Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214132.roa
File: AS214132.roa (raw, json)
Hash identifier: gkMhgxRmQiMfFADyT9/6y0McgF2iP8d6CAsRLRCmq/8=
Subject key identifier: 4A:E2:42:EA:2B:33:B0:43:FC:B6:5C:29:E1:F1:FC:96:20:F1:62:55
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 56EA997806AE4A1515E4EA2710B2156E360CFF02
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214132.roa
Signing time: Tue 13 Oct 2026 17:49:36 +0000
ROA not before: Tue 13 Oct 2026 17:44:36 +0000
ROA not after: Tue 12 Oct 2027 17:49:36 +0000
asID: 214132
IP address blocks: 185.155.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ea:99:78:06:ae:4a:15:15:e4:ea:27:10:b2:15:6e:36:0c:ff:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 13 17:44:36 2026 GMT
Not After : Oct 12 17:49:36 2027 GMT
Subject: CN=4AE242EA2B33B043FCB65C29E1F1FC9620F16255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:3d:81:83:a0:99:a9:7c:da:f4:6c:b6:c5:
06:82:76:93:9b:09:4a:6d:d6:25:39:f0:10:1c:2f:
34:20:a4:cc:95:ef:5c:07:e9:1a:60:99:cd:67:66:
9e:06:e5:f3:05:fa:fa:1f:c1:19:bd:a3:a2:07:c5:
f7:95:05:36:aa:0d:00:c8:65:b3:a4:ab:36:27:b9:
41:76:2a:ef:33:87:4f:9d:f2:36:6d:8c:a3:83:5f:
c7:23:d9:89:bb:a5:3b:10:76:89:4c:2c:4f:ae:b1:
31:7e:e1:b7:2c:ed:9f:7b:6d:57:e1:b7:17:2e:5d:
f4:b0:4f:d9:c7:77:1a:4b:1f:74:6b:e8:c4:33:54:
b8:a4:5b:e3:0a:21:17:77:b1:f2:d3:88:d1:5d:2e:
23:a3:4c:24:e3:e2:8e:38:07:57:08:c4:e2:ab:b5:
15:c6:66:11:7d:30:2c:d0:b5:90:7c:7e:c8:0f:a9:
98:35:0e:47:d1:6b:9e:05:cd:c2:db:6e:02:b4:a7:
70:19:e9:a4:b1:29:d8:8b:40:45:96:50:cb:da:45:
1b:12:b1:30:4c:d4:6c:c2:95:f3:7e:58:f7:22:7a:
d0:d2:5d:2c:50:e2:4b:96:3e:ea:97:8b:65:ec:16:
8d:c9:6f:75:37:2c:56:7b:1d:96:99:f2:66:09:22:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E2:42:EA:2B:33:B0:43:FC:B6:5C:29:E1:F1:FC:96:20:F1:62:55
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:05:5c:45:38:81:44:2c:06:0b:64:83:6b:6d:04:16:cb:56:
6d:10:42:f8:31:0d:4f:9b:54:78:60:45:d3:d4:73:cd:bd:17:
4e:f1:3a:c6:7a:5b:ef:a0:21:e4:21:c7:69:63:bc:50:58:6e:
c3:96:4e:1e:fa:e6:ae:18:1e:3e:d6:fa:1f:87:1d:6e:83:2c:
45:5d:42:4b:0b:79:33:cb:89:37:74:23:5e:a3:b6:70:aa:df:
37:4d:a7:a2:ab:aa:58:f1:44:e5:17:51:ab:ad:50:3f:c1:13:
b4:e8:5b:56:25:1d:e9:4d:fc:dd:95:fe:d5:30:45:94:ae:b4:
f8:a8:ce:da:20:5b:88:6f:7a:3d:1f:4c:33:8d:81:95:5d:24:
8d:e3:84:02:10:c8:c2:2e:02:7c:59:8f:ac:2e:d6:0d:08:75:
74:86:b3:44:74:0c:22:ca:7a:ff:56:dd:5e:cf:ee:c8:1b:54:
ad:6f:c2:2c:59:92:62:6d:84:72:d7:05:fb:8c:77:e0:87:ff:
3f:c8:02:c6:74:fb:2f:36:0d:00:61:00:1b:fb:98:cb:45:84:
16:9b:da:e0:50:b9:36:95:25:a1:2d:54:00:3b:cf:8e:e1:fd:
f8:0a:57:04:cf:6e:ed:a6:3f:2d:59:54:10:1d:af:63:d8:81:
e8:d2:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:52:55 2026 by rpki-client