Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214154.roa
File: AS214154.roa (raw, json)
Hash identifier: PA8xsQeVpcwazoSx0R5VGznoTagYOiDe/x/l37jpwdI=
Subject key identifier: 29:7A:31:72:D9:17:C6:49:0D:07:7D:15:71:7A:E4:A1:2C:4F:F7:48
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0D3C5BE4B639BC840AEE9062856D138CA9020F59
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214154.roa
Signing time: Thu 30 Jul 2026 15:49:16 +0000
ROA not before: Thu 30 Jul 2026 15:44:16 +0000
ROA not after: Thu 29 Jul 2027 15:49:16 +0000
asID: 214154
IP address blocks: 141.11.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3c:5b:e4:b6:39:bc:84:0a:ee:90:62:85:6d:13:8c:a9:02:0f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 30 15:44:16 2026 GMT
Not After : Jul 29 15:49:16 2027 GMT
Subject: CN=297A3172D917C6490D077D15717AE4A12C4FF748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:2d:cd:a4:e9:e3:33:f9:fc:4b:0b:34:87:
f3:b2:cc:09:31:83:6d:42:54:6c:33:a9:4d:dc:b2:
ce:9f:d2:8e:b9:14:92:c7:2f:fc:67:44:d8:fc:21:
cb:1e:85:85:f2:51:bc:39:53:5c:d8:da:05:9a:74:
fb:5b:83:80:f6:00:95:a3:95:19:ac:b6:b0:a5:b5:
68:52:df:db:b3:25:e5:35:26:8a:96:a2:fd:53:0b:
c0:e0:c7:9e:e6:6a:e4:7e:68:90:4c:2e:32:53:18:
6a:a9:ab:0a:18:5e:30:8d:c0:56:31:73:cd:5a:c8:
bc:a2:e8:fe:24:ba:ab:57:58:d2:19:85:4f:56:e0:
44:ad:3a:05:dc:29:c2:21:70:73:e9:05:59:65:58:
af:02:e2:a7:9d:65:34:df:c4:8c:5b:79:75:14:8d:
c0:8d:bd:c1:da:80:3a:2f:60:ce:2c:dd:15:b8:5f:
f7:81:0f:18:b9:58:c2:d1:0c:07:52:1b:bd:be:2e:
30:9e:4b:dc:6c:8e:79:a0:e3:aa:73:97:98:86:b1:
19:ee:a1:ac:ed:15:6b:14:d6:7c:16:99:98:b1:a0:
43:dc:fa:a0:0d:33:b3:80:83:12:77:36:83:6c:60:
c9:cc:dd:90:4b:d2:e4:e7:95:f0:8d:4d:86:47:51:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7A:31:72:D9:17:C6:49:0D:07:7D:15:71:7A:E4:A1:2C:4F:F7:48
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214154.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c1:90:20:50:50:98:59:8e:fe:91:f6:6e:a6:45:46:13:a0:
bf:67:c9:cc:ef:36:f4:14:5f:e3:f6:7f:21:4a:93:4a:68:b4:
d0:8a:66:79:fa:00:dd:68:1c:10:44:1b:69:d5:d6:dc:dd:3a:
a9:9d:e5:ed:5a:f7:1c:8d:08:f7:25:07:8a:2b:f2:21:88:b0:
76:41:4e:85:53:79:ab:7b:16:13:15:a9:2e:36:79:32:a0:23:
13:0f:e4:b0:e5:a0:3a:3e:a1:0b:46:24:14:b3:d8:2b:e1:57:
0c:fb:b9:75:b3:4e:6a:59:b9:5a:28:2a:bc:db:91:2a:39:6f:
a2:7d:0a:03:64:0a:80:04:b5:3f:15:31:54:0d:31:9a:65:0d:
31:46:3a:76:1b:7c:0a:56:66:dc:bd:3d:5f:3c:7c:8e:e6:a3:
ae:dd:82:64:b3:8f:3f:a8:4d:1d:b3:29:63:65:4a:b5:2e:bb:
2e:01:98:b8:67:f5:10:cd:3c:81:23:69:8d:c2:86:2f:f9:3b:
a9:ad:e5:90:aa:a8:0e:ab:a7:2e:31:ff:e3:6b:d6:23:6f:a7:
3a:92:54:3e:90:5a:6c:97:35:0e:df:7a:15:9d:d9:5b:ee:92:
6c:33:1f:dc:d2:f1:cd:ac:9c:69:e1:de:9c:ff:f8:c0:f7:78:
f8:15:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:27:17 2026 by rpki-client