Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214271.roa
File: AS214271.roa (raw, json)
Hash identifier: UCHe29xFLtQ1gAzjWXNiHJ8NKs1aDAGPAzVxEhJG8Do=
Subject key identifier: C0:B2:D7:FE:71:70:E4:E1:8D:9F:85:21:F6:57:F7:F6:EE:0B:24:EF
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 7BD21C6FB88A6C6750B54AD9AD68E5D0AC418C40
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214271.roa
Signing time: Tue 01 Sep 2026 10:49:30 +0000
ROA not before: Tue 01 Sep 2026 10:44:30 +0000
ROA not after: Tue 31 Aug 2027 10:49:30 +0000
asID: 214271
IP address blocks: 46.236.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d2:1c:6f:b8:8a:6c:67:50:b5:4a:d9:ad:68:e5:d0:ac:41:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 1 10:44:30 2026 GMT
Not After : Aug 31 10:49:30 2027 GMT
Subject: CN=C0B2D7FE7170E4E18D9F8521F657F7F6EE0B24EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:50:8e:c8:00:49:9b:0b:1f:9a:54:bf:c4:
b0:c1:00:30:2e:00:d8:f1:dd:1b:30:56:8e:04:af:
5d:fe:25:f0:6a:5c:ce:e6:f9:29:63:99:4b:bf:5e:
b0:44:4c:c0:9b:d5:60:df:40:10:c9:c9:b1:de:cc:
1f:d6:4c:05:13:44:71:c3:25:13:78:69:0a:5a:7f:
e7:72:b1:79:3d:43:12:75:14:2b:cd:f6:5d:92:1f:
75:4b:c4:d8:4b:87:c0:b6:6e:a4:d2:d3:75:0d:2d:
a5:25:53:74:28:21:47:fb:2b:24:77:76:1b:f9:92:
11:5d:aa:8b:47:db:7f:d4:92:f8:5b:9c:6c:34:d8:
15:c6:fa:cd:51:bc:05:f6:76:c3:42:f6:9e:17:a4:
2d:30:9f:d6:28:ee:60:92:f8:3c:3e:a7:08:5d:96:
6e:0c:7d:bc:a4:c7:8e:a6:38:bb:38:9c:2b:4d:c0:
eb:98:a1:48:11:e8:78:b5:50:c4:a6:79:47:ca:36:
67:37:fd:0e:16:41:29:cc:a7:6b:06:1f:87:70:72:
34:d8:55:a9:8c:08:ca:ea:3f:ed:4e:46:42:9c:e3:
18:e1:ea:65:18:b3:45:b3:9e:fd:2d:26:6e:4a:a8:
df:f9:ce:f6:ca:2d:0d:1f:7e:72:e7:30:68:7d:15:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B2:D7:FE:71:70:E4:E1:8D:9F:85:21:F6:57:F7:F6:EE:0B:24:EF
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS214271.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ee:8b:07:26:67:c4:23:10:d7:e8:5e:6b:cc:82:88:bd:89:
b7:1f:43:8c:ea:21:bb:64:cc:c9:f5:66:3a:f6:1f:c5:1c:ef:
57:9e:c3:0f:74:b5:98:cd:10:ce:78:95:b4:21:5f:16:d9:99:
3e:91:36:52:0e:ef:b8:f7:ae:6e:6c:7d:57:8b:0e:03:67:f5:
26:a3:e4:a4:37:56:71:07:b0:92:0a:72:b5:6c:ef:89:94:28:
ef:6e:eb:40:73:a6:29:bf:5a:66:27:1d:f2:b2:67:5b:d1:aa:
2f:a7:9d:8b:c7:8b:87:c6:9c:9e:8c:31:a6:62:6e:76:f0:91:
7c:7d:a4:d3:f0:3f:3a:c8:69:c6:7b:f1:12:ba:a4:6f:2c:30:
43:45:11:cb:7f:ab:2a:bf:ba:8e:a7:74:e0:c6:c0:01:c5:72:
7b:2f:f7:78:3a:2a:7a:05:de:05:66:ce:5f:5a:38:a1:17:3f:
35:1a:ef:99:2d:c3:67:99:c6:5f:b3:72:a6:3e:bb:ab:23:b0:
6b:0f:59:a0:9b:f7:34:c6:d1:d4:ea:1d:42:c0:c1:72:2b:d2:
e9:31:b4:e2:f2:d2:69:b1:76:e1:a7:93:e7:57:af:e0:f8:af:
5d:4b:a2:96:24:6c:94:6b:be:4d:ed:d3:44:f3:97:43:20:e2:
8e:ed:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:07 2026 by rpki-client