Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214365.roa
File: AS214365.roa (raw, json)
Hash identifier: UmrP1MAiY9SZDZczaaf7LHzGaJa0IrwQYCZ6HQ1ffIM=
Subject key identifier: 97:7B:1A:06:F3:AF:4E:1E:EE:1B:C0:8F:9B:03:84:DF:46:99:35:10
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 754E8058974709350DA195B9663478B873B11E88
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214365.roa
Signing time: Sat 10 Oct 2026 06:53:45 +0000
ROA not before: Sat 10 Oct 2026 06:48:45 +0000
ROA not after: Sat 09 Oct 2027 06:53:45 +0000
asID: 214365
IP address blocks: 141.11.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4e:80:58:97:47:09:35:0d:a1:95:b9:66:34:78:b8:73:b1:1e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 10 06:48:45 2026 GMT
Not After : Oct 9 06:53:45 2027 GMT
Subject: CN=977B1A06F3AF4E1EEE1BC08F9B0384DF46993510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b3:74:e6:d8:74:c5:48:70:f4:e4:c8:df:4e:
69:ae:e9:c7:26:0e:b9:e6:c4:4e:4b:8a:b4:09:ad:
6b:57:2d:09:1c:93:0e:44:49:c1:84:bb:89:99:f6:
f4:de:ea:f9:6d:11:e5:70:61:58:7b:1a:1b:30:2f:
56:3e:ad:7d:f7:cf:ef:ca:1b:bc:21:38:6e:80:7d:
ba:a9:57:aa:98:d2:fd:bc:8a:a6:da:e2:b5:39:5d:
5e:46:d3:67:1b:74:d2:87:b0:4a:88:0a:45:43:2b:
7d:e1:53:f4:ff:85:7a:c8:53:27:2a:58:09:29:f5:
81:90:94:7a:25:33:46:ed:96:51:05:b3:ea:95:88:
85:d4:4e:39:6e:7d:0f:2e:09:32:e0:9b:b1:b0:7d:
40:ef:35:ed:4d:28:31:f7:ea:e4:44:aa:bd:65:99:
93:2a:ba:a9:7a:9a:67:f4:17:96:1d:6e:d4:11:a8:
16:16:8e:76:a8:6d:0e:d8:2c:c3:e9:40:4b:d0:0a:
28:b6:dc:a9:fd:b5:8c:81:ed:3d:bd:db:28:ed:17:
a7:48:28:3a:91:56:b7:99:31:42:6b:95:5e:e1:7d:
38:85:06:a7:be:ec:57:b5:0e:9a:c9:0c:34:2a:63:
b6:6f:ba:f3:31:28:0e:4d:53:ee:5b:8b:cb:e1:3a:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7B:1A:06:F3:AF:4E:1E:EE:1B:C0:8F:9B:03:84:DF:46:99:35:10
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214365.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.244.0/24
Signature Algorithm: sha256WithRSAEncryption
06:88:f5:1d:d6:9d:39:fe:54:c0:33:54:b4:3c:47:1d:34:ac:
ab:59:42:47:2e:43:c6:e3:86:00:9b:69:b7:38:4f:6c:a4:6f:
22:e3:e2:4a:c1:fc:5f:49:a4:a5:f4:41:49:d0:a6:c1:4f:2a:
a2:3c:6f:bb:fb:4a:af:62:27:27:0d:46:8c:fd:44:3d:b8:bd:
71:3d:9b:0f:45:bd:e9:2d:cf:eb:76:87:a5:bd:30:10:06:09:
ab:4d:e2:37:be:32:e6:52:de:af:04:cd:fd:3e:3a:4a:3c:56:
56:c7:f9:3e:7f:eb:f6:69:84:63:ed:89:0e:ee:fb:01:41:b7:
9a:71:d4:52:4a:db:58:6a:33:c4:46:73:39:c0:a3:93:59:0b:
07:71:9c:06:bc:07:32:b3:4b:2f:af:98:f0:2c:76:bd:40:fd:
f6:2c:7c:32:c6:87:ad:71:7b:74:93:d4:d2:71:90:49:96:8a:
49:67:89:43:e8:25:33:8e:d4:c1:3f:c7:d1:70:a4:ea:de:a8:
7d:78:7b:f2:c3:7a:79:04:2f:92:6b:d5:1e:81:80:de:53:6b:
8c:f2:bb:f6:4d:04:ec:92:f9:ef:00:9d:c1:6f:f1:02:b0:e7:
f6:25:a6:9f:9b:1d:32:8e:0b:f6:b5:cd:6f:5f:71:6f:19:fb:
db:15:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:23 2026 by rpki-client