Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: eA8gnNYWgWEnstHYquTiVYSKGkk3eHR8EGs6NEjDT5o=
Subject key identifier: 14:D3:79:53:DC:04:CA:04:D4:20:A3:24:F5:17:A3:AB:D8:38:5F:6D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5EDB616F784045A5A02C1C58ED3662C19FE03C13
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
Signing time: Fri 23 Jan 2026 11:47:30 +0000
ROA not before: Fri 23 Jan 2026 11:42:30 +0000
ROA not after: Fri 22 Jan 2027 11:47:30 +0000
asID: 214025
IP address blocks: 141.11.240.0/24 maxlen: 24
194.60.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:db:61:6f:78:40:45:a5:a0:2c:1c:58:ed:36:62:c1:9f:e0:3c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 23 11:42:30 2026 GMT
Not After : Jan 22 11:47:30 2027 GMT
Subject: CN=14D37953DC04CA04D420A324F517A3ABD8385F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:0b:33:97:ab:15:d3:2f:3e:17:ce:90:65:
17:b7:aa:a5:10:b3:05:c4:90:9c:b0:be:08:6c:34:
7e:63:d6:a0:52:6f:d0:e6:29:0c:3e:c0:62:0d:57:
a8:a0:c4:f9:4f:67:0e:6c:3c:67:7c:b3:a8:2a:aa:
ba:93:9e:16:5d:f0:1e:ac:6f:d4:f7:a6:2d:60:b0:
25:e0:2a:ea:25:5b:10:b9:04:4d:e8:7b:bb:67:e3:
28:2e:3c:74:b3:c1:82:e2:28:dc:50:a4:30:4c:8d:
00:2e:3c:25:13:0b:3c:08:d6:ea:77:53:81:ec:7b:
6b:b8:15:6b:f4:64:ca:bc:77:62:d8:95:51:c6:41:
df:95:f0:1f:5b:2d:54:14:43:3e:5c:ba:1c:a0:c8:
5e:fa:fd:0a:9a:01:7a:85:ae:9e:c0:e5:33:ca:42:
68:38:78:63:21:56:c1:97:15:25:0c:e4:52:73:ce:
ab:05:4f:0b:ad:3b:27:4f:2c:f7:9a:4d:51:f0:fc:
ff:df:68:eb:a8:97:5e:7b:20:5f:18:40:24:d1:04:
c6:a6:b7:01:9f:d0:75:0b:08:4a:67:3b:98:64:f7:
9d:e2:73:9b:e5:e2:f0:9a:92:ef:f6:52:68:cd:67:
7f:ae:87:95:88:35:b4:59:15:fc:0e:91:65:dc:11:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D3:79:53:DC:04:CA:04:D4:20:A3:24:F5:17:A3:AB:D8:38:5F:6D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
194.60.90.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e8:3a:85:e4:ab:ce:4a:34:bb:bc:9a:f2:e7:73:3e:f6:11:
6b:26:17:0b:13:2f:0c:c6:4b:b5:66:47:12:0e:a9:58:93:c8:
89:58:64:68:c3:cf:d6:ed:4b:4a:2a:f8:5c:3e:53:80:25:2f:
50:c7:c3:0f:7a:2e:59:0c:4d:95:f5:af:61:4a:c9:f9:8e:e6:
2a:41:fc:5b:df:c6:30:f2:cb:a7:8e:44:f6:51:57:b9:87:22:
e0:f4:81:79:dd:b1:df:df:4c:55:55:61:68:d5:94:4f:58:74:
dd:0d:9b:24:37:0a:dd:ff:42:37:01:14:38:78:b9:b3:35:6f:
25:64:1f:29:83:39:04:7c:bf:a7:05:fe:56:c5:d8:8a:69:e7:
23:48:6d:64:4a:b1:90:ed:03:a8:2b:0f:c6:c0:70:4d:38:29:
39:6e:db:72:20:0c:7a:75:86:04:98:13:44:f0:ba:92:98:5e:
ea:b2:05:34:d2:66:8b:90:72:ce:be:aa:f4:85:c2:a4:0b:23:
e7:9f:23:4b:33:81:71:ac:6c:51:2e:2c:34:e0:ef:64:49:7f:
29:6a:58:59:4f:50:4a:5a:f2:90:09:ae:82:7e:2e:89:ec:e4:
37:77:ca:d3:3b:7d:9c:66:93:d3:27:1f:fa:a5:43:e6:c4:61:
6f:c5:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:01:17 2026 by rpki-client