Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214640.roa
File: AS214640.roa (raw, json)
Hash identifier: 1rTFEjpN6VWSGkU4Neg1OEMLu9pA4vPle3bdyj3EoV4=
Subject key identifier: FA:DC:24:C4:79:0A:B1:61:4A:27:20:44:2B:AE:9B:25:03:1E:6B:4B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 28F6B3E792459B996E440008331EAD391A79D37E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214640.roa
Signing time: Tue 30 Jun 2026 12:19:51 +0000
ROA not before: Tue 30 Jun 2026 12:14:51 +0000
ROA not after: Tue 29 Jun 2027 12:19:51 +0000
asID: 214640
IP address blocks: 143.14.22.0/24 maxlen: 24
143.14.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f6:b3:e7:92:45:9b:99:6e:44:00:08:33:1e:ad:39:1a:79:d3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 30 12:14:51 2026 GMT
Not After : Jun 29 12:19:51 2027 GMT
Subject: CN=FADC24C4790AB1614A2720442BAE9B25031E6B4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:f0:57:57:6b:ac:ef:75:69:86:06:77:b1:
da:4a:6c:ed:f4:8c:14:e2:8f:d4:0f:40:94:c4:da:
6e:00:51:c8:c9:ed:3a:21:5c:07:1e:11:ec:33:8a:
d1:45:0c:96:7c:0d:b5:11:6a:ef:04:8f:60:b2:a4:
c4:51:f7:10:81:dc:ae:3a:14:95:b5:f5:b3:3a:05:
e4:68:bd:17:36:73:ee:5f:2c:8a:98:59:bd:d6:b0:
02:e2:10:d3:e1:6e:2f:d2:02:55:52:45:10:1f:50:
fc:0d:cb:f5:3d:d2:a7:14:27:4a:3a:4b:dc:98:68:
d4:a5:26:a6:f1:01:5a:97:43:53:d8:9c:c8:6d:d9:
64:d1:03:04:7a:83:09:1d:8b:29:4e:e1:25:fe:2b:
65:1b:ba:55:18:b6:16:5e:b8:12:8f:de:fa:a7:f1:
14:9f:02:ab:5c:37:67:44:6f:21:5b:89:e2:f0:d6:
b5:c3:31:63:04:f3:b0:f0:8b:b2:62:5a:9b:4e:85:
0b:2a:2e:cc:21:62:aa:f7:3a:f8:d5:3d:df:ce:c8:
94:e1:ec:ff:2e:dd:bc:ac:62:7c:a5:1b:8b:3a:e2:
1e:d3:a9:3b:c4:03:fb:eb:0c:ff:9e:7e:17:4f:d3:
0a:19:5c:a2:73:cd:dd:bb:19:d1:fd:1c:8a:b1:f2:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:24:C4:79:0A:B1:61:4A:27:20:44:2B:AE:9B:25:03:1E:6B:4B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214640.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.22.0/24
143.14.50.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7d:63:9e:bd:4f:79:e8:d6:70:70:5b:c7:d5:39:c6:5b:34:
37:9a:27:62:12:68:4a:ef:a4:5d:1f:46:6e:07:7e:83:a8:cb:
8e:9b:32:a6:d6:ba:e0:f6:3a:ee:06:93:39:60:53:fd:b0:05:
c7:d6:cf:0c:73:fe:78:9f:80:f4:60:7a:2a:aa:d9:ed:ff:36:
95:3e:07:64:93:64:31:2c:b7:54:00:80:0f:29:d4:2d:97:9c:
7e:ec:b2:76:9b:25:6b:51:b2:41:7c:39:19:bf:f9:63:76:f7:
ee:cd:34:40:38:29:40:56:32:d9:a9:af:3d:4c:d2:86:0b:d4:
d2:66:03:4a:fb:f7:2c:ac:9d:65:f8:1e:bc:34:c2:d4:9e:5e:
37:f3:ed:a6:a1:a2:71:26:cd:1a:ed:18:15:4a:8c:70:76:ab:
37:c5:d3:b1:3a:f3:7b:5a:1f:a5:de:ac:90:d2:e8:f8:8b:86:
85:44:1b:0d:e4:0f:24:83:ea:87:13:99:ff:cb:21:e8:77:42:
b8:a3:d0:35:a8:a6:a7:34:05:94:4b:fc:27:eb:1f:36:d4:2e:
4b:5a:73:97:af:91:d5:ff:ee:e1:a2:b5:e3:e0:56:9c:b4:a4:
96:f8:92:bb:00:eb:c8:c9:35:3b:a1:a9:6f:ac:58:06:13:ee:
76:ba:6f:3c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUKPaz55JFm5luRAAIMx6tORp5034wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MzAxMjE0NTFaFw0yNzA2MjkxMjE5NTFaMDMxMTAvBgNV
BAMTKEZBREMyNEM0NzkwQUIxNjE0QTI3MjA0NDJCQUU5QjI1MDMxRTZCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6vBXV2us73VphgZ3sdpKbO30
jBTij9QPQJTE2m4AUcjJ7TohXAceEewzitFFDJZ8DbURau8Ej2CypMRR9xCB3K46
FJW19bM6BeRovRc2c+5fLIqYWb3WsALiENPhbi/SAlVSRRAfUPwNy/U90qcUJ0o6
S9yYaNSlJqbxAVqXQ1PYnMht2WTRAwR6gwkdiylO4SX+K2UbulUYthZeuBKP3vqn
8RSfAqtcN2dEbyFbieLw1rXDMWME87Dwi7JiWptOhQsqLswhYqr3OvjVPd/OyJTh
7P8u3bysYnylG4s64h7TqTvEA/vrDP+efhdP0woZXKJzzd27GdH9HIqx8tenAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU+twkxHkKsWFKJyBEK66bJQMea0swHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE0NjQwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjw4W
AwQAjw4yMA0GCSqGSIb3DQEBCwUAA4IBAQCIfWOevU956NZwcFvH1TnGWzQ3midi
EmhK76RdH0ZuB36DqMuOmzKm1rrg9jruBpM5YFP9sAXH1s8Mc/54n4D0YHoqqtnt
/zaVPgdkk2QxLLdUAIAPKdQtl5x+7LJ2myVrUbJBfDkZv/ljdvfuzTRAOClAVjLZ
qa89TNKGC9TSZgNK+/csrJ1l+B68NMLUnl438+2moaJxJs0a7RgVSoxwdqs3xdOx
OvN7Wh+l3qyQ0uj4i4aFRBsN5A8kg+qHE5n/yyHod0K4o9A1qKanNAWUS/wn6x82
1C5LWnOXr5HV/+7horXj4FactKSW+JK7AOvIyTU7oalvrFgGE+52um88
-----END CERTIFICATE-----
Generated at Mon Jul 20 18:34:09 2026 by rpki-client