Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214654.roa
File: AS214654.roa (raw, json)
Hash identifier: m0bgrW2Aqpb6PsiCt7spCgq3HUWgS14rF1MWJCHXT5s=
Subject key identifier: 6D:4B:13:92:C6:63:03:C7:7E:A7:92:75:7C:65:66:57:99:4F:B0:6E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0C6F49135413B053E296405DCAC55FDEF56BC19F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214654.roa
Signing time: Tue 21 Oct 2025 16:20:22 +0000
ROA not before: Tue 21 Oct 2025 16:15:22 +0000
ROA not after: Tue 20 Oct 2026 16:20:22 +0000
asID: 214654
IP address blocks: 46.203.33.0/24 maxlen: 24
46.203.98.0/24 maxlen: 24
46.203.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6f:49:13:54:13:b0:53:e2:96:40:5d:ca:c5:5f:de:f5:6b:c1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 21 16:15:22 2025 GMT
Not After : Oct 20 16:20:22 2026 GMT
Subject: CN=6D4B1392C66303C77EA792757C656657994FB06E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:dd:7b:ab:7c:e7:01:94:8b:71:35:24:05:
f0:66:c4:17:d9:ee:d3:f9:2e:22:a8:f0:45:9e:39:
fe:2e:a6:f5:47:69:2f:f5:37:e6:02:ef:ec:c0:47:
00:51:dd:61:d0:83:00:b0:8d:4b:3d:da:1c:d8:c1:
bb:99:87:b2:07:7e:e8:b6:d7:04:20:0a:c6:18:29:
3f:6d:ab:74:c7:a5:a2:1a:67:6d:9e:81:36:88:de:
3d:a1:fb:4c:06:5b:6d:af:6c:5a:62:ee:66:ac:90:
59:ff:d6:08:0a:89:99:1c:af:22:56:a0:bd:e6:03:
36:d0:06:04:3d:ef:a8:ef:cd:28:eb:40:b1:fc:b3:
9b:e3:9f:9d:c4:02:18:93:56:1f:85:fc:29:ec:c5:
54:e9:a8:fc:d1:0f:d2:89:da:aa:3e:29:4f:67:89:
f5:4e:2d:9b:d6:ae:e8:b4:fc:05:9d:53:19:15:30:
fc:24:a8:32:2b:c2:eb:06:73:ed:fb:1f:f7:15:26:
41:b2:a3:65:6e:62:51:14:0f:6e:1b:8c:ca:fe:b1:
e8:27:13:4a:d7:3e:80:99:15:37:3f:fc:be:3d:24:
16:52:79:59:55:65:52:13:f2:7b:42:4c:59:0d:19:
f9:0f:7e:fd:85:6e:ba:7a:8d:8e:a4:f0:50:15:07:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4B:13:92:C6:63:03:C7:7E:A7:92:75:7C:65:66:57:99:4F:B0:6E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.33.0/24
46.203.98.0/24
46.203.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:09:60:b1:df:ed:03:65:b9:4d:46:5d:f7:72:cf:1a:9c:d2:
06:4d:50:ef:3a:31:bf:d3:48:89:5a:e8:13:42:22:2a:b2:45:
25:c8:7a:fd:a1:b6:11:c0:3f:d6:8f:39:76:01:fd:81:3c:40:
bb:4c:59:40:4f:a7:0b:64:c6:06:a3:43:3c:fc:6b:ed:4a:ab:
5f:04:80:e6:9a:0b:7c:3f:c4:7d:b4:26:8d:51:3a:5b:87:ad:
de:cb:a8:43:dd:58:a9:6f:9c:15:cd:12:05:cb:d3:c0:a9:d8:
53:7b:dc:b7:09:f8:aa:9f:1e:56:2d:40:b2:bb:a2:50:13:79:
09:f4:8b:a8:1f:88:43:19:6b:72:de:33:27:f4:24:e4:ae:fd:
7a:2b:69:1c:36:90:55:31:3f:5f:2f:e7:a9:f2:0c:46:32:57:
24:7a:9b:2e:94:59:7e:78:93:72:5b:c4:fd:58:31:da:69:37:
6f:5a:7b:a1:2b:30:50:dc:fb:cd:66:88:49:43:9f:19:03:e9:
3d:48:5a:b2:49:6b:9b:fa:f6:60:af:af:70:4f:50:03:9d:3e:
43:fa:0d:9b:18:09:79:0d:08:23:ee:f5:d7:54:5e:02:61:5f:
23:2f:66:38:7a:a7:82:d9:39:08:9c:5a:46:a4:f3:56:71:c9:
84:90:00:23
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUDG9JE1QTsFPilkBdysVf3vVrwZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTEwMjExNjE1MjJaFw0yNjEwMjAxNjIwMjJaMDMxMTAvBgNV
BAMTKDZENEIxMzkyQzY2MzAzQzc3RUE3OTI3NTdDNjU2NjU3OTk0RkIwNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiIN17q3znAZSLcTUkBfBmxBfZ
7tP5LiKo8EWeOf4upvVHaS/1N+YC7+zARwBR3WHQgwCwjUs92hzYwbuZh7IHfui2
1wQgCsYYKT9tq3THpaIaZ22egTaI3j2h+0wGW22vbFpi7maskFn/1ggKiZkcryJW
oL3mAzbQBgQ976jvzSjrQLH8s5vjn53EAhiTVh+F/CnsxVTpqPzRD9KJ2qo+KU9n
ifVOLZvWrui0/AWdUxkVMPwkqDIrwusGc+37H/cVJkGyo2VuYlEUD24bjMr+segn
E0rXPoCZFTc//L49JBZSeVlVZVIT8ntCTFkNGfkPfv2Fbrp6jY6k8FAVB5aFAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUbUsTksZjA8d+p5J1fGVmV5lPsG4wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE0NjU0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALssh
AwQALstiAwQALsvLMA0GCSqGSIb3DQEBCwUAA4IBAQBuCWCx3+0DZblNRl33cs8a
nNIGTVDvOjG/00iJWugTQiIqskUlyHr9obYRwD/Wjzl2Af2BPEC7TFlAT6cLZMYG
o0M8/GvtSqtfBIDmmgt8P8R9tCaNUTpbh63ey6hD3Vipb5wVzRIFy9PAqdhTe9y3
Cfiqnx5WLUCyu6JQE3kJ9IuoH4hDGWty3jMn9CTkrv16K2kcNpBVMT9fL+ep8gxG
MlckepsulFl+eJNyW8T9WDHaaTdvWnuhKzBQ3PvNZohJQ58ZA+k9SFqySWub+vZg
r69wT1ADnT5D+g2bGAl5DQgj7vXXVF4CYV8jL2Y4eqeC2TkInFpGpPNWccmEkAAj
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:29 2025 by rpki-client