Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214143.roa
File: AS214143.roa (raw, json)
Hash identifier: bhM0vKBrJaVLxxcS0SdKK9jMrQtf+9pRnMJSnfJtwkE=
Subject key identifier: 3C:89:41:79:34:CE:3A:B8:69:F5:45:28:6E:76:70:EA:5A:D3:C2:78
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6E0D5A1D5BE48E75A52ACAEDCEC1F6147AF1EB78
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214143.roa
Signing time: Mon 19 Oct 2026 07:46:55 +0000
ROA not before: Mon 19 Oct 2026 07:41:55 +0000
ROA not after: Mon 18 Oct 2027 07:46:55 +0000
asID: 214143
IP address blocks: 94.116.240.0/20 maxlen: 24
94.193.48.0/20 maxlen: 24
94.193.160.0/20 maxlen: 24
94.193.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0d:5a:1d:5b:e4:8e:75:a5:2a:ca:ed:ce:c1:f6:14:7a:f1:eb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 19 07:41:55 2026 GMT
Not After : Oct 18 07:46:55 2027 GMT
Subject: CN=3C89417934CE3AB869F545286E7670EA5AD3C278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:12:87:29:83:35:c9:8f:dd:67:79:33:0e:
0b:5b:dd:50:68:c1:8e:74:f0:2e:70:19:1c:47:da:
2d:8e:9a:00:9b:07:a4:df:0e:41:3f:36:f4:51:ef:
bd:29:4f:e8:84:a2:55:b1:e0:dc:42:f3:da:61:3e:
fc:9e:91:c2:3d:c6:48:80:f2:ff:d9:7d:a9:89:07:
1a:f2:6c:9a:30:24:89:45:a7:5f:8a:88:97:8b:a1:
14:cc:1f:9c:3c:d9:86:ec:49:fb:d4:13:d2:28:89:
52:cd:3c:6b:cf:3e:3c:fa:b6:96:d8:a7:7d:0c:82:
45:95:87:dc:cd:37:77:b3:66:66:76:07:89:e5:70:
ad:2d:08:b7:db:4a:19:44:aa:b5:59:91:16:37:5d:
75:f4:2d:c4:b8:2a:98:44:53:1b:12:08:a1:cb:f5:
85:ef:8c:29:f8:9b:b6:23:01:bc:b3:cf:1d:0e:0e:
41:a4:bc:c2:dc:0c:6c:91:ae:8a:a3:6e:f4:0f:76:
24:97:80:7f:4a:bd:f3:6b:d4:c0:4a:20:ca:98:74:
e3:98:98:9d:df:14:92:15:da:a5:ef:fe:22:e3:7a:
e3:35:a1:bd:9f:00:05:24:04:a7:5b:98:0c:54:d1:
18:92:c9:e8:0f:e5:20:7a:94:c5:52:d8:9b:87:ff:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:89:41:79:34:CE:3A:B8:69:F5:45:28:6E:76:70:EA:5A:D3:C2:78
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214143.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.116.240.0/20
94.193.48.0/20
94.193.160.0/20
94.193.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:f3:a1:2a:d8:50:b7:06:2c:ed:78:79:9f:09:98:e0:f1:0e:
c2:3e:35:19:67:c0:37:95:05:4f:b2:e0:e0:a5:77:43:59:1f:
ad:03:72:78:56:69:79:b6:17:c8:8b:18:e3:fe:8b:33:c7:0a:
8b:de:21:e4:7e:90:ca:21:14:6d:2c:17:c9:b0:f2:f5:e3:c4:
cb:53:1b:bd:b1:fc:88:17:9c:4c:bf:57:c8:21:2d:41:d5:50:
d0:c2:57:c9:7d:d8:57:28:33:e8:60:a4:78:16:39:aa:2a:18:
8a:cb:5d:a8:ed:2a:25:df:a7:83:ae:d5:3e:c9:b2:83:2f:c7:
e6:29:c3:1d:cb:4e:5b:49:8f:f3:13:bd:3b:e8:ad:6f:03:79:
d9:82:12:90:5a:91:1f:7c:31:23:e6:3d:56:ce:8f:2b:42:25:
6f:7b:75:d1:76:88:92:ee:c0:fa:21:f6:a7:2e:9e:c9:ef:61:
3d:78:a1:0f:3c:40:3a:97:d2:1b:9b:4f:46:ac:8e:d3:65:8f:
ab:3d:44:4f:fa:0b:b8:f9:76:18:03:2e:70:20:73:20:48:7a:
2b:da:d5:46:13:b0:04:2a:99:1d:34:2f:45:05:91:bb:7e:6a:
5c:96:d2:a7:96:97:b7:05:83:93:8d:fb:6b:18:4e:cf:8a:7e:
2c:c1:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:30:45 2026 by rpki-client