Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214647.roa
File: AS214647.roa (raw, json)
Hash identifier: EB8tOViwA3E8zGtxOoBjBjb6uiM5gwX4pgM457eMVNY=
Subject key identifier: D5:5C:C8:3E:DA:E4:BC:1B:25:C1:7A:A2:EA:BB:21:50:86:EF:8D:36
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7D4E75197C65B167E1710A63B2759BF6309DB2E0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214647.roa
Signing time: Thu 01 Oct 2026 11:13:05 +0000
ROA not before: Thu 01 Oct 2026 11:08:05 +0000
ROA not after: Thu 30 Sep 2027 11:13:05 +0000
asID: 214647
IP address blocks: 143.14.92.0/24 maxlen: 24
143.14.122.0/24 maxlen: 24
155.117.38.0/24 maxlen: 24
155.117.137.0/24 maxlen: 24
167.148.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 03:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4e:75:19:7c:65:b1:67:e1:71:0a:63:b2:75:9b:f6:30:9d:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 1 11:08:05 2026 GMT
Not After : Sep 30 11:13:05 2027 GMT
Subject: CN=D55CC83EDAE4BC1B25C17AA2EABB215086EF8D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:31:8b:31:ce:4c:31:d1:ff:6a:af:9c:38:
f9:4d:15:02:af:6b:b9:99:27:01:85:30:d7:b5:80:
27:5a:2b:ea:3b:83:e1:9d:5f:dc:6f:e6:6a:1e:56:
cb:53:e9:c6:e8:f7:38:eb:92:72:e0:d8:95:17:1e:
8d:96:17:bf:3a:dc:3f:98:7d:2d:c1:12:d7:62:0b:
8f:72:8e:31:f2:4e:a9:83:c6:80:73:d4:3c:64:1b:
9a:38:89:0d:ff:02:f8:a2:fd:37:30:2c:b7:21:53:
43:cf:d3:12:00:10:e7:97:7d:d5:67:d9:66:51:4f:
75:3c:a2:27:ee:34:74:0b:54:71:ae:a8:3b:ae:7d:
09:c2:8c:de:7c:82:38:bb:27:42:5b:78:59:5a:90:
12:28:73:b4:02:e3:ea:35:fb:37:29:2c:6b:2d:cb:
39:ba:78:83:35:d0:3b:43:58:07:a8:9a:47:7a:01:
8c:52:b3:d5:77:b9:5b:e0:ca:7c:c1:5d:a2:b4:31:
12:85:0e:df:03:28:54:6a:b1:35:ab:c6:90:9c:d4:
a7:34:5d:1e:d5:42:68:d4:45:a3:e7:06:51:b8:e1:
66:a7:d9:86:09:dc:51:2c:42:f8:3b:bc:f9:db:f1:
04:86:64:04:f6:3f:1a:ee:92:8e:e3:6a:7a:29:8e:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5C:C8:3E:DA:E4:BC:1B:25:C1:7A:A2:EA:BB:21:50:86:EF:8D:36
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.92.0/24
143.14.122.0/24
155.117.38.0/24
155.117.137.0/24
167.148.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:99:b2:21:0e:e3:c6:d1:ca:da:35:2a:f7:35:24:cd:98:f2:
a8:d8:b2:95:3d:bd:99:2d:5c:c0:d2:65:68:09:0a:f5:5b:32:
04:3c:15:8f:0f:59:45:48:74:7b:ea:93:be:0d:06:00:13:51:
41:82:e1:c7:9e:09:0c:0f:16:9a:e3:11:ce:62:ab:30:66:0d:
fc:6c:84:3b:7f:0c:82:b0:ec:02:37:22:a2:aa:e1:64:6d:98:
41:44:1b:f4:eb:88:45:0f:df:53:06:1e:1a:23:2d:64:d5:56:
7e:ff:c4:5f:89:fd:9c:5b:ac:da:d7:10:20:2b:64:05:e5:78:
40:7c:a7:cf:52:73:69:ff:cb:63:60:74:e7:52:44:f6:2c:96:
2b:ed:88:3a:23:3e:83:92:42:2a:2c:82:3b:fb:ec:20:9d:43:
07:83:61:18:c5:24:fc:bd:61:bb:74:3a:50:97:43:0e:ad:5b:
de:15:35:da:6c:eb:1c:50:2a:36:a0:0e:bb:ae:9c:fa:f5:73:
35:16:b8:dc:cd:65:4a:49:9c:a7:7c:29:19:7f:88:2b:55:7e:
7c:5d:41:f2:44:e0:eb:86:3b:cf:27:ba:21:62:ed:83:2a:4f:
c4:c8:c6:15:ae:d0:d3:0f:41:db:2c:79:90:2a:4e:84:65:51:
27:07:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 14:40:06 2026 by rpki-client