Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: ubqG7crmK4ABQrBox/7bP7VmN8afIGvCiY3fKMEmilA=
Subject key identifier: 15:69:C5:A2:52:77:7B:A1:4D:C9:8A:2B:BA:5A:34:65:EE:69:0B:DE
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 08D69E5F5A67B9FB0348684531B7955155B08A37
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
Signing time: Fri 03 Apr 2026 14:08:42 +0000
ROA not before: Fri 03 Apr 2026 14:03:42 +0000
ROA not after: Fri 02 Apr 2027 14:08:42 +0000
asID: 214025
IP address blocks: 141.11.79.0/24 maxlen: 24
141.11.237.0/24 maxlen: 24
141.11.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d6:9e:5f:5a:67:b9:fb:03:48:68:45:31:b7:95:51:55:b0:8a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 3 14:03:42 2026 GMT
Not After : Apr 2 14:08:42 2027 GMT
Subject: CN=1569C5A252777BA14DC98A2BBA5A3465EE690BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:db:f4:60:00:63:a1:95:16:c1:67:07:b6:
2c:3d:76:1f:51:c5:39:ee:6b:ae:8b:83:a1:7f:b2:
2c:4f:8c:b4:8e:17:2d:11:e6:7f:46:33:3c:80:69:
02:55:6c:00:98:51:6c:6c:41:fd:a4:87:0f:79:67:
40:d1:b7:b5:0f:67:44:d4:fd:1d:15:be:d8:8f:32:
aa:15:aa:6a:7a:74:56:95:87:8c:bd:fc:56:06:a3:
ad:77:b5:15:18:0a:fe:d3:2d:24:93:b8:a1:cc:41:
1e:94:b3:9d:56:e1:91:a7:29:2b:11:71:0d:0e:11:
4c:22:7f:b5:ba:c2:f9:15:a3:a4:21:4c:84:50:c4:
38:c4:c0:03:90:3f:d4:7a:3b:97:3a:72:21:c7:fd:
4d:9b:de:46:0d:96:fa:96:dc:21:82:43:d4:18:75:
03:f7:c1:73:72:e8:ea:e1:75:f4:89:86:a4:7a:8f:
07:e5:b4:37:5e:74:3b:3f:41:60:74:c2:9e:20:1d:
c8:43:fa:f7:29:6a:5c:51:93:64:e5:eb:c6:d4:2e:
fc:ba:a6:4a:aa:9a:54:bb:7c:be:77:2e:98:06:4c:
ca:e5:dc:1f:7a:4b:35:de:20:ed:77:51:2a:6d:21:
e3:c6:fe:b4:70:c2:a8:0d:d6:65:fb:86:5c:db:bf:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:C5:A2:52:77:7B:A1:4D:C9:8A:2B:BA:5A:34:65:EE:69:0B:DE
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.79.0/24
141.11.237.0/24
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:c6:c9:46:2e:e2:4d:be:86:04:e7:11:38:fb:f3:30:fd:98:
55:84:7d:10:7b:dc:e3:b7:84:38:8c:eb:4d:0f:a5:09:8f:25:
21:7b:26:e9:ed:fc:b1:8e:25:cd:26:d7:08:f0:24:fa:a3:26:
75:62:dd:a5:37:e2:e7:7f:bd:81:b0:4f:2d:0f:98:c8:9a:15:
a9:79:b8:91:ca:a2:8d:a1:b7:68:dd:57:70:53:15:b3:07:4a:
e0:5d:d2:ea:a3:f3:f3:89:d1:94:7f:03:07:e0:92:4b:ae:4b:
b0:29:ae:9e:93:9f:b6:0c:c5:9d:38:09:60:85:30:4c:3b:37:
3d:77:cd:f7:a3:ad:a3:7f:e4:16:2f:8d:04:e9:cb:04:c9:c0:
a0:a0:13:50:fb:ec:21:dc:73:53:ae:15:9d:19:0e:88:d5:51:
d4:3a:62:79:41:38:93:b0:59:63:05:b8:2a:e7:f5:04:e2:7b:
65:45:a2:1c:ec:d8:7e:d7:94:b2:56:9b:ec:2f:af:b6:a3:f7:
fd:b3:ec:cc:51:e4:ba:99:b4:9f:12:20:a4:07:e4:4d:7f:cf:
5c:45:1c:28:f8:52:d5:6a:af:d5:a4:ab:2f:55:aa:d9:df:4c:
33:45:20:42:95:bd:70:ed:46:77:48:f0:78:2c:18:79:4f:2b:
72:90:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:43:47 2026 by rpki-client