Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214670.roa
File:                     AS214670.roa (raw, json)
Hash identifier:          fId63HPErfQVfFsYBPn7Mpv/hGlfFNCR6+yb9VGhbZE=
Subject key identifier:   79:2D:3C:18:16:04:45:88:31:84:16:8D:57:F6:38:C7:0C:58:6D:9E
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       10946C4098047D28759A57FFFD758F7D6FBD5F0C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214670.roa
Signing time:             Tue 11 Aug 2026 23:04:45 +0000
ROA not before:           Tue 11 Aug 2026 22:59:45 +0000
ROA not after:            Tue 10 Aug 2027 23:04:45 +0000
asID:                     214670
IP address blocks:        51.194.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:94:6c:40:98:04:7d:28:75:9a:57:ff:fd:75:8f:7d:6f:bd:5f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Aug 11 22:59:45 2026 GMT
            Not After : Aug 10 23:04:45 2027 GMT
        Subject: CN=792D3C18160445883184168D57F638C70C586D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:a7:49:0e:41:ec:0c:df:9d:18:a9:f4:95:
                    e7:95:0b:e0:b7:e6:ed:e1:f5:8a:fe:7f:19:23:45:
                    29:e7:65:2c:7b:09:bf:86:2e:b8:b9:6d:86:da:8f:
                    04:62:42:3d:55:b4:ea:9a:3d:51:a2:f3:8a:36:b8:
                    fa:e5:44:d2:44:2d:6a:99:79:bf:49:a2:e6:3f:77:
                    7f:fc:99:0c:71:90:c0:d3:7e:33:56:d4:2a:65:08:
                    6a:21:5c:f3:91:77:19:44:80:58:e5:6c:34:bd:43:
                    57:8b:4e:f5:fc:9d:56:58:78:c9:61:8f:09:16:b6:
                    a0:95:41:ff:97:41:e4:5b:45:d4:fc:6c:b0:86:27:
                    a4:9c:26:85:cd:f2:f1:9e:e2:0e:aa:4e:0f:89:88:
                    66:37:05:3c:11:67:17:7e:0d:ae:b9:5d:ed:79:ae:
                    7a:8c:b8:01:e3:5a:2a:91:17:88:09:d3:4e:25:2c:
                    4d:60:2f:09:2e:74:de:c4:78:b0:bb:2a:3c:a0:6f:
                    41:10:ad:ef:87:14:e7:17:17:40:c1:1a:c6:d3:0a:
                    d7:71:0a:85:5f:b2:ea:e9:48:48:45:a6:39:7a:63:
                    d7:71:1f:48:81:7e:14:7e:c5:e5:33:d2:b0:bf:ac:
                    b3:9e:9d:9f:e8:a4:47:ee:5d:b4:35:46:67:50:aa:
                    8f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2D:3C:18:16:04:45:88:31:84:16:8D:57:F6:38:C7:0C:58:6D:9E
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214670.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.194.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:6c:66:87:02:99:1a:b2:5d:d8:0c:ce:e7:87:76:96:3a:82:
         2d:fe:60:3e:79:a3:1f:64:fb:c1:0c:16:50:bc:a5:63:97:43:
         cb:c2:fb:bf:7e:80:4d:a5:7f:5a:a4:eb:72:d1:0e:4f:ee:73:
         20:fb:4c:a1:a6:85:e4:32:92:97:73:81:d5:eb:56:04:17:c3:
         af:08:7e:c2:ea:b8:f6:1b:9d:79:50:bc:b1:c9:74:37:f2:ca:
         3b:fc:9c:18:94:3a:ac:b9:78:96:3a:71:76:4f:cb:be:84:26:
         e2:f0:a1:16:5d:ac:3b:e1:33:6c:3a:e3:59:55:f3:c9:14:1d:
         b6:6f:0d:5b:9a:cc:14:c0:de:2c:f6:07:f4:23:a3:97:02:2c:
         da:5e:04:ad:46:ae:0b:2d:c1:fe:74:97:11:eb:6c:39:78:6f:
         bc:87:63:47:95:c5:b0:66:f8:d2:06:1e:cc:6a:2e:86:be:1e:
         ba:ba:ea:81:38:51:d4:e6:21:92:55:ca:29:d3:26:62:5c:5d:
         aa:9a:e9:cb:bf:dd:1f:50:82:2f:2b:d2:ee:51:a7:cb:dc:0b:
         fa:82:42:a2:7e:73:1e:40:21:a5:d5:0c:70:e9:c0:79:6a:2f:
         2d:b6:7d:1c:aa:17:e7:a4:a3:db:35:1f:80:46:06:86:0e:0e:
         5e:ae:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:19:05 2026 by rpki-client