Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214159.roa
File: AS214159.roa (raw, json)
Hash identifier: gm9NnpL3zEKgEYTYLbmHy1NxEb9WdB6ajC0N/Zs0p24=
Subject key identifier: 67:E6:AD:15:E8:F5:8C:B8:62:38:E5:1D:FC:31:2B:EA:3D:E3:3D:2E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 03B7097F3E7BB92EFF0E8C33EBCF5A94CF09A33C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214159.roa
Signing time: Sun 09 Aug 2026 23:15:46 +0000
ROA not before: Sun 09 Aug 2026 23:10:46 +0000
ROA not after: Sun 08 Aug 2027 23:15:46 +0000
asID: 214159
IP address blocks: 87.81.32.0/20 maxlen: 24
87.81.48.0/20 maxlen: 24
87.81.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b7:09:7f:3e:7b:b9:2e:ff:0e:8c:33:eb:cf:5a:94:cf:09:a3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 9 23:10:46 2026 GMT
Not After : Aug 8 23:15:46 2027 GMT
Subject: CN=67E6AD15E8F58CB86238E51DFC312BEA3DE33D2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:f7:22:78:e3:a3:36:ec:c1:08:16:70:c6:
92:c4:60:97:3c:36:86:cf:9c:a5:9f:e6:f8:9c:59:
a3:ef:45:0d:35:ce:e1:da:b9:2d:a2:ab:66:ef:37:
93:a2:f0:f8:7f:73:93:79:2e:67:31:3c:79:b7:e8:
39:40:6e:6c:86:51:78:a0:76:46:fc:dc:42:98:4f:
fc:15:2e:31:04:68:0c:87:6f:6d:65:0c:a0:c3:13:
54:de:e0:bc:e3:b4:99:ee:3a:47:b1:d6:66:7a:c6:
2a:b2:31:44:03:80:fb:97:4b:e2:17:b0:07:cd:10:
d8:60:08:62:de:db:98:14:c5:c4:ce:4f:79:07:2c:
d8:9a:20:b7:fe:c4:f7:05:cc:a6:cd:c8:f4:34:42:
96:ef:a1:1f:8d:34:5e:23:ba:aa:b9:b3:22:d8:f5:
9c:57:cf:33:e1:46:b6:4c:46:3f:b1:57:3f:bb:7b:
f1:8a:9b:4d:6b:91:ea:bb:24:62:56:19:de:d1:d3:
3a:d0:42:3a:b1:90:fa:ef:21:b8:10:6f:fb:23:48:
98:74:a9:94:c6:e2:a1:b3:2d:1c:0c:ab:b2:6d:b5:
61:a6:2a:55:91:1b:c0:d3:14:9e:9a:2a:eb:bb:20:
95:c8:50:85:b9:b6:f4:3a:37:72:da:59:1f:80:20:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E6:AD:15:E8:F5:8C:B8:62:38:E5:1D:FC:31:2B:EA:3D:E3:3D:2E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214159.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.81.32.0/19
87.81.208.0/20
Signature Algorithm: sha256WithRSAEncryption
49:92:4c:6b:26:86:c0:e2:e9:4e:7c:24:c6:bf:59:09:a9:72:
be:3d:a0:99:d5:e7:c0:85:e5:cf:07:6b:d1:84:80:a7:2a:62:
84:13:d4:7b:b8:32:f5:26:fc:de:ba:15:c3:3f:f4:4b:92:f9:
dd:c9:53:cc:0e:dc:c6:d4:d7:d3:7d:93:58:6f:be:71:5c:2a:
2a:32:3a:7b:54:88:95:8a:3d:74:8f:a5:65:25:5f:95:d4:88:
e6:72:9d:8d:fc:24:6a:fd:2c:d4:2e:32:d6:ac:c5:88:b5:1b:
67:61:80:73:ee:ab:24:e5:12:a1:f5:dc:58:76:32:43:c5:bf:
9e:83:1a:8b:38:ac:53:31:5b:fc:74:2e:6a:5f:a7:7d:d2:2b:
f7:e8:77:c9:83:2a:5a:1b:90:4c:4b:94:23:8a:dd:77:4f:f0:
b0:d0:e1:ff:27:c0:c4:57:04:4c:e5:d4:d0:14:e2:d1:be:05:
73:77:95:43:a0:29:ca:65:67:ed:02:6a:bf:10:96:b6:8c:f0:
44:80:54:cc:1d:bd:0c:0b:d6:0b:e6:a8:3f:30:df:e7:07:51:
40:a7:7a:7b:69:cd:34:47:fe:27:4c:bb:4b:86:11:1c:3e:2b:
91:5a:7c:40:b1:65:9b:a1:cf:e9:b3:16:89:7c:3b:0a:2b:c4:
bd:a8:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:26:42 2026 by rpki-client