Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214159.roa
File: AS214159.roa (raw, json)
Hash identifier: tzvAgf8WfQQ32MdR4itpS3OHxDl8WlK4303cwgKr2Bw=
Subject key identifier: 11:71:FD:2B:FD:47:3E:24:6A:AD:23:4E:BF:31:AE:55:90:77:93:60
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0C3B33F802A9615337B0D3034478D2564342A0C8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214159.roa
Signing time: Tue 13 Oct 2026 12:55:37 +0000
ROA not before: Tue 13 Oct 2026 12:50:37 +0000
ROA not after: Tue 12 Oct 2027 12:55:37 +0000
asID: 214159
IP address blocks: 51.146.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3b:33:f8:02:a9:61:53:37:b0:d3:03:44:78:d2:56:43:42:a0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 13 12:50:37 2026 GMT
Not After : Oct 12 12:55:37 2027 GMT
Subject: CN=1171FD2BFD473E246AAD234EBF31AE5590779360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:83:e3:5e:0e:08:07:04:d9:09:86:74:78:
36:58:a6:0e:45:e3:90:8f:7a:9e:76:6b:20:72:f5:
80:b7:09:8c:12:69:83:96:b6:68:c4:15:27:ae:17:
1e:08:02:94:b4:71:49:a7:9a:d5:d6:52:b9:2e:43:
d7:6e:30:80:c2:da:06:fa:2a:7f:51:67:15:eb:21:
79:2d:23:17:b5:a7:76:f4:55:81:36:9a:6a:12:8d:
95:56:12:40:80:90:f2:fd:c2:b1:f6:bf:4e:e0:be:
7e:77:25:c3:7a:eb:6d:35:3d:80:76:2d:aa:96:78:
a7:a7:12:28:15:77:3c:4f:37:da:28:e8:6b:ed:23:
ea:d0:0d:51:e8:b8:36:3a:b3:36:53:50:e1:2d:75:
dd:87:be:79:9a:11:4c:20:45:ec:4f:cd:08:94:83:
87:74:42:96:68:07:cc:67:a1:c4:f7:e2:9f:fa:a2:
af:b3:07:a0:da:50:27:0f:e7:97:d0:a5:44:2d:60:
06:04:37:28:12:b3:22:c0:f7:5d:b9:76:e5:2d:e2:
83:66:88:fc:32:69:ca:b5:6a:df:c0:63:69:f3:7a:
ed:94:06:9b:83:01:ad:7c:85:37:1d:c0:23:05:ca:
6e:76:ed:c6:ae:5e:0f:e3:77:09:73:9a:7f:5a:90:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:FD:2B:FD:47:3E:24:6A:AD:23:4E:BF:31:AE:55:90:77:93:60
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214159.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.16.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ad:14:bf:03:7a:a5:b8:b5:34:b3:b7:93:16:ba:90:08:50:
a4:f8:d4:aa:29:03:c3:30:b6:e9:54:cc:89:bd:6c:50:9c:5f:
fe:1a:04:b9:62:c0:75:15:1c:96:ff:20:85:12:ca:00:82:d2:
71:6a:ae:b8:cb:5c:b9:ee:4e:bc:ec:c7:7e:67:e1:3e:52:88:
95:43:fc:02:e3:df:b0:73:f8:14:02:af:e5:2b:14:63:13:f0:
59:9c:cf:25:d7:70:52:71:99:40:66:55:89:13:b8:c9:d9:02:
50:eb:9b:9e:2c:b8:e1:a3:9e:bb:64:07:65:a2:58:82:6d:6d:
49:cb:08:33:26:85:22:47:38:fc:2f:9b:6b:6e:d8:e8:8c:a4:
39:be:f7:9b:64:b8:fd:a6:df:f7:40:60:dc:c3:63:34:ca:1e:
99:5e:62:7f:01:33:7b:40:10:e9:81:a9:0b:98:e7:e5:08:88:
92:f0:ec:b1:68:32:a1:ec:c5:3b:87:09:63:b9:00:fa:06:da:
7f:a2:45:77:f4:c8:ad:c0:c3:38:9f:08:c9:d6:92:6c:40:e2:
08:19:bf:fd:c9:cc:5c:17:ca:56:05:62:d5:dd:a4:29:f1:c0:
25:4e:dd:54:14:a8:a9:af:0d:3c:65:a9:95:33:99:4b:34:e4:
a2:b9:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 11:16:50 2026 by rpki-client