Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214083.roa
File: AS214083.roa (raw, json)
Hash identifier: VTr4nO7C3uYsL3VdieTbmbKytWedHYukaNjcb2GDh54=
Subject key identifier: 50:4A:B9:58:6F:7A:2B:70:9D:A2:84:19:9B:A5:4B:4C:CC:44:37:74
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 68976D9B984C5883BFA61B8C93D0E0D1DECC1A23
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214083.roa
Signing time: Sun 15 Nov 2026 11:23:44 +0000
ROA not before: Sun 15 Nov 2026 11:18:44 +0000
ROA not after: Sun 14 Nov 2027 11:23:44 +0000
asID: 214083
IP address blocks: 141.11.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:97:6d:9b:98:4c:58:83:bf:a6:1b:8c:93:d0:e0:d1:de:cc:1a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 15 11:18:44 2026 GMT
Not After : Nov 14 11:23:44 2027 GMT
Subject: CN=504AB9586F7A2B709DA284199BA54B4CCC443774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:66:59:b5:f7:ef:a7:e4:d5:15:69:47:ca:
45:1e:81:ec:9d:43:37:2f:4f:7b:03:9d:c9:95:ea:
cc:17:f8:82:c5:41:da:79:64:3b:f6:96:3f:45:a2:
1f:23:95:81:37:4d:b4:37:32:c0:f5:b9:c4:42:a6:
53:e9:6e:17:fd:c9:df:4f:e4:8f:0f:36:6b:65:d5:
ed:b8:24:9e:45:fa:c1:0a:cd:d0:aa:d5:fb:37:ba:
fe:f2:e2:cf:ab:12:04:52:d9:6d:c1:ad:98:8a:3e:
db:cd:90:18:13:d2:96:29:60:67:5c:b4:ca:26:d9:
d2:e6:00:a6:94:4e:bc:5b:61:62:ce:ce:af:02:ce:
88:18:bd:7c:65:20:70:3c:a8:9d:f2:9c:8b:d6:3e:
5f:d2:67:28:79:b9:81:90:ec:27:da:d5:1e:09:a0:
c6:b4:9e:7d:e9:ea:3d:4a:5e:37:60:26:92:08:d3:
66:64:81:a7:f0:a8:bf:ce:a9:2c:61:18:ec:cb:ec:
37:78:60:d6:ef:fc:55:3e:e7:b4:ac:68:b0:f3:21:
1f:8c:de:71:45:68:bc:ee:b3:3b:96:12:54:09:86:
ca:f4:3d:9e:b3:de:7c:1e:59:6f:c9:60:a4:89:7b:
6e:5b:30:cb:c3:e4:13:e5:8c:66:bb:35:15:fc:8c:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4A:B9:58:6F:7A:2B:70:9D:A2:84:19:9B:A5:4B:4C:CC:44:37:74
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.94.0/24
Signature Algorithm: sha256WithRSAEncryption
50:24:a7:b9:44:0a:c7:98:7a:12:b3:53:8b:ce:a6:d6:37:62:
82:7e:fc:37:e3:cd:f3:4d:c3:35:0e:fd:3b:67:ec:1d:0b:cc:
fe:93:01:bf:5b:6f:ae:2d:6c:53:97:36:6c:1e:8f:0f:ac:42:
ca:d5:69:03:04:b5:a0:61:62:04:15:19:7b:ab:2a:95:46:90:
ce:24:3b:a5:3d:de:b7:e2:af:20:f5:09:63:77:bf:94:c5:79:
0d:ce:b9:96:1d:1a:e0:0b:87:e8:99:d1:b0:b2:9b:6e:2f:67:
4b:e9:65:42:c3:28:11:e3:bc:b1:76:78:5f:71:ea:ee:40:f0:
29:b1:f5:12:52:a8:f4:86:c5:08:a3:7b:c4:08:02:5a:5c:57:
44:ac:b7:77:e7:57:4a:96:58:23:53:49:39:32:71:bb:e9:ea:
6b:7a:9d:c7:f9:fe:e7:7d:78:0f:ab:fb:d3:50:29:6c:91:47:
76:7c:8a:11:f9:40:62:73:0f:66:3e:89:9e:52:7e:05:86:9c:
4a:e2:17:58:0d:f4:be:13:9d:0f:b4:56:ca:16:63:26:43:c5:
86:23:ac:55:e8:84:23:42:dd:99:d8:80:12:94:ff:42:73:2b:
c2:95:a8:af:a0:89:6a:17:dc:82:9f:aa:1c:d2:14:cd:37:26:
8e:a7:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:30:30 2026 by rpki-client