Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214931.roa
File: AS214931.roa (raw, json)
Hash identifier: 1aMP0UBxZfM+6bVajMgs3nJc0m32DwIP87jBLRWUGyw=
Subject key identifier: C1:C5:CD:69:71:35:31:E5:0B:3C:49:33:A6:59:44:4B:6E:47:75:3E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6ABD3732A4DF6AE5ECBEFB232147A420AF6E5336
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214931.roa
Signing time: Sun 16 Aug 2026 11:57:50 +0000
ROA not before: Sun 16 Aug 2026 11:52:50 +0000
ROA not after: Sun 15 Aug 2027 11:57:50 +0000
asID: 214931
IP address blocks: 167.148.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bd:37:32:a4:df:6a:e5:ec:be:fb:23:21:47:a4:20:af:6e:53:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 16 11:52:50 2026 GMT
Not After : Aug 15 11:57:50 2027 GMT
Subject: CN=C1C5CD69713531E50B3C4933A659444B6E47753E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:61:fc:19:d6:e9:fa:7e:1e:9b:ac:bf:64:
cb:b0:89:ee:f8:39:e4:00:eb:7e:a0:b5:66:d6:0d:
7a:e0:a8:45:51:4a:98:f5:f4:90:fd:c7:30:e1:98:
b4:28:38:d1:f2:b7:1b:b5:54:7e:21:84:af:b7:45:
13:8e:9b:e3:bb:2f:ea:b4:5d:f8:80:23:bd:82:d1:
38:56:da:41:d6:38:66:f1:c3:5a:b3:05:a0:a8:84:
91:0f:42:b2:7c:a0:ae:b2:36:62:34:f1:2a:a7:1a:
fe:73:72:de:75:a0:25:50:89:c7:e4:73:b3:8a:eb:
de:21:3d:2e:63:8a:0c:49:5c:f3:dc:8a:57:c0:48:
d6:b1:8d:c5:6f:8f:c9:9d:c0:70:81:9e:34:2e:2b:
72:6b:35:8b:74:d7:36:bb:52:34:38:39:2a:14:d7:
de:85:5d:c8:20:6e:fd:b6:c1:44:d0:c3:db:b2:10:
b4:50:71:73:cc:03:55:75:ac:80:e3:3d:a8:11:1e:
cc:ea:66:fe:5b:60:cc:d5:9a:a0:3c:20:5d:14:f8:
1c:60:60:93:7c:db:d1:c5:bd:6d:af:55:be:c4:80:
30:32:2b:11:bf:ff:98:d6:fa:bf:b3:c0:b8:90:6c:
ce:1c:71:20:e9:40:f1:89:7b:dc:21:0e:d8:bb:49:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C5:CD:69:71:35:31:E5:0B:3C:49:33:A6:59:44:4B:6E:47:75:3E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.188.0/24
Signature Algorithm: sha256WithRSAEncryption
78:75:4a:79:c1:9a:b0:59:69:0f:1b:83:79:51:43:27:81:d2:
5b:b9:21:76:9a:e1:8e:4c:2a:4a:04:be:ac:7e:0a:8c:e6:da:
a1:dd:b9:cd:b5:df:55:57:08:b7:a5:51:c7:a7:a7:06:c2:27:
9c:53:28:f0:b8:ed:77:56:9a:7d:08:f4:0c:16:b8:b3:d6:5c:
2b:19:6d:2c:a1:fb:61:f7:2c:bb:38:ba:9f:a5:05:e7:87:6c:
6f:67:dc:b7:e5:4b:87:9f:ba:92:0d:ee:b3:de:5b:87:8d:79:
85:fb:54:0b:1c:8b:22:47:26:4b:e5:d3:db:61:05:13:4f:03:
41:8a:62:c3:79:29:9f:7c:36:a4:84:6b:ba:e2:15:ee:29:3e:
94:97:cf:44:4e:e0:d6:1d:5e:0e:27:8e:b7:05:1e:a4:78:ee:
49:45:42:b2:e8:0e:ce:61:93:58:9e:86:ea:65:c3:8e:79:46:
27:b1:84:6d:4a:12:3d:32:20:99:c9:fa:f1:fc:88:33:ef:3e:
ba:d6:bb:00:00:df:0d:6f:45:f7:c5:b0:64:ec:20:70:5f:b8:
c3:42:2f:81:a9:1d:4f:46:4b:61:96:fc:23:00:11:03:fa:e7:
f9:34:7e:af:a2:6a:ee:29:50:56:94:d0:15:f4:68:0f:ee:da:
72:f3:a1:9c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUar03MqTfauXsvvsjIUekIK9uUzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MTYxMTUyNTBaFw0yNzA4MTUxMTU3NTBaMDMxMTAvBgNV
BAMTKEMxQzVDRDY5NzEzNTMxRTUwQjNDNDkzM0E2NTk0NDRCNkU0Nzc1M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfC2H8Gdbp+n4em6y/ZMuwie74
OeQA636gtWbWDXrgqEVRSpj19JD9xzDhmLQoONHytxu1VH4hhK+3RROOm+O7L+q0
XfiAI72C0ThW2kHWOGbxw1qzBaCohJEPQrJ8oK6yNmI08SqnGv5zct51oCVQicfk
c7OK694hPS5jigxJXPPcilfASNaxjcVvj8mdwHCBnjQuK3JrNYt01za7UjQ4OSoU
196FXcggbv22wUTQw9uyELRQcXPMA1V1rIDjPagRHszqZv5bYMzVmqA8IF0U+Bxg
YJN829HFvW2vVb7EgDAyKxG//5jW+r+zwLiQbM4ccSDpQPGJe9whDti7SUW3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUwcXNaXE1MeULPEkzpllES25HdT4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE0OTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5S8
MA0GCSqGSIb3DQEBCwUAA4IBAQB4dUp5wZqwWWkPG4N5UUMngdJbuSF2muGOTCpK
BL6sfgqM5tqh3bnNtd9VVwi3pVHHp6cGwiecUyjwuO13Vpp9CPQMFriz1lwrGW0s
ofth9yy7OLqfpQXnh2xvZ9y35UuHn7qSDe6z3luHjXmF+1QLHIsiRyZL5dPbYQUT
TwNBimLDeSmffDakhGu64hXuKT6Ul89ETuDWHV4OJ463BR6keO5JRUKy6A7OYZNY
nobqZcOOeUYnsYRtShI9MiCZyfrx/Igz7z661rsAAN8Nb0X3xbBk7CBwX7jDQi+B
qR1PRkthlvwjABED+uf5NH6vomruKVBWlNAV9GgP7tpy86Gc
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:32 2026 by rpki-client