Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214481.roa
File: AS214481.roa (raw, json)
Hash identifier: ra+FQZdgkoNSnxKFS+D630CyMueS+bHZyYQDXk4woTM=
Subject key identifier: 24:B1:38:F2:21:D7:F1:85:FE:8C:6A:E7:37:06:42:D2:5D:69:C1:54
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3B1BF279789900C5D64478E816FDD2C5D5C7A5A6
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214481.roa
Signing time: Sat 31 Oct 2026 14:49:39 +0000
ROA not before: Sat 31 Oct 2026 14:44:39 +0000
ROA not after: Sat 30 Oct 2027 14:49:39 +0000
asID: 214481
IP address blocks: 141.11.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1b:f2:79:78:99:00:c5:d6:44:78:e8:16:fd:d2:c5:d5:c7:a5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 31 14:44:39 2026 GMT
Not After : Oct 30 14:49:39 2027 GMT
Subject: CN=24B138F221D7F185FE8C6AE7370642D25D69C154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:1a:09:34:7a:59:aa:79:4d:be:97:18:75:
12:bb:ad:61:d1:14:d2:43:2c:c2:6b:b1:12:63:e4:
54:30:38:67:22:06:6b:06:05:88:66:bd:8c:6c:ca:
47:d8:dc:f8:aa:c8:6f:97:4e:cc:90:c8:7e:fd:1e:
0e:64:e2:22:23:28:f7:2a:71:32:63:f6:6f:a8:ad:
b0:b2:81:a5:4e:e4:cf:08:52:ba:6c:ce:ee:63:eb:
cc:38:3f:7d:01:71:1d:0c:fb:2a:ec:d7:48:bc:a4:
12:63:1f:cc:c8:12:db:59:de:e2:87:3d:2c:e9:55:
26:e2:77:e2:0b:37:09:78:8d:bb:9a:ca:51:50:eb:
0f:93:89:8e:3d:18:21:12:dd:fe:bc:54:df:4d:6d:
71:b1:5d:bc:72:bd:61:59:dc:0b:02:4e:97:df:0c:
4f:df:64:c9:9d:90:de:24:24:c9:26:c9:9b:85:f5:
85:4b:3d:ed:fa:ec:c2:f6:3e:a9:5d:6f:4f:fe:41:
d8:68:05:0b:e6:fc:2d:1b:a1:f1:e4:6d:74:0b:4e:
c6:19:02:9e:02:4c:39:19:a0:26:2e:a9:94:01:4f:
42:78:b0:cd:62:53:d8:0d:6e:31:d4:94:f1:a4:42:
e8:a0:4c:11:68:05:d9:41:88:04:37:91:85:d9:21:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B1:38:F2:21:D7:F1:85:FE:8C:6A:E7:37:06:42:D2:5D:69:C1:54
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.62.0/24
Signature Algorithm: sha256WithRSAEncryption
45:13:5d:81:0a:ad:d4:b1:46:04:2b:74:bc:10:c9:ea:c6:13:
cf:d7:94:be:1e:42:ab:d6:14:af:b1:bd:18:f5:37:e5:7b:fa:
65:f3:66:7a:7b:cc:d3:96:37:7f:c7:ae:7b:c9:cc:d2:05:cb:
be:4c:38:68:b9:37:d1:14:be:b3:2f:ef:c5:b8:8e:56:93:7b:
75:81:f2:ba:bf:37:6d:8a:04:a7:cd:d5:93:4c:63:1d:73:e0:
9f:f6:1e:3a:14:3c:6a:d0:c2:5c:84:75:9a:4e:53:6c:41:3f:
48:55:ab:c4:75:92:3a:53:28:da:1f:bd:e9:b2:ef:27:de:03:
7b:f2:29:29:22:58:0f:62:16:da:7b:4a:c6:20:cb:53:fb:54:
3a:33:51:18:56:10:24:97:01:52:6c:57:90:07:8a:57:b0:ec:
f0:a5:f2:e3:85:8b:65:79:d9:f9:53:5a:58:50:7e:7f:d4:fb:
e8:03:63:58:b4:64:68:cd:d8:d6:55:e5:9d:9e:a0:81:f8:44:
64:15:eb:15:0f:38:b5:83:d4:d2:b5:c9:80:c7:fe:c2:cc:48:
7d:0c:6c:96:cb:b9:f6:90:2b:32:8a:02:a1:13:48:e3:fb:94:
d7:89:50:49:f4:0a:f5:40:2c:45:63:cd:ab:d4:bf:a1:30:69:
3b:11:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:21:36 2026 by rpki-client