Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS214941.roa
File: AS214941.roa (raw, json)
Hash identifier: xpcYn9tTCPc3hJKtS1A4GqpU5qZAO3sS8kSupmhABik=
Subject key identifier: 7F:4A:D4:6B:9D:EB:24:DE:07:89:E3:76:DF:F8:8E:B2:D5:19:85:06
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 2B9EBCD0E9CCAA22ED33984857B60AA42F0C9715
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS214941.roa
Signing time: Thu 25 Jun 2026 20:25:13 +0000
ROA not before: Thu 25 Jun 2026 20:20:13 +0000
ROA not after: Thu 24 Jun 2027 20:25:13 +0000
asID: 214941
IP address blocks: 212.87.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 07:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:9e:bc:d0:e9:cc:aa:22:ed:33:98:48:57:b6:0a:a4:2f:0c:97:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jun 25 20:20:13 2026 GMT
Not After : Jun 24 20:25:13 2027 GMT
Subject: CN=7F4AD46B9DEB24DE0789E376DFF88EB2D5198506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c2:ca:96:b8:6d:79:a9:8a:31:66:6e:3d:b8:
b2:34:b8:8a:1d:4a:65:20:fb:cb:96:ca:dc:75:19:
d0:f3:1e:a3:c1:54:03:92:bf:f9:25:11:5a:d4:04:
af:0b:5e:19:59:08:48:8e:02:5d:ee:96:c5:cc:22:
e0:ff:dc:fe:dd:be:01:48:c8:3b:df:de:a4:fb:9d:
8f:0f:e6:84:f3:b6:fa:6c:1e:c2:0a:96:07:58:17:
c7:85:c5:60:91:38:36:0e:af:e1:77:a3:d4:69:8c:
99:d2:f7:1b:5b:38:61:c1:15:c1:41:55:8d:55:c1:
6f:d1:65:12:90:d5:42:93:2a:5c:f6:41:57:7a:38:
ea:cd:bb:3f:4f:13:6c:98:55:c3:ce:96:5a:85:5f:
78:8e:7f:d9:02:21:96:40:6d:fe:9e:dd:4d:89:b7:
2b:6c:44:4f:9d:f5:ac:f4:f6:ed:ac:cc:8a:11:1d:
7c:ad:8a:79:c5:18:a2:93:7a:21:15:22:35:ed:12:
3a:ba:5b:b3:e6:5e:9a:d3:8a:b5:cc:8b:c1:c8:c0:
e7:65:70:3b:6d:02:36:8e:18:9c:fd:fd:2f:c0:57:
0a:a5:65:d9:1f:9a:0e:ba:52:95:90:31:a3:ea:e7:
5c:d6:54:2a:05:81:65:df:22:4b:63:77:df:44:98:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4A:D4:6B:9D:EB:24:DE:07:89:E3:76:DF:F8:8E:B2:D5:19:85:06
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS214941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.197.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f5:97:a9:44:6f:7a:97:ca:dc:92:d7:10:80:b9:c6:58:0b:
2b:2d:ae:d1:52:58:c1:5a:f2:02:d2:03:c8:36:b2:bf:76:ab:
d9:ae:31:80:68:75:85:60:6c:56:e5:8a:fe:40:c8:b7:d8:92:
b2:27:8e:44:3f:10:3e:9c:aa:f2:3b:4a:e3:a3:91:84:5b:c9:
ad:ee:06:5e:6f:35:2f:e2:b5:8f:1b:89:eb:93:3d:46:ba:51:
b4:6a:47:7c:1a:36:22:04:a8:02:9f:8d:c9:07:05:01:9c:82:
88:63:7f:2d:89:c0:9f:f1:a2:f9:b5:de:a0:1e:d1:39:10:ea:
2d:b9:34:fc:de:66:55:c5:9d:14:d5:8a:27:1b:7f:92:0c:bd:
70:43:63:9d:fb:6f:3c:92:4d:60:26:f4:7e:8f:ab:dc:2d:16:
dc:a9:b7:2a:e7:9c:d3:a2:63:4e:f8:dd:15:ef:78:cf:c6:69:
84:55:9a:45:2a:8a:59:fa:13:d8:19:d4:da:82:7e:c1:8d:43:
6f:88:e7:93:2e:f8:d0:68:a6:af:ed:d6:5c:3c:ab:f5:f0:22:
38:a2:8c:1a:c7:66:da:67:25:d8:66:8a:d7:a4:e3:c7:e8:ab:
e4:ba:99:ad:44:44:cc:c2:13:ae:65:65:3e:c7:7a:23:2c:40:
ac:e3:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 20:31:34 2026 by rpki-client