Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214677.roa
File: AS214677.roa (raw, json)
Hash identifier: HYSzKhQAC/iANpaUU2RL57bqBm672gb5135E4iS6BPQ=
Subject key identifier: 9B:17:F7:23:A6:9E:29:5A:2A:E5:72:86:47:53:DD:96:EF:23:51:05
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3AE1CFC8E54C95A5F944C7B4CD69456AD5D452B6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214677.roa
Signing time: Sun 20 Sep 2026 00:01:07 +0000
ROA not before: Sat 19 Sep 2026 23:56:07 +0000
ROA not after: Sun 19 Sep 2027 00:01:07 +0000
asID: 214677
IP address blocks: 95.135.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e1:cf:c8:e5:4c:95:a5:f9:44:c7:b4:cd:69:45:6a:d5:d4:52:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 19 23:56:07 2026 GMT
Not After : Sep 19 00:01:07 2027 GMT
Subject: CN=9B17F723A69E295A2AE572864753DD96EF235105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3e:1c:79:13:8e:cf:9d:72:6f:2f:a7:88:86:
83:6c:97:35:e7:c0:e8:69:de:6b:da:95:2b:87:28:
56:dc:c1:19:b9:41:6c:27:a7:f9:74:e5:18:fe:47:
ed:d7:1b:23:12:cd:3e:48:a7:0d:36:dd:62:b1:80:
7c:d7:b3:34:13:c5:bc:e1:9e:3d:35:5e:67:d3:c2:
f9:be:9d:37:58:91:f6:56:5a:b5:61:db:56:6b:ba:
7a:a6:bb:84:fc:a4:f0:2c:87:fc:c1:5e:32:34:90:
93:11:7f:f5:e3:14:3f:57:e2:59:ef:98:7d:cc:9f:
0d:e5:d2:35:e5:56:36:1f:27:52:1f:52:e2:49:f1:
07:0b:38:fc:25:a9:8e:f3:ba:4d:e3:83:d4:5a:74:
6b:9f:9c:ba:66:32:35:19:90:bc:d0:23:99:da:cf:
da:dc:b7:a2:fb:bf:10:cf:2c:7a:9a:c2:78:5f:59:
0b:64:b4:52:4e:10:49:11:43:06:60:f7:9d:b1:07:
65:63:26:8c:05:36:d2:2f:13:c0:25:77:94:14:36:
0c:73:92:a7:fa:f1:0c:9e:f3:75:f6:ee:d8:f7:4c:
3c:07:9d:4c:cd:e7:b4:3a:f7:55:3b:e3:5e:cd:3e:
04:4c:6a:e8:e7:d0:02:06:af:91:f0:b1:65:01:b6:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:17:F7:23:A6:9E:29:5A:2A:E5:72:86:47:53:DD:96:EF:23:51:05
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.208.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c9:63:02:4b:92:5a:f7:56:db:81:8c:8e:42:df:5d:31:97:
a2:b1:4d:de:80:01:b4:21:36:6e:2b:c4:b1:a4:76:ea:0b:14:
6c:96:54:c7:8d:cf:8a:33:c0:b7:5c:41:81:9c:97:b4:9e:59:
57:7a:cb:1f:69:20:31:fd:f8:4b:69:ba:bf:0b:43:64:86:20:
c5:a3:b1:7f:aa:b5:35:73:2f:f3:af:61:96:c2:f0:4c:70:b8:
8b:b0:24:56:dd:9c:5d:07:62:6d:03:21:28:10:80:9f:4d:1a:
eb:78:51:25:fe:e3:0f:b8:99:6b:61:1d:eb:7f:a2:04:47:02:
05:3c:67:78:59:11:73:15:30:a5:02:b3:02:e1:04:c9:5e:4b:
76:54:d5:90:f0:a7:73:c2:f9:70:16:18:7a:92:27:db:4e:d2:
38:aa:d3:36:11:8b:03:d3:35:6a:e7:84:2e:10:28:20:21:b4:
c0:9a:2b:51:aa:0d:84:71:5c:72:da:08:74:c2:7a:01:69:bc:
87:6b:14:f0:95:ce:8e:76:10:00:fe:8e:b8:88:29:9c:79:c3:
a3:66:7e:8c:4c:23:32:ee:d6:dd:d2:3f:e9:a2:54:53:2b:22:
a4:44:52:6a:aa:84:81:b4:71:66:68:ec:67:66:fb:77:c3:a1:
85:08:d1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:13:04 2026 by rpki-client