Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214208.roa
File: AS214208.roa (raw, json)
Hash identifier: 8dwazVSVgGgXn1UGU95AVZEKlkz7zf4VxaNzPc3v+MM=
Subject key identifier: 33:67:73:D5:47:22:E7:97:73:05:43:AF:4A:24:83:FC:BF:F3:5A:C6
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5236F3A83C25B3BD1D3DF114BCA9DE0D6D3EDAEF
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214208.roa
Signing time: Sat 30 May 2026 09:47:18 +0000
ROA not before: Sat 30 May 2026 09:42:18 +0000
ROA not after: Sat 29 May 2027 09:47:18 +0000
asID: 214208
IP address blocks: 141.11.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 03:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:36:f3:a8:3c:25:b3:bd:1d:3d:f1:14:bc:a9:de:0d:6d:3e:da:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 30 09:42:18 2026 GMT
Not After : May 29 09:47:18 2027 GMT
Subject: CN=336773D54722E797730543AF4A2483FCBFF35AC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:59:0f:cd:67:ca:5b:cf:e8:cd:5e:51:d9:
19:56:97:8b:fd:6d:3b:53:92:1b:4f:95:9c:78:54:
8c:50:62:c4:d4:aa:f9:ce:a2:44:54:b0:54:32:56:
9a:f7:ce:db:8a:66:f5:24:10:a4:99:ae:35:4a:7a:
f6:f8:54:48:3e:bb:3a:82:68:59:e1:8f:83:36:b6:
cc:06:3d:42:aa:71:c0:ca:8b:00:24:69:e8:0a:a0:
11:11:f2:b4:66:ea:0e:3c:59:cc:86:ee:c4:d3:86:
50:aa:cf:ec:e2:6b:b0:de:38:07:74:33:97:39:5d:
1f:2a:fd:64:ee:b8:8e:38:de:cd:0e:a9:47:73:0c:
3b:0e:a8:98:ed:27:40:7a:41:22:47:fb:16:85:c6:
aa:6e:17:02:78:6c:f3:f4:73:7d:1d:e8:07:7b:c4:
85:7f:d9:af:40:11:e9:51:b9:66:1b:68:1f:63:9d:
7e:db:d3:6f:a7:6b:4f:27:5f:e6:2d:02:88:d1:fc:
9e:d5:d4:24:0d:de:d6:5e:75:ff:8a:61:e6:6d:9f:
41:18:84:64:80:07:1c:94:e2:3c:77:c7:d1:61:08:
47:2e:e1:4b:1b:e4:ea:fc:0c:b4:5e:86:ea:e7:9c:
a7:ed:97:a6:a7:42:93:a5:5e:90:f5:76:b6:18:d2:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:67:73:D5:47:22:E7:97:73:05:43:AF:4A:24:83:FC:BF:F3:5A:C6
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.166.0/24
Signature Algorithm: sha256WithRSAEncryption
28:34:69:43:5a:17:2a:21:98:f8:f8:47:80:67:f8:6c:38:48:
5c:57:06:a5:3d:de:b1:30:3a:81:d1:4e:87:f6:ac:fb:37:3e:
fc:1c:55:bd:5c:fc:f4:4a:40:60:bf:68:fd:cd:fd:25:99:79:
c5:d3:fd:f0:3a:8b:c7:7a:9a:1e:ff:f2:03:a6:09:21:19:0a:
f1:bd:1d:23:72:2d:0d:57:a2:13:cb:8f:15:4c:fc:b7:ef:8f:
0b:e8:25:41:4b:ed:23:30:b8:b1:60:1c:ba:25:a9:f2:b1:69:
9c:1a:d1:22:c5:d4:5d:28:98:ab:1b:cf:f8:68:86:71:58:28:
0e:4c:12:4d:c6:08:28:2c:7c:d7:95:04:31:7d:b2:96:63:96:
e1:69:19:a6:b4:2e:1c:07:8a:ea:0e:5b:f2:ac:f3:f3:f3:42:
f6:6a:63:56:e2:b8:0b:19:af:eb:d6:46:6a:b6:61:e3:30:83:
b4:97:63:ee:87:07:ce:81:d3:22:84:cc:24:bc:64:f6:c7:1b:
aa:51:c6:a2:59:b4:03:86:07:fa:7e:65:60:13:8a:34:aa:08:
b9:a5:94:bb:22:4d:85:10:02:ba:a8:ce:ca:a1:45:20:e1:5e:
24:08:c4:ae:1a:64:5a:04:de:8f:72:4e:58:3c:59:c7:46:cb:
a7:ae:69:2a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUUjbzqDwls70dPfEUvKneDW0+2u8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA1MzAwOTQyMThaFw0yNzA1MjkwOTQ3MThaMDMxMTAvBgNV
BAMTKDMzNjc3M0Q1NDcyMkU3OTc3MzA1NDNBRjRBMjQ4M0ZDQkZGMzVBQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC57VkPzWfKW8/ozV5R2RlWl4v9
bTtTkhtPlZx4VIxQYsTUqvnOokRUsFQyVpr3ztuKZvUkEKSZrjVKevb4VEg+uzqC
aFnhj4M2tswGPUKqccDKiwAkaegKoBER8rRm6g48WcyG7sTThlCqz+zia7DeOAd0
M5c5XR8q/WTuuI443s0OqUdzDDsOqJjtJ0B6QSJH+xaFxqpuFwJ4bPP0c30d6Ad7
xIV/2a9AEelRuWYbaB9jnX7b02+na08nX+YtAojR/J7V1CQN3tZedf+KYeZtn0EY
hGSABxyU4jx3x9FhCEcu4Usb5Or8DLRehurnnKftl6anQpOlXpD1drYY0ku3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUM2dz1Uci55dzBUOvSiSD/L/zWsYwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE0MjA4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQum
MA0GCSqGSIb3DQEBCwUAA4IBAQAoNGlDWhcqIZj4+EeAZ/hsOEhcVwalPd6xMDqB
0U6H9qz7Nz78HFW9XPz0SkBgv2j9zf0lmXnF0/3wOovHepoe//IDpgkhGQrxvR0j
ci0NV6ITy48VTPy3748L6CVBS+0jMLixYBy6JanysWmcGtEixdRdKJirG8/4aIZx
WCgOTBJNxggoLHzXlQQxfbKWY5bhaRmmtC4cB4rqDlvyrPPz80L2amNW4rgLGa/r
1kZqtmHjMIO0l2PuhwfOgdMihMwkvGT2xxuqUcaiWbQDhgf6fmVgE4o0qgi5pZS7
Ik2FEAK6qM7KoUUg4V4kCMSuGmRaBN6Pck5YPFnHRsunrmkq
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:56:35 2026 by rpki-client