Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: 1ztxXGuoMV8c9iqsQdP3/RDiAs+dHzqjcQH3pqg4TnE=
Subject key identifier: 58:73:2A:C5:24:A1:EB:41:B0:91:44:0A:A4:FB:08:7D:25:C8:36:EB
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 62A7CB591B8F332D1F8212303BD5DFD9C3F89153
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214483.roa
Signing time: Thu 08 Oct 2026 13:41:25 +0000
ROA not before: Thu 08 Oct 2026 13:36:25 +0000
ROA not after: Thu 07 Oct 2027 13:41:25 +0000
asID: 214483
IP address blocks: 2a04:f3c0::/29 maxlen: 29
2a05:5040::/29 maxlen: 29
2a07:6a40::/29 maxlen: 29
2a09:22c0::/29 maxlen: 29
2a0c:1c00::/29 maxlen: 29
2a10:ec80::/29 maxlen: 29
2a10:f100::/29 maxlen: 29
2a10:fd80::/29 maxlen: 29
2a10:ff80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a7:cb:59:1b:8f:33:2d:1f:82:12:30:3b:d5:df:d9:c3:f8:91:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 8 13:36:25 2026 GMT
Not After : Oct 7 13:41:25 2027 GMT
Subject: CN=58732AC524A1EB41B091440AA4FB087D25C836EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:fc:7b:f8:d5:cb:b6:1b:b5:60:42:4a:d9:
73:db:71:f8:95:0f:73:5e:38:bd:76:1a:a8:a6:1a:
76:c8:f1:22:8a:f5:8c:db:91:6a:9f:f0:65:4e:f7:
96:b8:73:76:d7:1f:2d:07:13:e8:7f:98:00:eb:30:
c6:82:3e:8e:c3:18:18:40:53:6e:75:e8:ea:05:29:
bd:ee:3e:e7:ee:d0:cd:c6:fb:dc:a5:c3:33:c7:5d:
05:bf:d4:5e:be:c7:a9:2c:c0:07:d2:25:a8:82:7e:
fe:fd:fc:f0:4d:9a:fe:75:35:39:8c:db:4c:f8:d8:
25:55:60:6a:91:b7:6d:3e:8f:9b:5b:d9:23:9a:dd:
a2:86:c1:b4:73:9f:86:60:a1:62:45:a8:0e:2e:66:
b0:9b:50:ff:af:b4:f4:4b:be:e3:eb:3e:f4:03:b3:
a2:74:e3:3b:c0:d8:09:9c:96:5c:91:45:80:e8:93:
a2:41:bf:77:9b:8a:3f:a7:81:47:42:91:b9:0c:c9:
2c:96:58:bc:cd:b3:1e:22:e2:9d:9c:dd:a3:1c:0d:
57:dc:a5:ad:b3:fb:92:0e:63:51:a7:0e:8e:b9:b1:
a8:40:80:42:9e:53:25:aa:ce:9b:1b:5c:51:c6:41:
a9:42:8d:3c:e0:40:2f:a6:80:c3:27:ae:67:af:c2:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:73:2A:C5:24:A1:EB:41:B0:91:44:0A:A4:FB:08:7D:25:C8:36:EB
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:f3c0::/29
2a05:5040::/29
2a07:6a40::/29
2a09:22c0::/29
2a0c:1c00::/29
2a10:ec80::/29
2a10:f100::/29
2a10:fd80::/29
2a10:ff80::/29
Signature Algorithm: sha256WithRSAEncryption
57:82:e7:75:71:0e:9d:a6:92:56:48:5b:61:40:e6:e2:21:de:
6c:cb:be:87:0e:f9:3e:81:e7:4f:ab:ad:c9:1c:24:6c:f5:a8:
39:9e:2d:5e:61:d8:e2:93:ef:4a:9e:df:9d:41:6d:57:b7:f9:
df:f5:ea:48:65:9f:23:c0:d4:5f:75:6a:51:56:ff:e1:5a:bb:
b8:ae:97:cd:46:4f:cb:fc:4a:8c:8e:e7:67:e3:1f:35:dc:14:
f4:28:e1:27:8b:6e:52:86:7e:08:50:07:26:c1:b2:27:2f:39:
7c:c6:f0:d2:d6:95:47:ce:a8:da:62:06:33:93:02:55:d1:d3:
e3:5d:b8:80:0d:08:90:fd:7e:7d:0c:62:ea:e5:4f:47:c3:38:
14:ac:f6:82:20:72:79:2c:b7:38:39:51:70:29:8a:9b:11:a7:
eb:fc:89:2e:97:e3:e4:2e:f6:fa:39:d5:57:62:38:c4:3d:90:
1f:45:b0:d4:8b:aa:70:69:f3:53:d1:8b:eb:83:31:b7:1f:98:
9c:bb:e3:15:e2:fc:d0:99:0c:31:a2:29:d5:cd:b7:22:80:90:
92:20:29:3b:df:9e:75:e2:f3:ab:b9:78:ab:01:97:f2:c6:20:
7d:9d:52:5f:b7:5e:85:42:8e:67:f1:f7:68:ac:5b:88:9a:ce:
a9:88:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 00:17:46 2026 by rpki-client