b6:5f:23:8b:
31:c4:79:05:9c:75:9f:3e:77:22:c6:5f:76:c9:65:
0e:1b:8a:b7:97:80:6e:11:dd:68:9d:16:c3:04:8d:
d0:03:8c:8a:fd:9b:86:86:17:b7:3d:8a:27:08:01:
b7:ec:24:8a:4e:8a:af:b7:4f:be:2c:e2:8b:ff:6e:
38:03:18:b5:67:c7:61:44:49:22:8b:f7:9a:46:a5:
53:7c:59:49:f9:a6:8d:eb:b9:9a:7c:0b:1c:88:a2:
0a:30:24:2f:4e:17:41:7e:e2:5f:c9:93:3e:3a:a2:
24:13:2a:e3:91:fc:cb:b9:96:0c:05:96:e6:2e:d5:
1d:a2:40:e7:cc:e3:a2:e0:50:0e:6a:5a:34:e7:7a:
a3:8a:b7:06:49:35:02:51:63:2a:55:dc:9a:70:a5:
bd:24:f5:30:a9:da:29:1f:7d:1e:27:69:2e:59:89:
aa:c3:c2:06:fb:03:81:91:5e:d4:f3:3c:75:e3:7e:
18:fd:d5:d0:f0:49:e6:35:63:de:39:67:e5:07:19:
d2:46:ef:01:a1:1d:da:3e:c3:29:93:d8:eb:0a:06:
f7:6a:79:61:25:0c:f2:d9:bd:14:6b:f4:ac:e4:e1:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:A1:02:92:D7:F7:AF:88:94:0F:00:1A:FA:85:8F:3A:C5:DD:90
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.11.0/24
IPv6:
2a05:5040::/29
2a07:6a40::/29
2a09:22c0::/29
2a0c:1c00::/29
2a10:ec80::/29
2a10:f100::/29
2a10:ff80::/29
Signature Algorithm: sha256WithRSAEncryption
9e:cc:b9:d8:ce:f1:b6:83:f8:3a:23:b7:9a:0a:c2:dd:03:46:
47:d4:62:d3:e9:2e:d5:3a:e4:36:91:cf:d9:ac:67:f6:80:4e:
cd:4f:e5:ad:44:56:24:cf:30:68:87:a6:87:ce:a9:21:0a:4d:
69:0b:64:34:67:4f:ba:05:ad:6d:41:b2:b2:62:8a:f3:5e:1f:
4b:fb:bb:f2:6c:e7:8d:be:bd:1f:b2:1e:09:c5:1c:bf:7e:86:
dc:ba:1b:82:51:cc:1c:f9:e9:4f:58:d1:28:19:81:58:bb:f8:
36:45:55:39:4d:2e:8d:54:73:8e:54:33:f8:f0:fd:61:8f:6b:
c8:2c:07:37:ac:da:0b:ec:bf:bd:6f:1d:ff:0c:8b:75:40:21:
e6:38:17:e7:e8:92:fb:18:8c:04:d3:be:f2:79:4b:1e:da:e1:
97:0e:3a:81:d4:be:2e:2a:56:2a:13:08:0a:6b:a4:6c:b5:ba:
a3:b8:0e:07:02:85:f3:c0:db:35:bf:c6:1a:9e:d7:8b:06:7c:
6d:6b:81:86:59:e9:c0:15:86:81:67:fc:3b:a2:64:2b:d8:7a:
82:4b:c5:05:5c:9a:d8:b6:7e:c7:ac:b2:6c:e2:e3:5c:d2:f0:
47:2a:ec:22:2d:7e:a8:d6:f1:95:cc:7e:24:30:bf:a0:53:45:
6c:75:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:43 2026 by rpki-client