Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214456.roa
File: AS214456.roa (raw, json)
Hash identifier: GgOR4bdgGIjTzSQwtqx0Yp3NZKKUZNlruklP9AD5AXk=
Subject key identifier: A1:34:31:0F:AE:56:54:20:D3:32:D0:34:B1:19:BE:C0:47:D8:62:62
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2BA09B123578840F3DD22842C8DAF4E458BD323B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214456.roa
Signing time: Mon 06 Apr 2026 13:09:04 +0000
ROA not before: Mon 06 Apr 2026 13:04:04 +0000
ROA not after: Mon 05 Apr 2027 13:09:04 +0000
asID: 214456
IP address blocks: 147.78.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 06:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a0:9b:12:35:78:84:0f:3d:d2:28:42:c8:da:f4:e4:58:bd:32:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 6 13:04:04 2026 GMT
Not After : Apr 5 13:09:04 2027 GMT
Subject: CN=A134310FAE565420D332D034B119BEC047D86262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:1c:6a:85:8a:6b:b3:04:73:50:f4:69:47:
71:90:f3:8d:b3:37:9e:e9:c5:63:6f:90:7e:a3:35:
57:d8:6b:12:fd:83:14:04:d0:ad:76:a9:bb:47:aa:
2c:b3:98:05:c3:37:7f:2c:cd:f2:ba:c3:e0:1a:06:
6a:e7:97:5b:11:a9:39:3c:a9:c8:4a:62:49:c0:e2:
c0:dd:33:47:4b:87:91:8c:3b:ac:ea:e1:25:b8:96:
13:d4:f8:2e:1e:e3:ce:5c:94:c6:f8:59:9e:94:7c:
e0:b7:93:2f:64:17:e2:11:e8:4a:d4:33:94:da:4b:
17:7d:98:ba:39:31:a2:cb:a0:50:48:3b:3a:c8:c9:
ea:f3:86:84:57:26:0e:c8:c5:66:21:75:17:63:fc:
32:d6:a7:e4:c0:f2:23:10:99:8d:41:35:57:d1:58:
57:3d:a4:ed:3f:b6:10:b9:54:4d:cb:3b:91:e1:7d:
c2:65:e1:3d:dd:5a:f7:d5:f0:b2:ac:20:06:cb:d8:
12:1e:82:7f:6a:3c:61:30:92:de:45:3a:a7:4b:e0:
6a:f3:ca:b9:28:7b:9c:0b:1c:4d:9a:20:f1:41:88:
03:17:3a:e0:ef:7a:75:8f:5d:d3:db:74:97:6e:d9:
43:db:f2:4b:2b:fa:0c:49:f3:15:6b:b7:52:bf:75:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:34:31:0F:AE:56:54:20:D3:32:D0:34:B1:19:BE:C0:47:D8:62:62
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f6:be:a3:7e:fb:8c:ea:d0:52:ba:3e:1f:c3:c5:0d:75:3a:
4e:85:b9:ca:bd:d0:27:a0:9e:e7:15:3e:49:43:8a:72:9f:41:
5d:88:a3:46:07:e4:64:a2:6d:cc:74:2a:d4:49:8d:4d:37:5f:
d8:b2:8c:d5:ba:51:4f:79:fd:b6:cc:16:55:1e:ba:fa:83:4a:
31:af:38:de:fd:13:72:4b:b7:be:cc:44:8d:f4:7a:bc:a5:a4:
5c:2e:1e:1d:58:0c:ae:63:68:87:dd:be:56:16:b8:2f:69:a3:
d0:de:c8:55:4b:d5:31:76:16:ca:7f:f0:d7:c0:ba:3e:55:15:
4a:34:07:b5:27:91:dc:79:24:00:1a:b8:8b:48:02:41:52:f8:
45:5d:15:e7:a9:4b:ea:56:1d:2b:23:92:5a:33:ca:3d:f8:67:
5b:eb:fa:5f:29:55:0f:a0:34:09:ed:e3:b6:7c:ef:42:1d:9a:
15:1a:a4:37:47:29:63:4a:4a:81:72:08:ce:5c:61:09:10:e1:
c1:3a:45:c0:c9:c4:74:e5:39:13:e9:d8:2c:b9:ed:65:e4:62:
38:c3:14:f6:93:93:4a:d6:ab:06:80:21:26:79:96:3b:82:2f:
0c:05:64:6a:dc:03:ee:3c:af:62:e4:ab:d1:88:32:97:98:e1:
ec:f5:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:15:02 2026 by rpki-client