Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214402.roa
File: AS214402.roa (raw, json)
Hash identifier: 7y5YlP2+J7h2MiFc3jm7KHugXhxuThMxYcVgzzBGHUY=
Subject key identifier: E0:01:42:B5:6A:DA:D0:54:33:50:4E:02:2F:6D:B9:D0:3D:13:76:87
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1A292C3AFED681DF2D5311B46E0B60D11F7702F9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214402.roa
Signing time: Sat 25 Oct 2025 11:54:37 +0000
ROA not before: Sat 25 Oct 2025 11:49:37 +0000
ROA not after: Sat 24 Oct 2026 11:54:37 +0000
asID: 214402
IP address blocks: 148.135.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:29:2c:3a:fe:d6:81:df:2d:53:11:b4:6e:0b:60:d1:1f:77:02:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 25 11:49:37 2025 GMT
Not After : Oct 24 11:54:37 2026 GMT
Subject: CN=E00142B56ADAD05433504E022F6DB9D03D137687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:19:ca:93:16:54:44:5d:67:be:b9:de:40:
23:8d:c8:a9:07:eb:db:fe:73:be:f5:52:2b:aa:c8:
29:04:79:ef:04:cc:b2:db:60:e6:7f:49:b2:84:5d:
af:3a:c9:fb:fe:3d:50:46:91:49:b9:8e:25:0a:5a:
18:11:4f:90:b2:c7:fc:04:6f:23:e7:75:bf:da:e8:
58:23:0a:3c:b4:f5:d4:f1:9a:e7:e2:27:b9:c2:ab:
1c:01:27:c4:c2:ca:c4:08:0c:f3:2e:67:a4:84:9d:
12:92:46:4a:f6:38:89:05:da:2b:3f:04:d8:86:a8:
83:a7:f2:d6:6c:04:bd:3b:a3:15:08:03:8c:0a:1d:
0d:81:09:48:1c:aa:6b:59:a8:08:09:88:42:b8:68:
9e:45:42:5e:57:70:a0:a1:b7:4b:47:2f:c4:70:24:
65:41:7b:71:0f:58:7d:b4:d5:dd:e4:a6:2c:12:d3:
9a:c7:6a:4d:d5:ac:9f:1d:26:5e:2e:bc:5f:52:47:
65:97:73:e1:32:bd:c0:e8:ea:c5:e4:2a:d6:d2:7c:
03:ae:59:55:ea:29:c4:9e:e6:6b:1f:84:0d:50:0f:
43:3b:3a:43:e1:d6:5a:1b:f9:90:57:56:9e:20:37:
e9:61:40:53:36:7f:fc:ab:89:0b:14:62:42:c2:76:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:01:42:B5:6A:DA:D0:54:33:50:4E:02:2F:6D:B9:D0:3D:13:76:87
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.199.0/24
Signature Algorithm: sha256WithRSAEncryption
01:20:7f:c6:18:16:0d:d9:18:f4:f6:5b:88:8b:71:0e:d5:13:
ee:97:0f:e6:03:e1:b6:58:e9:b8:dc:ab:7c:4f:80:90:b8:b9:
f4:18:c5:0c:e9:c6:99:8d:c7:7d:3c:fa:78:15:b2:45:0a:57:
7f:97:d0:82:f8:af:bb:98:14:2d:2b:86:6b:7c:9e:8b:a8:ff:
27:3c:2d:59:1a:ca:02:48:97:20:3e:ed:e6:a7:94:57:c9:6f:
ee:40:8b:34:dd:e8:cf:73:37:6f:da:e6:78:6d:dd:e8:26:58:
ec:9c:35:b2:dd:dc:eb:70:fb:33:c2:f9:c5:f2:05:44:cb:be:
38:40:4a:fd:c4:28:76:be:f2:ec:b7:b6:d6:95:e2:f1:8d:74:
e2:d8:d5:b0:80:3e:5a:6c:e0:a4:37:62:39:c2:03:dd:b5:be:
79:98:4a:71:12:7d:0c:2e:69:21:1b:35:3a:49:08:04:ad:28:
0a:34:92:8c:31:90:42:2f:4e:68:66:18:d7:14:56:7d:5d:21:
a7:95:7a:42:1f:9d:b9:c1:64:ba:b2:c8:1e:14:8f:4c:b4:b3:
40:99:d8:13:e2:71:f3:0b:f6:fe:a9:c4:ee:91:e1:5d:ed:64:
ad:b4:c3:3c:c4:8e:fc:6a:c5:84:fb:85:2d:3b:b1:31:3b:b5:
15:2d:26:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:24:20 2025 by rpki-client