Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214937.roa
File: AS214937.roa (raw, json)
Hash identifier: q/VWO4AdvNf7o4jYjXyMTBu3yIpHk2vMBKxdpjhdXn0=
Subject key identifier: 8A:7D:A6:B4:08:6F:09:C1:98:CB:9A:8F:F7:61:E5:AB:2D:C7:61:C8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1FF10233B3D89801D95D1B307E5AEE064C49F0AD
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214937.roa
Signing time: Thu 31 Jul 2025 09:26:56 +0000
ROA not before: Thu 31 Jul 2025 09:21:56 +0000
ROA not after: Thu 30 Jul 2026 09:26:56 +0000
asID: 214937
IP address blocks: 178.92.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f1:02:33:b3:d8:98:01:d9:5d:1b:30:7e:5a:ee:06:4c:49:f0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 31 09:21:56 2025 GMT
Not After : Jul 30 09:26:56 2026 GMT
Subject: CN=8A7DA6B4086F09C198CB9A8FF761E5AB2DC761C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:07:35:04:af:df:00:3e:12:3b:f6:cf:04:9f:
a0:f2:7a:53:82:88:b1:d2:ea:e0:96:f0:4a:f2:5c:
c4:27:9a:6f:7c:0b:f7:33:58:d5:cb:a8:a9:fe:69:
27:dd:da:a2:06:cd:5f:0e:12:b7:4e:06:fb:3d:2f:
1a:64:4d:14:97:75:aa:fb:db:74:38:24:c1:29:d4:
37:ca:ac:37:b9:15:c9:09:18:f9:42:7c:d6:39:22:
07:31:d6:05:0f:fb:41:43:e5:23:55:9a:ba:b2:86:
5e:b4:81:98:88:0d:a1:78:41:69:74:a3:89:37:07:
81:de:d5:3b:b5:de:d3:51:68:2a:bb:4d:7c:9e:7c:
39:b3:75:bf:0e:91:79:a2:f2:0f:dd:4d:5f:32:3e:
52:22:92:58:be:64:54:af:3e:b8:42:5b:ac:74:68:
cf:8c:c9:29:4b:53:f4:5f:54:7a:8a:35:11:be:c8:
b3:89:27:f4:11:2e:4a:3c:30:8d:f9:48:0d:a7:b4:
f1:bd:5e:cc:09:81:69:1c:91:15:b5:be:da:35:52:
ae:12:2b:e2:41:ea:43:90:0d:f2:3f:ee:2e:23:e1:
03:c9:4e:25:d9:cb:c1:2e:1c:c4:8b:d3:74:21:2f:
9d:c9:8f:1e:24:d4:9e:2a:0e:e3:33:f1:e9:5b:64:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7D:A6:B4:08:6F:09:C1:98:CB:9A:8F:F7:61:E5:AB:2D:C7:61:C8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.0.0/24
Signature Algorithm: sha256WithRSAEncryption
88:cf:e2:6f:6e:00:49:9e:26:64:06:94:f7:1b:54:9d:bd:83:
22:73:cc:cc:d5:ee:29:24:0b:7d:88:d6:60:46:e9:9f:db:0f:
e5:a6:83:b5:16:68:a7:eb:2c:16:5f:81:70:5d:21:30:9b:6b:
69:ee:66:4e:62:49:83:eb:65:a7:f2:96:2f:36:83:34:11:cf:
c5:58:ee:7c:83:ea:3c:47:4f:4b:56:76:de:46:db:53:ff:92:
3a:99:6c:dd:49:b8:05:ce:30:46:c6:d4:07:15:73:da:ce:05:
ef:42:ee:a6:b5:c2:23:0a:3f:d8:d4:63:63:d5:1e:cc:1b:9e:
ba:75:e2:7c:1e:ce:d4:9a:0d:3e:fa:93:f7:fb:91:b5:70:bc:
ad:4f:e6:06:4e:fc:9c:f0:08:c3:d2:d1:83:38:63:bc:90:d9:
79:25:67:71:96:7b:37:cf:29:26:29:a6:92:0b:13:76:ac:e5:
98:03:24:23:27:f5:87:9a:00:f7:b0:70:af:3a:16:bf:b0:6e:
c7:5d:c5:52:68:05:53:21:ba:49:a0:83:1a:cd:b1:c3:87:0a:
1a:ed:fd:69:ff:e0:89:f0:1c:96:24:ba:53:ed:ae:36:ce:e0:
cf:6d:18:94:3e:d1:9f:1c:e9:6f:d2:73:7f:eb:07:72:a8:0b:
e1:25:50:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:55 2025 by rpki-client