Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214716.roa
File: AS214716.roa (raw, json)
Hash identifier: 8lkhr+qkbKkQMsSDS9u2QIKa8bZQAwU2cIsXgTjfImg=
Subject key identifier: 86:89:48:17:41:32:11:7A:72:7A:B2:9C:DE:3A:F4:A4:DA:5E:CA:A3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 69911FB229E4F2FC0FD272B73B21BE2826C5B48F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214716.roa
Signing time: Fri 02 Oct 2026 19:11:28 +0000
ROA not before: Fri 02 Oct 2026 19:06:28 +0000
ROA not after: Fri 01 Oct 2027 19:11:28 +0000
asID: 214716
IP address blocks: 94.118.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:91:1f:b2:29:e4:f2:fc:0f:d2:72:b7:3b:21:be:28:26:c5:b4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 2 19:06:28 2026 GMT
Not After : Oct 1 19:11:28 2027 GMT
Subject: CN=868948174132117A727AB29CDE3AF4A4DA5ECAA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:d8:09:fe:04:b6:38:bb:61:64:f9:bd:19:
c6:b4:3c:3c:14:88:4d:ec:6d:08:8c:af:b9:96:1f:
d4:f3:77:dc:45:8c:cc:9e:4a:2b:90:cf:89:15:73:
e7:62:d3:eb:76:ac:ac:e6:5c:8b:c6:6c:08:a5:ea:
3a:d1:10:a2:dc:84:f4:e8:94:c7:aa:a4:fa:2b:70:
0a:35:31:02:5b:b9:57:9f:d5:76:26:dc:59:39:6e:
b8:8d:4d:e1:6b:fd:6e:d0:fc:41:ad:1d:e1:68:66:
52:24:6f:8a:8c:2f:b4:e9:42:f7:b4:0d:87:36:40:
4e:94:fc:a8:2d:41:99:9f:0b:59:27:0a:6a:25:17:
55:2c:70:7d:bd:8a:57:4e:6f:25:88:df:d6:eb:19:
9e:9e:23:50:27:4a:1c:33:1f:86:63:c8:9d:e7:a3:
87:a1:8a:e7:00:3f:5e:16:2d:5d:0c:fa:72:bd:5f:
d1:a5:33:a1:38:64:dd:37:a0:1a:2e:91:49:ba:cf:
ef:5d:84:a1:76:a1:4d:e7:a4:04:35:f7:5e:64:a9:
47:f2:ad:58:eb:b1:ed:96:d4:21:ff:89:2b:9b:d2:
f1:6e:c5:f1:43:15:15:5d:06:24:4f:d3:14:4b:1e:
81:db:9d:11:2b:2d:76:12:dc:f5:c2:f9:e0:9d:12:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:89:48:17:41:32:11:7A:72:7A:B2:9C:DE:3A:F4:A4:DA:5E:CA:A3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214716.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.160.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:62:4f:e8:9f:ac:b4:4e:1b:5e:61:0c:b5:4a:e8:df:ec:92:
39:71:3c:74:58:5c:99:05:95:7f:00:4e:71:a4:c1:fe:d8:89:
12:de:87:ad:98:60:27:28:50:52:34:1e:74:a2:f9:18:25:17:
21:9f:f4:f5:46:4e:cd:8e:06:30:f9:f5:71:e6:c9:8f:c6:2c:
1f:13:a1:50:5b:3d:c6:ef:74:e7:a3:14:e1:2c:2c:f7:2f:c1:
df:85:4a:de:8c:bf:26:b7:72:a6:34:24:39:d5:cf:31:b4:fc:
22:24:bf:98:0f:8c:61:af:ba:69:4f:5d:a0:c3:84:00:77:ee:
0e:c4:b4:17:80:35:a8:22:e0:64:c1:aa:ab:9a:16:8e:04:34:
02:77:d7:a3:d4:91:ed:6d:7a:f3:b1:50:45:7e:7e:2f:79:c7:
97:80:35:e9:13:03:02:67:21:5e:ce:82:a5:c4:f3:d5:1e:7c:
2a:fe:32:63:45:0f:81:cf:7a:c7:db:4e:05:62:cb:83:17:48:
45:02:a6:9d:bc:5a:a0:49:97:fe:4c:b2:e9:b8:f0:a4:70:9f:
12:6b:3a:b7:8f:19:40:1e:b9:66:9c:b8:d3:28:19:ec:c2:be:
96:3b:a6:b6:b6:d8:06:2d:fe:20:6a:62:16:7c:5f:14:a3:3f:
1c:50:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:24:19 2026 by rpki-client