Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214618.roa
File: AS214618.roa (raw, json)
Hash identifier: Tc7jTTPdofv2fcontzvH5XuTEsDrqi4vY2vfZt8lTaQ=
Subject key identifier: 6A:79:5C:B0:BB:E7:FA:16:3F:A5:D2:BC:BC:E7:68:CD:C5:5D:E0:A5
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 186D3EE94F7A9AA1B569A1A61B2F125EDBD5CD4C
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214618.roa
Signing time: Mon 02 Nov 2026 13:49:39 +0000
ROA not before: Mon 02 Nov 2026 13:44:39 +0000
ROA not after: Mon 01 Nov 2027 13:49:39 +0000
asID: 214618
IP address blocks: 45.149.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:6d:3e:e9:4f:7a:9a:a1:b5:69:a1:a6:1b:2f:12:5e:db:d5:cd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 2 13:44:39 2026 GMT
Not After : Nov 1 13:49:39 2027 GMT
Subject: CN=6A795CB0BBE7FA163FA5D2BCBCE768CDC55DE0A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:e3:0e:62:54:cf:af:c5:7f:76:2b:7f:d1:
89:34:10:09:cb:4f:8b:18:27:99:97:76:77:c1:ac:
8e:d1:79:7c:fe:d4:fe:96:f1:f7:0d:a7:d8:7e:7a:
bd:2e:23:be:e5:a2:c3:c3:58:6a:c6:df:17:16:a4:
69:e9:c7:43:e6:02:33:3e:07:22:20:23:91:81:7b:
1a:b6:36:5f:5b:e1:45:39:99:a6:fc:92:83:1a:41:
2c:98:1c:0f:75:e2:b8:39:0d:65:05:7a:10:cf:32:
2e:9c:e8:cf:88:7e:e0:01:3b:b4:33:46:32:ea:4e:
87:08:ea:dd:cc:e2:1e:a1:fa:03:31:ca:4e:77:b8:
87:05:13:be:a1:10:e9:c2:db:5e:96:4b:a7:0b:db:
ac:97:9e:3d:ef:8b:3f:69:c5:eb:a5:e9:d7:db:b8:
92:2c:a1:1e:b5:68:fb:7d:ce:47:05:63:ac:7e:97:
28:df:ab:d3:f8:08:d9:e0:73:3c:2e:fd:e0:40:66:
6b:f4:ea:21:a8:90:67:ca:8e:c3:90:52:3f:c5:8e:
ff:5e:11:31:f9:76:a9:07:d1:f8:54:1b:15:9a:0e:
a4:05:ec:24:84:65:81:01:c2:e3:20:b3:0e:52:93:
81:fc:f0:b7:75:60:c1:29:23:53:57:13:2a:e8:5c:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:79:5C:B0:BB:E7:FA:16:3F:A5:D2:BC:BC:E7:68:CD:C5:5D:E0:A5
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.101.0/24
Signature Algorithm: sha256WithRSAEncryption
32:46:75:0a:5a:25:e9:0b:ca:91:45:71:ad:f9:de:92:43:03:
9a:37:52:0a:ef:0b:48:e1:e5:0c:5d:e8:8f:05:b2:53:f8:63:
3c:66:17:a5:1d:68:91:fe:b4:d7:77:61:9a:09:3d:ae:69:e1:
0f:ce:82:bb:60:e6:65:de:d0:ee:45:2a:43:98:09:8b:ac:ac:
f8:eb:76:76:fe:3c:ea:ec:34:3c:16:69:d0:df:f3:f1:80:88:
3b:41:48:2d:39:90:45:0b:72:6e:2b:76:9b:8e:50:14:91:c4:
93:fd:00:3e:7d:68:77:81:58:9d:54:b8:30:f3:ab:7b:ea:25:
56:a4:ec:95:9d:c9:03:8a:4a:41:82:9f:2a:42:7a:0d:5a:18:
44:e8:18:29:6e:aa:ba:3c:56:b8:01:13:6a:fa:ac:c2:cb:8a:
28:70:ab:73:0f:5e:a6:17:e7:65:b9:81:9b:3e:71:bb:ab:e7:
a1:39:0b:8a:cc:0d:81:aa:92:22:f2:be:af:be:b7:29:99:98:
14:49:17:30:09:c5:12:87:32:a1:58:31:6e:2d:42:25:92:fc:
bf:a9:06:85:0c:19:53:76:36:00:39:54:30:60:c4:49:a7:6f:
c5:04:b6:e8:2e:a3:a4:ba:0e:53:33:7a:03:af:c1:c7:42:fa:
e5:a9:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:20:28 2026 by rpki-client