Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: QbUknrQfPuvUFzG3KD5DH1oqaYVDAArsuqwgg1THip0=
Subject key identifier: 59:47:89:A6:97:E0:63:27:49:50:18:A0:C3:A5:18:D7:61:99:75:DD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1C72BDE6DF1210FBA69DBDB028057CF11C88143B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
Signing time: Sat 17 Oct 2026 10:54:50 +0000
ROA not before: Sat 17 Oct 2026 10:49:50 +0000
ROA not after: Sat 16 Oct 2027 10:54:50 +0000
asID: 214432
IP address blocks: 155.117.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 05:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:72:bd:e6:df:12:10:fb:a6:9d:bd:b0:28:05:7c:f1:1c:88:14:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 17 10:49:50 2026 GMT
Not After : Oct 16 10:54:50 2027 GMT
Subject: CN=594789A697E06327495018A0C3A518D7619975DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:47:e4:b3:bf:96:67:6f:77:24:6d:5e:93:
07:22:0b:2a:71:d0:2b:91:10:7b:92:0f:a8:23:54:
88:02:fb:c3:5c:a7:06:f2:ef:b5:23:6c:6d:72:f0:
67:07:26:c3:a1:96:7a:3f:7e:b8:90:d5:bc:0f:f9:
b6:94:54:22:c1:e4:9e:cb:c9:c4:4e:34:92:24:72:
93:65:4d:12:d5:14:1a:75:0b:e4:48:d8:92:01:16:
39:59:4e:4a:ef:1b:0c:bf:a1:2d:57:49:01:ec:5b:
be:80:a3:62:b1:f3:8a:89:c5:fd:3c:cc:1f:7e:38:
dd:d9:96:b9:13:9e:1d:c9:cd:c3:fb:a6:82:a6:7c:
42:b8:7b:55:62:91:b7:95:20:ef:1d:4f:40:47:a5:
be:4e:b2:8d:7b:22:c1:70:c5:b6:82:df:e4:eb:5f:
d7:48:a3:63:02:38:2a:e5:6b:2d:94:b0:20:20:9c:
b7:c6:14:88:a9:e4:0b:3b:75:77:77:99:ca:e4:48:
49:7a:c7:db:cd:06:61:4e:0a:05:90:57:54:3d:ff:
e2:0b:62:59:cd:53:8c:91:d2:ce:6f:58:52:7a:84:
6a:fc:e3:58:a3:f3:13:7d:ea:fa:fc:87:24:1e:ba:
2d:8a:a3:7b:de:f4:2a:21:4a:20:38:8a:60:73:6d:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:47:89:A6:97:E0:63:27:49:50:18:A0:C3:A5:18:D7:61:99:75:DD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.144.0/24
Signature Algorithm: sha256WithRSAEncryption
63:25:f8:48:d9:fd:0f:57:e8:fe:0f:a7:c9:a5:d5:a1:52:d3:
4f:a8:43:be:7c:a7:64:38:11:e4:dd:2e:6f:50:1e:56:d9:62:
db:c9:32:7e:11:4f:f4:65:60:95:d4:41:ae:40:8c:0c:3f:83:
f8:15:1f:bd:d9:c8:4e:10:6b:65:bf:e7:16:37:10:43:be:9e:
4b:09:64:c1:57:1e:d2:b0:34:46:68:5f:bb:2f:e3:95:47:a1:
b0:99:d1:e7:6f:59:25:1a:24:af:ca:b6:88:3f:00:4f:88:cd:
55:52:e0:ba:20:64:53:64:80:f9:8a:78:aa:ab:40:42:c1:30:
c6:f7:47:ae:16:c5:50:e3:76:b9:4e:c6:09:bd:8b:4b:94:69:
f6:50:d2:b3:b7:16:33:42:57:3e:1e:3e:ea:75:60:48:ec:07:
81:f0:39:8f:7d:94:c1:72:cc:87:a0:d9:dd:61:46:41:d0:7b:
19:1a:35:29:bf:93:63:16:95:b5:43:a0:06:2e:ea:2b:2e:ec:
b6:16:4c:e9:39:01:5a:c8:4e:5e:36:c7:f7:1f:03:76:13:93:
ba:56:19:79:33:76:08:f3:23:95:ab:65:e1:5f:56:ab:e9:e0:
68:47:05:dd:39:8f:03:71:ff:5b:19:2e:52:42:c8:7b:68:0c:
4c:c9:a8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:52:01 2026 by rpki-client