Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14293.roa
File: AS14293.roa (raw, json)
Hash identifier: IPkiNE/f7g2TnMQJMkmOrlLkAOnqN0swt+WTO5iXeJI=
Subject key identifier: 14:B6:D7:39:4F:37:A2:6A:48:1A:1E:EA:D1:F6:FF:E5:EC:40:6E:35
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 193D5F4A4C71DC5A732E9DC1AB646A5E56C54A46
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14293.roa
Signing time: Tue 19 May 2026 11:26:48 +0000
ROA not before: Tue 19 May 2026 11:21:48 +0000
ROA not after: Tue 18 May 2027 11:26:48 +0000
asID: 14293
IP address blocks: 141.11.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3d:5f:4a:4c:71:dc:5a:73:2e:9d:c1:ab:64:6a:5e:56:c5:4a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 19 11:21:48 2026 GMT
Not After : May 18 11:26:48 2027 GMT
Subject: CN=14B6D7394F37A26A481A1EEAD1F6FFE5EC406E35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:49:97:0c:b6:97:e8:22:77:59:48:42:e3:
be:ca:db:d1:9d:dd:eb:39:09:59:95:18:f0:9f:8d:
85:8d:50:60:ff:cb:69:2a:5d:e9:bd:aa:a7:6d:04:
13:74:63:3a:81:cf:50:e2:c4:e3:43:26:8a:47:87:
bb:44:b4:74:07:a8:3c:65:7d:39:5c:b0:30:f4:c4:
bb:f6:25:81:ea:fb:1f:e4:27:48:90:b4:a2:3a:76:
57:95:10:18:b3:03:da:fb:86:66:b9:cb:39:3f:53:
0c:07:d7:37:c2:8f:28:ca:b1:f2:ca:50:e2:75:c0:
b7:5f:33:c0:c5:13:95:39:b8:1c:6c:74:9d:aa:ca:
2c:e2:2c:ca:ad:d0:8d:2c:45:aa:6b:61:ac:59:22:
28:a6:0d:c0:6e:1a:8c:54:57:18:49:d3:e6:c3:aa:
59:bf:ea:b9:f4:72:68:3f:64:c3:2d:df:bd:14:c4:
f0:98:bd:04:3e:26:27:8e:97:6f:31:f9:6b:ae:33:
58:6f:c9:09:79:f1:99:3a:f5:57:7c:e3:56:22:41:
65:5e:66:00:32:b2:3f:4d:9b:29:66:b4:12:13:71:
47:66:d5:e4:9c:04:39:f7:18:77:cb:e2:07:35:aa:
c6:5f:b8:f8:aa:d9:a5:31:94:8d:9a:58:02:f6:ae:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B6:D7:39:4F:37:A2:6A:48:1A:1E:EA:D1:F6:FF:E5:EC:40:6E:35
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS14293.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.217.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ff:74:e8:54:a1:0f:89:c0:07:24:80:bf:b0:d2:b8:dd:f9:
c8:e7:c5:5f:05:a1:50:c8:bb:6a:8e:03:10:ad:05:f1:47:92:
59:93:42:5c:82:d6:9f:6c:79:8d:8a:15:11:0f:d7:7a:65:a8:
e3:97:17:3c:53:fa:42:e8:b2:7c:34:f7:7d:2e:52:3d:69:18:
23:32:e5:ba:b9:69:c2:fc:38:ae:9f:9d:0e:d5:65:18:29:21:
43:3a:89:fa:13:db:37:1c:ad:dc:8f:6a:1c:9d:e1:b2:4a:e1:
60:5d:2b:ce:5c:d0:0f:84:27:7e:53:ae:db:64:37:84:b3:52:
29:bd:69:7b:cf:4f:ec:f8:32:f9:4a:6e:e5:4a:18:c2:d5:e6:
2d:bf:59:7f:25:fc:8a:66:83:e9:53:fc:92:00:a2:34:55:d6:
72:fc:ef:1a:df:a7:4f:97:52:8a:d2:67:bb:d0:7c:92:29:24:
e9:44:03:b4:bb:e9:ea:4c:58:99:79:b8:03:99:7a:a8:82:e3:
63:3f:70:85:09:ea:14:0b:f9:9b:d8:87:43:86:00:a3:3f:27:
d9:7e:86:d9:43:60:1b:19:2a:74:cc:59:d0:97:cf:62:cd:2d:
9b:92:d2:0e:fa:0c:2b:74:2c:a2:dd:45:e1:d9:b2:e4:8d:61:
cd:27:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 04:01:04 2026 by rpki-client