Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214647.roa
File: AS214647.roa (raw, json)
Hash identifier: wei8w8t114km33CqAJao3fDIBK9gfjripDdDvTctmTs=
Subject key identifier: BC:DD:D8:73:6F:41:F1:84:00:B5:E5:06:53:F3:76:D7:AF:08:E1:19
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: CADF898DC9FF1CDCD7D0FC8F1AB4E1DED9CC43
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214647.roa
Signing time: Mon 22 Jun 2026 14:26:09 +0000
ROA not before: Mon 22 Jun 2026 14:21:09 +0000
ROA not after: Mon 21 Jun 2027 14:26:09 +0000
asID: 214647
IP address blocks: 140.150.227.0/24 maxlen: 24
143.14.122.0/24 maxlen: 24
143.14.198.0/24 maxlen: 24
146.103.57.0/24 maxlen: 24
155.117.137.0/24 maxlen: 24
155.117.201.0/24 maxlen: 24
162.141.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ca:df:89:8d:c9:ff:1c:dc:d7:d0:fc:8f:1a:b4:e1:de:d9:cc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 22 14:21:09 2026 GMT
Not After : Jun 21 14:26:09 2027 GMT
Subject: CN=BCDDD8736F41F18400B5E50653F376D7AF08E119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:d0:5d:8e:12:d7:90:cf:d0:0b:b9:5a:8e:
2a:9c:86:12:cc:38:60:7d:e6:38:fe:bb:63:1e:68:
e6:74:62:95:04:e8:d5:ed:35:c9:c3:f7:30:94:2e:
f6:3e:f6:89:2c:a1:c4:1f:34:af:b4:e3:3d:1e:2f:
8a:07:f8:fd:cd:05:27:70:04:ae:36:cb:a7:79:9b:
85:09:9f:c8:7a:a0:61:51:89:91:64:4c:d1:f5:44:
53:dc:8f:e0:68:c5:db:35:a7:cd:20:88:36:d2:f7:
2b:87:f1:82:d0:8f:6c:79:1a:51:62:47:25:d3:dc:
3d:40:c9:8b:4d:0f:c9:24:af:67:e4:07:5f:43:84:
90:89:08:df:3d:4e:ee:5f:01:02:db:f1:9b:45:8c:
af:2f:88:47:3f:ee:d8:62:47:3d:6c:0b:1d:80:36:
82:c5:ba:b7:38:fd:d9:36:6c:c6:6e:cf:3a:57:79:
06:ac:72:bb:4e:29:3c:da:d4:35:63:41:e8:89:65:
5e:3a:4a:5c:31:c8:5b:c9:64:6d:15:e2:e6:a9:72:
55:c5:47:21:33:08:1c:c8:ff:ff:02:5a:c6:b6:ab:
79:91:fa:e7:69:56:6e:b8:5a:a5:d6:ae:7e:2f:f0:
f3:7b:b1:97:43:d5:44:14:1b:38:00:ab:2a:3a:15:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DD:D8:73:6F:41:F1:84:00:B5:E5:06:53:F3:76:D7:AF:08:E1:19
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.227.0/24
143.14.122.0/24
143.14.198.0/24
146.103.57.0/24
155.117.137.0/24
155.117.201.0/24
162.141.39.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d9:8f:7c:45:71:40:84:e7:60:87:2f:45:ce:8c:70:87:35:
26:3c:f1:ab:98:b4:3b:ee:04:da:79:50:08:40:5d:be:48:ef:
4c:05:8e:81:a1:9b:ce:09:88:0c:1b:42:07:8d:46:4b:11:ab:
39:4c:5e:99:9a:d2:22:83:56:de:eb:d0:c0:71:ad:7c:b4:ff:
61:92:1a:1b:56:1a:a4:76:60:72:b4:d6:ca:8a:a9:5f:79:98:
fb:ec:84:ed:e6:cb:5b:64:f0:57:d8:aa:fe:85:74:cb:f1:65:
14:00:01:2a:72:8b:b0:30:11:69:7f:26:6b:27:41:d2:47:7b:
f3:34:d7:40:07:20:bf:85:ba:e4:0b:83:2d:61:73:14:3c:46:
4e:bc:de:b7:61:a4:d7:24:75:39:99:3c:0f:a9:88:fb:fa:61:
4f:7f:cc:8e:24:f8:68:e9:46:06:07:5e:e9:6b:0f:20:10:01:
ce:e1:b3:16:fc:be:20:c6:7e:65:61:a5:63:10:1f:08:47:d7:
03:eb:ab:12:bf:0a:47:af:2c:19:48:7c:55:85:3a:4f:9b:c3:
43:67:a6:c8:c9:f2:a5:69:f9:b8:d2:b1:f0:a2:af:d0:f8:c4:
0a:1a:92:ea:3c:b0:52:c8:b2:92:29:a9:ef:08:4e:54:c5:e0:
99:01:ef:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:13 2026 by rpki-client