Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214913.roa
File: AS214913.roa (raw, json)
Hash identifier: SBgGQSdTMpkTiDgj64vb7BH9Z+rfnmtonUQ8kgJDGzw=
Subject key identifier: B7:F0:F2:35:F2:41:DC:4E:D0:FA:48:AC:36:C0:D4:DB:8A:FF:BC:5D
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2DF7D56F00127A07E112B97532982548AA0E83A0
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214913.roa
Signing time: Sat 25 Jul 2026 18:49:14 +0000
ROA not before: Sat 25 Jul 2026 18:44:14 +0000
ROA not after: Sat 24 Jul 2027 18:49:14 +0000
asID: 214913
IP address blocks: 143.20.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f7:d5:6f:00:12:7a:07:e1:12:b9:75:32:98:25:48:aa:0e:83:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 25 18:44:14 2026 GMT
Not After : Jul 24 18:49:14 2027 GMT
Subject: CN=B7F0F235F241DC4ED0FA48AC36C0D4DB8AFFBC5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:ec:23:77:57:e7:3e:2c:af:6a:a6:87:ec:
5a:c5:b0:a2:5a:46:64:da:01:a8:8a:67:55:90:0b:
0d:69:2a:1e:7d:f7:fd:02:3a:82:77:69:c9:35:77:
9a:81:0a:ef:ba:e0:bc:f8:37:61:8b:b8:c9:45:fe:
fc:da:25:d7:2b:ee:08:de:07:36:c2:b1:11:74:3e:
76:9d:1b:0f:39:7e:36:bf:9b:40:5d:47:f9:60:74:
82:cf:c6:90:66:db:21:7c:8d:d3:70:cc:36:b9:45:
dd:49:9b:f6:86:d5:e1:0b:a3:db:02:7b:1f:38:50:
01:15:f0:a6:3b:d4:af:0e:e0:28:81:d9:d5:1e:00:
c9:4e:24:b0:87:4d:8b:bd:56:4a:fa:14:10:90:64:
5a:78:6a:c9:1e:1b:ab:15:af:58:7b:36:d0:95:2d:
f9:71:d1:7c:f4:36:4c:6c:b9:c5:cb:f2:59:7f:00:
bc:f8:7b:01:dd:09:4d:c0:0a:de:77:e2:26:56:d9:
05:23:11:18:3c:4f:d0:06:39:45:4d:b1:c3:a6:6d:
de:bf:1e:0c:3b:29:a5:e2:ec:1c:a7:76:eb:96:80:
6f:d4:6a:3d:40:f0:54:17:2c:ba:b0:80:c7:24:7f:
66:48:a4:df:46:3b:5c:38:9b:fd:76:bc:60:6e:e5:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F0:F2:35:F2:41:DC:4E:D0:FA:48:AC:36:C0:D4:DB:8A:FF:BC:5D
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.12.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0e:78:d6:14:d1:14:c6:9c:96:32:6b:09:66:62:4b:64:0b:
31:ed:dc:37:ff:af:98:2b:71:3f:2d:db:25:56:92:b0:00:48:
2b:52:34:83:db:68:ea:ea:9a:32:d2:fc:7b:be:42:b6:0e:cd:
74:da:10:a3:92:0e:e2:4d:b8:73:a5:60:d0:5f:24:99:93:fe:
d9:5b:ea:bb:29:0a:36:67:34:d5:dc:c0:1b:92:20:e1:4b:f7:
fe:33:11:a8:1e:d8:5b:5e:a4:4d:4e:36:76:79:6d:84:be:01:
03:29:be:32:8f:52:05:35:c0:8b:ea:a3:ec:21:ae:be:d3:43:
ac:b4:23:cd:78:93:d4:4a:93:6e:b8:07:4a:5e:d2:a6:26:4c:
3a:14:6d:33:fa:1a:f8:a8:d5:e5:47:99:90:4a:10:4a:5c:ea:
fd:a1:41:94:fc:59:96:d5:b4:7b:02:17:b9:a7:2b:df:d4:a7:
69:58:99:7e:ca:29:77:e6:83:60:93:bd:0a:5e:66:6d:d7:e2:
0e:07:cd:ff:1e:af:c0:18:6c:9f:63:e9:6f:32:20:73:b9:f1:
bf:c0:c8:df:c0:25:62:57:50:3b:48:f4:30:81:99:60:aa:8e:
21:95:82:a0:b0:70:29:42:f2:69:ae:ed:27:cc:8f:d7:07:54:
86:1f:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:41:17 2026 by rpki-client