Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: iPrvOkTTqFS3XqhdTKynWe5IDXl3HIfe9kfUZsVlZI0=
Subject key identifier: 76:E2:72:1A:B0:E3:AB:DB:80:78:ED:3C:37:BF:87:03:8F:2A:CA:0B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 371D2D008AE716F6E2EAF1441352EC1FF414955A
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214483.roa
Signing time: Wed 16 Sep 2026 04:34:18 +0000
ROA not before: Wed 16 Sep 2026 04:29:18 +0000
ROA not after: Wed 15 Sep 2027 04:34:18 +0000
asID: 214483
IP address blocks: 141.11.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1d:2d:00:8a:e7:16:f6:e2:ea:f1:44:13:52:ec:1f:f4:14:95:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 16 04:29:18 2026 GMT
Not After : Sep 15 04:34:18 2027 GMT
Subject: CN=76E2721AB0E3ABDB8078ED3C37BF87038F2ACA0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:20:0b:52:6d:dc:8d:94:81:16:3d:b1:26:
99:1b:69:0f:93:3a:75:98:b5:86:bc:a8:32:80:1f:
83:cb:19:04:ed:4e:ce:a8:85:59:38:9f:7d:46:8f:
ce:e7:e0:fe:51:40:e6:40:4e:d3:08:3c:3b:0c:df:
2d:d0:0a:77:02:68:c5:90:e4:7a:2e:75:f6:a3:23:
a4:3f:28:a8:fe:95:3c:a6:dc:f0:53:1d:b6:d9:6e:
05:e2:36:8d:1c:eb:8d:bd:0e:46:88:45:a6:24:f6:
a2:6c:71:ca:3a:e9:83:03:af:2d:8e:6f:05:62:93:
bc:31:3a:64:e7:aa:46:6d:f4:e7:1a:5b:06:55:ce:
99:e2:57:83:01:dd:45:e4:02:80:35:27:08:87:6b:
0f:1c:19:02:82:74:4f:f6:13:28:c0:6e:53:24:a7:
67:c9:c0:69:21:6c:54:a9:f5:0d:8e:81:0d:35:6e:
5e:59:dd:c4:91:e0:e4:d1:ed:6b:4b:a9:16:76:c7:
a7:d4:9e:71:96:8c:a6:bc:f6:ea:55:e1:c4:24:0e:
4b:f2:8e:f8:da:5a:0d:81:db:44:b8:eb:6d:c0:a7:
13:60:e4:ef:91:f2:4b:d5:02:dc:f1:f9:a2:80:d4:
91:44:d4:25:70:92:c7:af:9e:1f:55:1e:d3:1b:5f:
f4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E2:72:1A:B0:E3:AB:DB:80:78:ED:3C:37:BF:87:03:8F:2A:CA:0B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.56.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ff:89:93:3b:a5:ab:e0:b5:47:de:2c:1b:2c:37:cd:75:15:
7e:cd:55:84:89:70:1a:d8:e7:f0:4f:d5:dc:24:52:4a:03:92:
6a:da:8f:de:c5:58:72:29:58:1d:a0:5a:57:07:98:9c:6a:09:
a8:c9:76:48:c4:17:1e:c2:b1:6b:69:fd:f0:54:7a:63:4b:19:
5a:cc:b3:f3:21:46:60:e2:3d:4d:6a:67:85:5d:c2:c0:e4:b3:
dd:56:3d:28:52:ed:4c:ef:d0:9e:2a:56:7e:ca:ee:be:c2:6d:
c0:40:d2:fc:88:93:bb:64:56:6a:ca:c5:57:8d:7a:45:70:e9:
b2:a5:58:16:74:63:a5:d3:c4:94:a7:bd:b9:0a:22:ff:e4:c2:
b1:3e:49:ca:c5:8f:a4:10:eb:3b:08:6f:15:5d:dc:56:dd:6c:
00:80:0b:1b:79:b6:4c:cd:70:c2:ba:b5:af:84:31:82:41:24:
e2:f8:3d:18:96:67:90:6b:e7:b9:c0:47:08:cc:d7:cc:82:5f:
28:da:69:e7:f3:6a:49:13:33:be:82:43:b8:30:51:69:e5:c7:
1c:ef:0b:48:08:ed:5b:fc:97:3f:0b:7f:ed:69:33:aa:ab:a1:
0e:4b:14:b9:b8:0f:7c:5b:2d:e9:03:15:77:14:1f:20:8e:b6:
c5:28:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:28:51 2026 by rpki-client