Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214026.roa
File: AS214026.roa (raw, json)
Hash identifier: oPSyRtxlw9UTHaebOhFbfBPKD2A2LGwBiP7V4sNWqnk=
Subject key identifier: EA:CA:AA:71:96:C4:6B:8D:46:33:E1:65:8B:30:3C:D8:49:8B:18:91
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1414B0E97E96E79362C4955820B2E2DA75336F4E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214026.roa
Signing time: Fri 09 Oct 2026 00:06:49 +0000
ROA not before: Fri 09 Oct 2026 00:01:49 +0000
ROA not after: Fri 08 Oct 2027 00:06:49 +0000
asID: 214026
IP address blocks: 141.11.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:14:b0:e9:7e:96:e7:93:62:c4:95:58:20:b2:e2:da:75:33:6f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 9 00:01:49 2026 GMT
Not After : Oct 8 00:06:49 2027 GMT
Subject: CN=EACAAA7196C46B8D4633E1658B303CD8498B1891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:cf:59:82:da:65:cc:17:15:0b:24:dc:3e:
00:f3:7d:a9:01:47:dd:94:ad:67:8e:84:1b:a4:11:
d6:45:a0:a8:54:af:a3:b6:3e:d9:0d:a1:15:47:3d:
c4:dc:8c:c6:30:7a:d8:bc:b5:5a:8c:7e:be:ad:f5:
b9:2e:07:8e:75:26:ad:80:7c:76:a8:21:fd:fb:d4:
0d:5f:70:e7:59:fd:7a:cb:e4:2e:64:69:84:0e:7d:
b1:08:c0:a1:f3:22:18:a1:37:a5:b3:d0:26:d6:82:
11:1f:76:b2:8f:16:96:2b:91:de:ab:0e:03:89:d8:
c8:76:c3:a1:5d:92:fb:85:23:28:aa:18:1e:38:66:
4b:88:e5:8d:d9:80:08:45:85:76:ea:f5:40:0d:f0:
e7:48:6a:42:84:de:4b:b8:3a:1f:60:5a:34:3f:1f:
d3:a1:60:4a:89:17:29:59:54:be:cf:3a:c8:f4:ba:
00:f9:1b:71:b5:a0:f4:b4:10:6a:ab:b6:9e:70:15:
14:ef:ec:21:ce:e8:23:06:2c:32:d1:5f:38:eb:15:
08:fc:2c:97:7b:f6:23:2e:33:e4:f4:cb:e0:01:97:
77:43:5e:52:82:a2:e2:34:07:9c:52:14:bc:ba:d0:
b7:8b:b3:73:fe:da:03:cc:68:fd:27:7b:80:3b:d7:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:AA:71:96:C4:6B:8D:46:33:E1:65:8B:30:3C:D8:49:8B:18:91
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214026.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.150.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:10:4f:b5:5d:76:16:10:b9:96:67:ed:54:26:90:76:42:9f:
da:ef:3f:7f:76:21:75:d5:ff:f1:1c:aa:3f:52:cd:f8:06:76:
2b:04:c2:72:de:70:fc:1e:ca:12:ba:b1:4f:f2:df:38:92:9f:
33:d2:14:0d:53:ef:d2:91:4b:e6:df:33:d6:94:10:5e:e0:27:
47:62:8f:6a:b4:f7:df:c2:3e:37:38:1f:78:24:67:c6:76:2b:
f6:6e:70:57:bc:ec:69:c5:95:0b:38:fc:de:0d:b5:f9:20:d0:
c3:86:bf:72:70:42:26:35:69:35:fa:a1:46:c9:0a:36:16:f4:
e9:60:45:18:4b:c0:b7:dd:5d:df:d0:c6:bd:e1:a6:c5:98:b0:
c8:78:ac:a0:90:bf:ce:96:c3:cc:34:75:4a:b9:a1:57:fb:bd:
ca:14:e9:8c:c2:45:f4:fe:dc:dd:6c:36:29:91:c4:32:f9:0b:
e8:78:d4:c2:9d:5e:06:8d:c6:13:09:c0:04:7c:dd:fa:77:40:
23:4e:f3:b2:fe:05:13:2c:26:8e:9e:49:ef:b1:c2:54:3e:cb:
9e:de:bd:2d:31:0f:e3:c0:0d:fd:64:1d:24:53:97:ff:0e:32:
a0:78:02:86:a2:1b:96:30:0a:41:56:e9:11:1a:4b:eb:61:df:
46:89:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:29:10 2026 by rpki-client