Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: dRqSwWfhetwfVpQeiRemTSt8c9ryvfTXEO6TSEXZdas=
Subject key identifier: E6:94:75:1F:E6:FD:31:9D:5D:01:0E:E2:99:CB:54:9E:22:BD:F7:54
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 20B7F787A06CF4A713EAAA0F1C761B47D64C442E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
Signing time: Mon 21 Jul 2025 00:01:10 +0000
ROA not before: Sun 20 Jul 2025 23:56:10 +0000
ROA not after: Mon 20 Jul 2026 00:01:10 +0000
asID: 214432
IP address blocks: 96.62.114.0/24 maxlen: 24
140.233.172.0/24 maxlen: 24
143.14.87.0/24 maxlen: 24
162.141.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b7:f7:87:a0:6c:f4:a7:13:ea:aa:0f:1c:76:1b:47:d6:4c:44:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 20 23:56:10 2025 GMT
Not After : Jul 20 00:01:10 2026 GMT
Subject: CN=E694751FE6FD319D5D010EE299CB549E22BDF754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:ed:0b:81:2c:4f:ff:e3:5d:01:d3:c4:76:
ab:4d:67:06:b8:e3:30:65:3d:92:fa:10:4e:16:03:
36:7d:87:85:43:ea:87:21:ad:cf:d6:90:75:fa:f2:
cd:73:e6:5e:15:28:ec:62:a1:1d:15:48:1d:c7:bf:
ad:70:0e:3b:a3:1a:43:0a:ef:c5:9b:64:17:29:95:
af:3e:39:f8:0b:de:67:0f:b2:b5:21:ee:e1:db:f1:
67:ab:36:c7:01:70:8d:f7:40:95:b2:3d:da:8d:3e:
f8:79:5d:b6:ff:dd:7d:a6:82:1e:7d:ea:0e:ef:ed:
d3:1e:0e:69:56:ee:ef:04:cc:9e:7c:4f:fd:cc:e7:
c8:6f:ac:6f:43:3b:0f:5c:de:5e:2e:ab:fa:bf:28:
e9:d5:8d:b9:5c:55:f7:5b:86:89:c9:0f:5a:aa:34:
56:e0:f0:8b:ea:7e:ea:7e:26:b8:b2:0c:bc:27:7d:
5c:97:81:f0:7d:d9:41:69:b3:7c:15:8c:4c:26:eb:
d3:26:2e:de:bf:9c:3f:09:bb:5a:b5:b1:97:7f:4c:
d6:8b:cb:e0:e0:13:84:34:a9:70:96:1a:11:07:9a:
cb:20:2c:54:26:61:40:91:73:73:5d:4d:0a:80:75:
b4:b8:9b:6d:89:69:34:2f:a2:2d:23:ae:1e:85:05:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:94:75:1F:E6:FD:31:9D:5D:01:0E:E2:99:CB:54:9E:22:BD:F7:54
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.114.0/24
140.233.172.0/24
143.14.87.0/24
162.141.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ad:e1:02:f3:a7:92:b5:bf:4f:4a:0f:dc:f1:6b:11:fc:2b:
fd:e8:0b:24:cf:3b:a4:40:0e:80:0a:57:61:d0:38:15:2d:e6:
6c:8c:e7:1a:15:ef:3b:9c:81:c2:18:7b:05:4b:ff:26:64:e7:
eb:2f:79:a6:fa:e0:24:78:6c:b9:26:07:a6:d6:95:55:00:95:
3d:f4:da:43:83:00:b0:6a:2d:cf:16:4c:01:a6:9c:7f:c3:39:
59:3b:13:3c:a6:cd:00:79:f4:e5:e8:37:08:c0:aa:89:57:5a:
69:74:49:6a:62:a9:ed:e1:66:85:21:ec:4c:3e:ef:f8:12:09:
a5:44:7b:4f:60:3b:6a:82:fe:4c:0d:d6:c3:0d:35:92:d8:df:
be:b9:42:eb:12:db:dc:e5:47:4d:00:4b:89:db:e5:d4:c7:fd:
b2:43:9d:9e:69:20:85:06:bf:a5:3e:9b:8d:01:d0:64:f8:22:
14:fb:8b:3e:8b:05:4e:aa:f9:7f:3b:a0:a0:57:ff:9e:b9:6a:
bd:47:59:12:85:a2:64:ef:96:fa:a0:03:c4:36:96:1f:8e:d1:
07:5d:ad:74:d5:ec:ba:bd:b1:58:28:12:bc:32:76:8c:fc:0a:
78:4a:b8:60:e3:b7:a3:8c:8e:60:48:ef:e5:f8:cd:0e:12:6e:
34:dd:a5:3d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUILf3h6Bs9KcT6qoPHHYbR9ZMRC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA3MjAyMzU2MTBaFw0yNjA3MjAwMDAxMTBaMDMxMTAvBgNV
BAMTKEU2OTQ3NTFGRTZGRDMxOUQ1RDAxMEVFMjk5Q0I1NDlFMjJCREY3NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI8e0LgSxP/+NdAdPEdqtNZwa4
4zBlPZL6EE4WAzZ9h4VD6ochrc/WkHX68s1z5l4VKOxioR0VSB3Hv61wDjujGkMK
78WbZBcpla8+OfgL3mcPsrUh7uHb8WerNscBcI33QJWyPdqNPvh5Xbb/3X2mgh59
6g7v7dMeDmlW7u8EzJ58T/3M58hvrG9DOw9c3l4uq/q/KOnVjblcVfdbhonJD1qq
NFbg8Ivqfup+JriyDLwnfVyXgfB92UFps3wVjEwm69MmLt6/nD8Ju1q1sZd/TNaL
y+DgE4Q0qXCWGhEHmssgLFQmYUCRc3NdTQqAdbS4m22JaTQvoi0jrh6FBagTAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQU5pR1H+b9MZ1dAQ7imctUniK991QwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE0NDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAYD5y
AwQAjOmsAwQAjw5XAwQAoo1MMA0GCSqGSIb3DQEBCwUAA4IBAQB7reEC86eStb9P
Sg/c8WsR/Cv96AskzzukQA6ACldh0DgVLeZsjOcaFe87nIHCGHsFS/8mZOfrL3mm
+uAkeGy5Jgem1pVVAJU99NpDgwCwai3PFkwBppx/wzlZOxM8ps0AefTl6DcIwKqJ
V1ppdElqYqnt4WaFIexMPu/4EgmlRHtPYDtqgv5MDdbDDTWS2N++uULrEtvc5UdN
AEuJ2+XUx/2yQ52eaSCFBr+lPpuNAdBk+CIU+4s+iwVOqvl/O6CgV/+euWq9R1kS
haJk75b6oAPENpYfjtEHXa101ey6vbFYKBK8MnaM/Ap4Srhg47ejjI5gSO/l+M0O
Em403aU9
-----END CERTIFICATE-----
Generated at Tue Jul 22 18:57:51 2025 by rpki-client