Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214266.roa
File: AS214266.roa (raw, json)
Hash identifier: Qz50ze/JIdjDYAEBXnqcJt0QK3KpNbdP9DE2VoxjVeQ=
Subject key identifier: F3:A6:C8:81:9D:0B:84:B5:47:F4:99:B8:BA:B2:0E:62:C1:E0:49:B4
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0457ED7BF303925E56EE46E92299D0788F4F53A6
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214266.roa
Signing time: Thu 08 Oct 2026 13:40:24 +0000
ROA not before: Thu 08 Oct 2026 13:35:24 +0000
ROA not after: Thu 07 Oct 2027 13:40:24 +0000
asID: 214266
IP address blocks: 2a04:f700::/29 maxlen: 29
2a06:7680::/29 maxlen: 29
2a06:99c0::/29 maxlen: 29
2a09:2240::/29 maxlen: 29
2a0b:ca00::/29 maxlen: 29
2a10:e280::/29 maxlen: 29
2a10:ef80::/29 maxlen: 29
2a10:f080::/29 maxlen: 29
2a10:fe80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 10:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:57:ed:7b:f3:03:92:5e:56:ee:46:e9:22:99:d0:78:8f:4f:53:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 8 13:35:24 2026 GMT
Not After : Oct 7 13:40:24 2027 GMT
Subject: CN=F3A6C8819D0B84B547F499B8BAB20E62C1E049B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:0d:4b:b8:35:c5:ae:50:48:64:a4:33:1f:
d1:53:21:01:59:b5:e7:f0:b6:27:86:85:a9:db:54:
d9:5b:a3:a8:cb:37:e3:54:c0:d8:0d:d0:2a:d4:2a:
c7:9d:3c:84:b0:37:10:60:6e:5a:50:9d:34:29:55:
9f:38:2c:b0:fa:10:be:3f:cd:c8:c2:d9:b2:87:81:
5a:04:ee:f5:5d:bb:ed:32:68:62:94:e8:19:d2:e7:
33:01:c1:fd:b9:29:cc:5c:b0:d3:bc:ef:98:85:46:
b1:6c:4f:e6:2f:2f:39:62:1b:92:bf:0f:61:be:54:
2d:0c:93:9e:ca:16:7d:d6:b5:3a:58:a1:75:af:ac:
59:89:05:cd:c0:9b:3b:8d:37:7c:79:8e:7e:61:d7:
e1:a5:ec:de:6b:7c:3a:13:f3:8e:e9:a1:b3:81:9e:
71:65:0b:57:88:cc:ed:d6:23:08:17:9e:7f:73:f6:
28:b2:60:c0:2b:82:9b:6e:df:7d:2a:b1:15:cb:f3:
cb:35:70:9b:3b:f9:26:12:ad:b6:82:14:30:4b:db:
59:fa:68:56:52:05:ea:8e:fc:35:2e:22:93:5b:6d:
bb:17:37:56:18:f3:d3:2b:36:fa:ed:19:41:62:19:
df:35:f1:74:6e:af:60:d5:85:4b:d2:b1:7e:c3:8f:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A6:C8:81:9D:0B:84:B5:47:F4:99:B8:BA:B2:0E:62:C1:E0:49:B4
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:f700::/29
2a06:7680::/29
2a06:99c0::/29
2a09:2240::/29
2a0b:ca00::/29
2a10:e280::/29
2a10:ef80::/29
2a10:f080::/29
2a10:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
55:8e:5c:6f:4c:63:f1:08:ff:a3:5f:0d:fd:3b:60:10:8c:79:
99:81:44:bf:42:28:38:a9:81:42:8a:bf:7b:8b:7e:99:5a:58:
2b:e0:2b:ec:6e:6a:13:32:4d:6c:6e:0a:d0:9f:fe:88:b7:f2:
d8:55:1b:e4:07:a9:11:37:1b:c4:32:7e:f9:f8:5e:80:42:3e:
41:5e:23:f7:3c:e9:35:4e:d2:f8:b6:8f:a1:a8:01:06:6c:3f:
73:70:fd:20:57:65:af:35:8b:60:bc:fa:63:66:b4:c8:1e:f0:
a0:e2:a9:2e:df:79:d1:a4:99:eb:51:bf:d7:98:8d:84:2c:dc:
80:4d:3e:25:d0:67:02:15:48:7a:96:8c:1f:71:d2:87:d2:e1:
da:8f:ce:88:e7:56:93:a1:52:bb:c2:60:34:ff:cf:f1:f7:61:
58:ba:3c:e1:32:55:a4:39:97:25:8f:4d:14:89:4f:a5:0f:0e:
13:be:92:69:3c:dd:ee:45:99:1d:19:0e:1c:9d:cf:ac:1c:99:
c7:8b:4f:10:cd:a0:13:d4:87:2d:06:59:fa:79:b4:b3:1f:b8:
ae:b8:35:28:6c:4a:7f:2c:6c:9f:12:87:6f:e1:4e:98:a3:9e:
74:86:ff:76:9e:1e:5d:43:ac:df:26:9c:b1:38:e4:c7:d7:70:
1e:84:7c:31
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIUBFfte/MDkl5W7kbpIpnQeI9PU6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjEwMDgxMzM1MjRaFw0yNzEwMDcxMzQwMjRaMDMxMTAvBgNV
BAMTKEYzQTZDODgxOUQwQjg0QjU0N0Y0OTlCOEJBQjIwRTYyQzFFMDQ5QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQmQ1LuDXFrlBIZKQzH9FTIQFZ
tefwtieGhanbVNlbo6jLN+NUwNgN0CrUKsedPISwNxBgblpQnTQpVZ84LLD6EL4/
zcjC2bKHgVoE7vVdu+0yaGKU6BnS5zMBwf25KcxcsNO875iFRrFsT+YvLzliG5K/
D2G+VC0Mk57KFn3WtTpYoXWvrFmJBc3AmzuNN3x5jn5h1+Gl7N5rfDoT847pobOB
nnFlC1eIzO3WIwgXnn9z9iiyYMArgptu330qsRXL88s1cJs7+SYSrbaCFDBL21n6
aFZSBeqO/DUuIpNbbbsXN1YY89MrNvrtGUFiGd818XRur2DVhUvSsX7Dj9J1AgMB
AAGjggJDMIICPzAdBgNVHQ4EFgQU86bIgZ0LhLVH9Jm4urIOYsHgSbQwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjE0MjY2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAAjA/AwUDKgT3
AAMFAyoGdoADBQMqBpnAAwUDKgkiQAMFAyoLygADBQMqEOKAAwUDKhDvgAMFAyoQ
8IADBQMqEP6AMA0GCSqGSIb3DQEBCwUAA4IBAQBVjlxvTGPxCP+jXw39O2AQjHmZ
gUS/Qig4qYFCir97i36ZWlgr4CvsbmoTMk1sbgrQn/6It/LYVRvkB6kRNxvEMn75
+F6AQj5BXiP3POk1TtL4to+hqAEGbD9zcP0gV2WvNYtgvPpjZrTIHvCg4qku33nR
pJnrUb/XmI2ELNyATT4l0GcCFUh6lowfcdKH0uHaj86I51aToVK7wmA0/8/x92FY
ujzhMlWkOZclj00UiU+lDw4TvpJpPN3uRZkdGQ4cnc+sHJnHi08QzaAT1IctBln6
ebSzH7iuuDUobEp/LGyfEodv4U6Yo550hv92nh5dQ6zfJpyxOOTH13AehHwx
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:14:44 2026 by rpki-client