Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS3214.roa
File: AS3214.roa (raw, json)
Hash identifier: 9N8Qy7RGvVNtOAO2bwFZ7I1gKLOnQ550e8LNL3Bf8Dw=
Subject key identifier: 1F:E4:68:37:52:7D:C1:85:0B:01:1D:4F:E5:26:34:3B:4C:A9:74:0F
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5B83B8E74982C4EEB3196F9C2D642C7C8DC5BBD1
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS3214.roa
Signing time: Wed 29 Jul 2026 15:25:11 +0000
ROA not before: Wed 29 Jul 2026 15:20:11 +0000
ROA not after: Wed 28 Jul 2027 15:25:11 +0000
asID: 3214
IP address blocks: 201.4.32.0/19 maxlen: 24
201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:83:b8:e7:49:82:c4:ee:b3:19:6f:9c:2d:64:2c:7c:8d:c5:bb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 29 15:20:11 2026 GMT
Not After : Jul 28 15:25:11 2027 GMT
Subject: CN=1FE46837527DC1850B011D4FE526343B4CA9740F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:bf:1c:65:f1:64:d8:67:9c:0e:79:be:03:
04:87:63:8c:68:1d:5b:8f:9b:a7:7c:0d:11:9e:33:
e5:a9:39:8c:f0:c6:14:14:1c:09:78:59:9a:7c:9f:
d8:d5:11:02:5c:87:cf:21:62:25:16:9a:7c:8c:57:
e9:63:01:39:21:fc:81:a8:7c:cb:bb:e4:0c:11:bc:
79:62:89:f8:86:ae:2e:3e:1e:27:12:c5:63:2d:b8:
63:7c:e8:e8:da:89:87:36:06:8d:12:e5:67:ed:41:
a2:61:ce:b8:ca:17:02:b9:34:ac:c9:08:94:06:a0:
af:e2:c7:e3:a8:a2:64:84:c8:0d:43:39:90:b2:3c:
2d:37:96:40:7c:15:2e:fa:48:17:94:d2:63:5b:18:
0a:9e:2f:a0:c9:6b:5a:8d:46:9d:9e:54:3d:02:ca:
a4:2a:5d:7d:a4:ea:97:86:65:84:99:ca:b5:8a:f6:
43:fc:49:57:76:ef:54:f3:15:8f:34:1b:24:c0:87:
c1:1e:55:84:ae:83:fe:8e:40:7b:eb:7d:22:34:69:
60:ef:e0:b4:c4:e9:bc:53:d3:a0:d8:93:25:7b:bc:
44:53:f7:b6:fb:4a:2b:49:f1:80:4e:1e:8d:58:aa:
c4:b2:42:40:89:73:45:d0:9c:c9:2f:bf:4b:bf:1f:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E4:68:37:52:7D:C1:85:0B:01:1D:4F:E5:26:34:3B:4C:A9:74:0F
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS3214.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:68:5b:53:e1:45:97:52:38:f8:e1:1b:2f:7d:15:e3:c1:b7:
37:36:a0:1e:93:66:a5:38:db:35:60:88:68:81:d7:f8:c2:47:
ca:53:fb:a5:66:86:0b:1d:7f:47:d3:9a:eb:2a:31:a2:d3:f0:
ec:9b:82:be:0c:0b:07:5b:04:91:31:0a:84:94:cc:9a:95:0a:
5a:1f:a4:2f:55:98:fe:73:36:4f:9c:66:75:8c:71:04:4b:93:
2b:4a:44:0c:27:f2:af:0c:e2:b3:1e:bb:9b:d8:d9:5f:25:f6:
b6:44:dd:a7:6f:94:a2:ed:41:4b:f1:41:f4:27:62:62:0b:bb:
33:c7:f7:6a:13:44:42:2f:92:26:ee:79:3a:18:47:17:16:cd:
43:e7:57:0d:76:f5:5e:47:87:c8:74:93:62:74:42:94:d5:6c:
7f:d4:69:d6:9e:61:51:f9:72:1d:bf:60:d4:a6:a9:c2:ae:f7:
e3:4f:e2:15:b9:d1:c1:fb:e6:b7:4b:c8:fd:56:80:c6:08:4d:
99:1c:c2:da:13:1e:5d:8f:3d:ba:1f:32:5b:54:e6:17:e9:16:
92:66:6e:58:62:c6:20:66:b1:c6:17:15:88:c3:b7:6d:5d:98:
06:c6:06:fd:3f:d8:a8:c7:04:00:a1:72:75:5d:b6:df:35:2b:
12:30:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:22 2026 by rpki-client