Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: BJp1BaaoUkF/KdesYwWVF4Xjvy5nZ1yKOLHhFX+UeYw=
Subject key identifier: 20:69:E7:63:3C:74:B5:E4:1E:8F:94:75:D4:7E:73:01:9F:43:38:0A
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 603828DFBC725E309DF3DF608C0A77041E469DA7
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214483.roa
Signing time: Fri 28 Aug 2026 15:31:45 +0000
ROA not before: Fri 28 Aug 2026 15:26:45 +0000
ROA not after: Fri 27 Aug 2027 15:31:45 +0000
asID: 214483
IP address blocks: 45.158.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:38:28:df:bc:72:5e:30:9d:f3:df:60:8c:0a:77:04:1e:46:9d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 28 15:26:45 2026 GMT
Not After : Aug 27 15:31:45 2027 GMT
Subject: CN=2069E7633C74B5E41E8F9475D47E73019F43380A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:78:9e:99:49:a9:ad:93:11:64:04:ac:3e:
b7:53:06:dd:17:8a:08:15:e2:c2:34:8b:e3:37:aa:
a3:22:77:d0:27:ab:5b:93:13:a7:ee:d1:e1:75:0a:
93:ad:9f:5f:c1:e9:94:a5:63:39:45:a8:a4:37:94:
c3:63:bb:28:2d:bd:50:cb:03:14:eb:bf:cd:4c:4d:
a6:1f:b2:5c:2b:8b:43:95:db:38:07:7c:84:b6:42:
a1:68:64:e1:1a:39:f3:db:59:5d:03:8a:a3:bc:fd:
af:b0:a9:55:ce:39:ac:67:fa:51:76:96:ad:d7:15:
6e:a3:9c:67:c0:7f:da:9b:75:49:b4:a4:a9:47:09:
2a:5b:d7:53:e1:8c:2c:e3:f7:7a:52:4f:28:f1:1f:
7e:70:e2:c9:3a:dd:30:3e:7d:9f:de:c2:1e:5a:5a:
51:47:a3:03:87:cc:f1:d9:67:a8:08:36:b1:02:5e:
f1:bf:8d:bd:cb:04:5c:7f:8e:b9:3c:2a:4c:65:8a:
d5:3f:15:c6:16:32:08:11:92:36:29:2b:28:68:73:
8b:08:d9:68:86:f7:21:4d:e8:62:13:9c:9f:40:2d:
79:bf:d5:1a:8d:8d:0a:09:ad:a8:c4:4e:a6:ee:b6:
3c:a2:4d:96:48:b8:d8:55:d0:17:ca:3e:6a:a0:ee:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:E7:63:3C:74:B5:E4:1E:8F:94:75:D4:7E:73:01:9F:43:38:0A
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6a:8a:29:62:ba:da:fe:52:27:7d:14:73:1a:e4:50:c4:99:
1c:90:7c:c3:22:e9:84:e9:6c:e5:f3:1c:3f:69:8a:42:5a:69:
8f:e1:5c:56:dd:92:3f:63:5d:05:2a:ff:f8:cc:d1:65:ad:20:
a3:00:84:21:72:e9:6b:f5:3a:d7:9f:ef:c2:d6:f7:52:d0:ba:
cc:a5:39:16:23:9a:7f:8f:93:00:d6:af:78:bd:8e:79:bc:bf:
55:c2:c1:68:47:78:68:32:5d:51:2e:ea:fc:67:bf:8c:35:79:
3e:d0:07:b3:b6:85:8d:90:be:82:83:38:ad:ce:9a:46:eb:c1:
a6:33:51:ee:f6:04:df:1e:25:17:4a:74:c4:e9:99:87:ba:4a:
af:45:94:2d:f7:83:55:5c:59:59:8b:29:79:46:26:eb:7a:39:
87:e0:36:a4:6c:e3:2d:a5:29:25:5a:91:78:86:48:1b:4f:49:
a8:1f:73:4d:9b:da:57:94:5b:7f:60:3d:88:6b:b0:13:64:e8:
00:35:06:96:ca:35:81:97:c9:ee:ad:81:5d:da:26:a5:e8:b7:
ee:4a:20:52:5e:4f:50:94:65:cc:a8:da:c5:ca:5e:a2:ad:a1:
69:e8:fe:a9:36:52:ac:fe:81:3f:1f:3d:f7:29:24:88:df:c7:
ce:d2:69:c6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUYDgo37xyXjCd899gjAp3BB5GnacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA4MjgxNTI2NDVaFw0yNzA4MjcxNTMxNDVaMDMxMTAvBgNV
BAMTKDIwNjlFNzYzM0M3NEI1RTQxRThGOTQ3NUQ0N0U3MzAxOUY0MzM4MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbOXiemUmprZMRZASsPrdTBt0X
iggV4sI0i+M3qqMid9Anq1uTE6fu0eF1CpOtn1/B6ZSlYzlFqKQ3lMNjuygtvVDL
AxTrv81MTaYfslwri0OV2zgHfIS2QqFoZOEaOfPbWV0DiqO8/a+wqVXOOaxn+lF2
lq3XFW6jnGfAf9qbdUm0pKlHCSpb11PhjCzj93pSTyjxH35w4sk63TA+fZ/ewh5a
WlFHowOHzPHZZ6gINrECXvG/jb3LBFx/jrk8KkxlitU/FcYWMggRkjYpKyhoc4sI
2WiG9yFN6GITnJ9ALXm/1RqNjQoJrajETqbutjyiTZZIuNhV0BfKPmqg7k6PAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUIGnnYzx0teQej5R11H5zAZ9DOAowHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjE0NDgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ4L
MA0GCSqGSIb3DQEBCwUAA4IBAQANaoopYrra/lInfRRzGuRQxJkckHzDIumE6Wzl
8xw/aYpCWmmP4VxW3ZI/Y10FKv/4zNFlrSCjAIQhculr9TrXn+/C1vdS0LrMpTkW
I5p/j5MA1q94vY55vL9VwsFoR3hoMl1RLur8Z7+MNXk+0AeztoWNkL6CgzitzppG
68GmM1Hu9gTfHiUXSnTE6ZmHukqvRZQt94NVXFlZiyl5RibrejmH4DakbOMtpSkl
WpF4hkgbT0moH3NNm9pXlFt/YD2Ia7ATZOgANQaWyjWBl8nurYFd2ial6LfuSiBS
Xk9QlGXMqNrFyl6iraFp6P6pNlKs/oE/Hz33KSSI38fO0mnG
-----END CERTIFICATE-----
Generated at Fri Sep 4 05:04:03 2026 by rpki-client