Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: +ASeauyI83n8siFAph2yWE4AOmZ5ji7tcvOXbColtvc=
Subject key identifier: AA:8B:EB:19:E6:AE:90:2B:E2:23:CE:F1:16:1F:80:CB:11:C0:C5:BB
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3455B3A170560B398AD78541EFE322E0ED73D1BE
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS2914.roa
Signing time: Thu 15 Oct 2026 07:51:55 +0000
ROA not before: Thu 15 Oct 2026 07:46:55 +0000
ROA not after: Thu 14 Oct 2027 07:51:55 +0000
asID: 2914
IP address blocks: 193.111.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:55:b3:a1:70:56:0b:39:8a:d7:85:41:ef:e3:22:e0:ed:73:d1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 15 07:46:55 2026 GMT
Not After : Oct 14 07:51:55 2027 GMT
Subject: CN=AA8BEB19E6AE902BE223CEF1161F80CB11C0C5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:e9:61:92:7f:5e:92:88:b7:48:70:53:8e:
eb:7a:09:be:5d:99:fd:70:82:4f:78:ee:52:48:69:
f4:96:40:73:db:5e:e9:e7:37:c5:b2:69:94:66:60:
45:14:96:71:f3:eb:35:0f:f3:9f:bd:4a:39:02:1a:
b7:d4:d9:ad:8e:e2:41:c5:fd:a3:15:62:8c:1b:3f:
2a:e4:58:fd:c4:f2:a3:05:13:62:9c:c9:20:dd:ba:
90:fa:08:ea:ac:cd:69:6e:c8:09:d3:b2:c0:58:7c:
6b:06:be:83:b1:39:5e:e0:d0:d2:0e:f5:a4:6e:b7:
96:51:8b:7b:6a:f0:fb:29:d4:f6:88:8d:0f:9b:dc:
4f:84:da:88:e1:20:ce:a0:c5:57:94:63:6f:06:df:
e1:6d:02:eb:c4:f0:0e:9f:60:5c:c6:d5:af:c5:fa:
4e:5b:00:ff:b2:65:e0:68:42:08:e5:db:89:3c:6b:
84:a7:96:14:9a:5f:8a:57:81:83:aa:8a:da:62:30:
df:6e:ca:7f:e0:9a:0f:98:d4:0b:dd:f1:fa:d9:6d:
2c:68:24:19:36:fb:76:44:19:d3:f8:fd:7a:94:74:
19:3c:1a:56:2f:5c:2b:d1:96:70:4c:8f:12:3a:c6:
81:22:10:9c:1f:df:74:1d:c7:a4:00:51:81:59:c4:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8B:EB:19:E6:AE:90:2B:E2:23:CE:F1:16:1F:80:CB:11:C0:C5:BB
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.124.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f9:82:d4:74:66:7d:46:35:c7:d5:9f:3f:a1:f4:c5:60:fe:
3f:71:e4:34:09:0d:13:34:ba:f1:be:fd:4f:3c:44:bf:33:9e:
95:89:da:f4:1b:14:14:15:90:e0:1a:3e:9e:00:f8:09:bd:ba:
e6:4c:ee:60:99:2a:77:af:6c:80:2a:87:ef:04:23:a4:d1:3a:
d9:6a:35:1a:22:04:13:85:8a:76:ab:3d:44:33:5a:24:cc:80:
09:ff:70:b8:57:6f:ad:a9:ee:43:93:99:eb:d9:db:18:5c:47:
15:79:7c:89:7d:7b:f5:1a:a8:8b:27:17:51:2d:17:2f:9b:81:
0e:7d:36:91:dc:2f:01:3e:99:98:e3:90:68:cd:78:78:42:35:
42:96:6c:b8:e6:34:7e:41:fc:9f:3e:a1:8b:a6:37:9a:3d:db:
82:32:be:ce:81:40:78:a2:24:2e:da:f2:29:d2:a2:e0:ed:d7:
14:68:b9:fb:a0:2e:4a:c4:c7:27:ee:7b:4d:e9:4f:88:30:70:
2c:ea:46:26:bf:85:5a:77:37:2a:4c:24:5c:ce:16:2e:35:7e:
6d:80:48:fc:76:04:b5:58:90:ef:6e:ce:c4:d1:7b:f4:4b:ef:
02:cb:ad:9d:97:ca:70:b7:9a:86:56:c4:fa:95:ea:b2:03:8d:
ce:40:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:45 2026 by rpki-client