Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214931.roa
File: AS214931.roa (raw, json)
Hash identifier: zZ1AfEP2gM/5WYPSl+iRnCd0Fw6FuTcmNuRhleO8rGk=
Subject key identifier: 76:13:EA:82:FA:7C:48:94:BD:30:AA:7F:FC:57:3B:1A:B5:60:3E:21
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6825313EAEB919FF1A3386AE4482A6E262684FBD
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214931.roa
Signing time: Mon 24 Aug 2026 08:58:13 +0000
ROA not before: Mon 24 Aug 2026 08:53:13 +0000
ROA not after: Mon 23 Aug 2027 08:58:13 +0000
asID: 214931
IP address blocks: 188.220.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:25:31:3e:ae:b9:19:ff:1a:33:86:ae:44:82:a6:e2:62:68:4f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 08:53:13 2026 GMT
Not After : Aug 23 08:58:13 2027 GMT
Subject: CN=7613EA82FA7C4894BD30AA7FFC573B1AB5603E21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:28:63:63:68:96:a8:c3:35:cd:a3:8d:1b:
6d:4b:25:0c:b9:c1:92:85:0b:40:d1:e2:0d:eb:b7:
b5:48:38:04:30:4c:8e:46:33:23:74:7d:26:d8:25:
f9:d2:89:c4:c9:e3:42:9b:17:38:8f:53:44:0d:85:
6b:a4:dc:db:3b:a7:45:49:2a:8b:43:8b:2b:f3:e8:
db:92:3c:42:43:9d:f0:c2:c2:cb:1a:aa:41:ca:29:
18:88:69:be:aa:8d:24:d4:7d:73:08:27:ce:a3:68:
78:58:86:b2:f1:fe:73:e2:9f:27:8a:d1:5a:8b:54:
84:31:8e:d0:4e:63:e2:95:94:8c:4b:5d:ba:2b:df:
cd:2c:6a:ef:cc:d7:c5:bf:b6:14:02:68:b3:a6:e1:
36:85:f6:9b:73:c1:d5:3d:8b:a4:10:3b:75:09:e9:
ba:cb:ab:8e:6e:1c:39:fc:5b:f8:74:5b:ec:78:26:
0b:a1:4c:07:7a:59:32:72:14:72:a2:7f:b2:33:b0:
db:d1:3d:da:d1:8d:82:96:0f:9b:46:8d:c9:4d:09:
7e:e1:54:a1:ec:9f:29:31:ef:63:5c:ae:0b:dd:b5:
88:fe:2d:7e:59:11:50:ef:ec:b9:2d:e8:8c:d5:cb:
ff:5b:ec:6d:56:25:a0:3a:33:ba:8f:51:56:dc:f3:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:13:EA:82:FA:7C:48:94:BD:30:AA:7F:FC:57:3B:1A:B5:60:3E:21
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2a:3d:d1:b7:c7:de:32:b0:8e:88:81:01:1e:11:6d:b8:47:
19:35:ca:62:2b:65:6b:ff:80:54:e9:87:4f:b1:2c:40:67:9f:
7b:1c:ec:67:b9:11:92:c2:f9:ac:c9:c8:f6:b3:77:e6:9b:6a:
de:e2:6b:db:c6:61:4b:85:a1:62:c8:03:44:f1:9c:23:33:0f:
2b:80:b9:4a:1d:45:ef:f7:82:29:37:fa:47:42:38:5c:a4:f7:
e7:a8:14:32:e3:d0:4a:87:8d:a1:26:44:24:2d:66:ee:d7:63:
c8:91:69:27:92:18:aa:6e:2c:47:f1:d2:31:86:b2:a7:93:d8:
d3:b8:e0:47:b6:18:01:40:15:6d:0c:26:6f:fd:05:3e:67:98:
ae:eb:b0:09:be:f4:e8:05:22:8b:34:f6:72:ef:c8:ff:55:38:
8e:0c:47:5d:9c:ae:5a:1d:3d:da:03:64:39:67:3b:29:08:e0:
05:e0:6a:9b:c9:07:af:a6:1e:34:7c:31:33:da:b4:9c:61:e0:
72:b7:e1:58:34:07:9b:6c:38:0e:3e:88:05:93:4c:9f:fa:55:
16:1f:35:a6:da:99:32:ac:46:71:e1:a5:cd:10:43:c3:e5:e8:
d7:fc:82:6f:89:d8:6d:71:2d:e5:5a:cd:c1:c1:80:b0:bc:90:
09:3c:3c:b1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUaCUxPq65Gf8aM4auRIKm4mJoT70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjQwODUzMTNaFw0yNzA4MjMwODU4MTNaMDMxMTAvBgNV
BAMTKDc2MTNFQTgyRkE3QzQ4OTRCRDMwQUE3RkZDNTczQjFBQjU2MDNFMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSyhjY2iWqMM1zaONG21LJQy5
wZKFC0DR4g3rt7VIOAQwTI5GMyN0fSbYJfnSicTJ40KbFziPU0QNhWuk3Ns7p0VJ
KotDiyvz6NuSPEJDnfDCwssaqkHKKRiIab6qjSTUfXMIJ86jaHhYhrLx/nPinyeK
0VqLVIQxjtBOY+KVlIxLXbor380sau/M18W/thQCaLOm4TaF9ptzwdU9i6QQO3UJ
6brLq45uHDn8W/h0W+x4JguhTAd6WTJyFHKif7IzsNvRPdrRjYKWD5tGjclNCX7h
VKHsnykx72NcrgvdtYj+LX5ZEVDv7Lkt6IzVy/9b7G1WJaA6M7qPUVbc8yFLAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUdhPqgvp8SJS9MKp//Fc7GrVgPiEwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjE0OTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNwn
MA0GCSqGSIb3DQEBCwUAA4IBAQANKj3Rt8feMrCOiIEBHhFtuEcZNcpiK2Vr/4BU
6YdPsSxAZ597HOxnuRGSwvmsycj2s3fmm2re4mvbxmFLhaFiyANE8ZwjMw8rgLlK
HUXv94IpN/pHQjhcpPfnqBQy49BKh42hJkQkLWbu12PIkWknkhiqbixH8dIxhrKn
k9jTuOBHthgBQBVtDCZv/QU+Z5iu67AJvvToBSKLNPZy78j/VTiODEddnK5aHT3a
A2Q5ZzspCOAF4GqbyQevph40fDEz2rScYeByt+FYNAebbDgOPogFk0yf+lUWHzWm
2pkyrEZx4aXNEEPD5ejX/IJvidhtcS3lWs3BwYCwvJAJPDyx
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:34 2026 by rpki-client