Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214647.roa
File: AS214647.roa (raw, json)
Hash identifier: N7ApBtQjxsL1hPbjSTJz5XoFS33TKNCY3ufqDZ5KI3c=
Subject key identifier: DC:04:7A:25:51:C5:81:8F:C1:51:73:5B:04:8A:90:F2:D2:F7:29:AD
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5C8323ED585445EB973EDB49E5A0E007857C1CBD
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214647.roa
Signing time: Tue 01 Sep 2026 12:01:07 +0000
ROA not before: Tue 01 Sep 2026 11:56:07 +0000
ROA not after: Tue 31 Aug 2027 12:01:07 +0000
asID: 214647
IP address blocks: 143.20.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:83:23:ed:58:54:45:eb:97:3e:db:49:e5:a0:e0:07:85:7c:1c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 1 11:56:07 2026 GMT
Not After : Aug 31 12:01:07 2027 GMT
Subject: CN=DC047A2551C5818FC151735B048A90F2D2F729AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:76:72:a7:9b:a8:85:4f:6d:e0:80:ac:b8:
51:bd:34:3e:08:f0:ab:e6:76:49:c2:ad:e5:36:14:
36:bf:75:0e:3c:17:d5:04:7a:75:40:ab:a5:ea:9b:
91:a9:ab:eb:ac:16:d1:d8:6d:89:3e:8e:de:54:00:
4c:be:aa:c7:7d:68:8d:b6:b6:3f:50:22:5e:26:c7:
b9:b6:4e:35:19:91:65:f1:49:48:bd:e4:b9:ae:20:
ba:47:1b:36:fc:94:04:b0:75:cf:c8:4c:5a:31:19:
b5:c3:32:9b:33:1f:1c:13:f6:bf:41:d2:6e:57:51:
73:ee:44:b0:30:76:a0:23:5f:36:e2:d0:b5:c1:b2:
46:12:96:27:ea:b8:c3:ac:39:7f:bf:2a:c5:0f:80:
03:dd:a8:2a:91:22:38:64:d0:ad:6f:0c:2e:64:dd:
97:57:16:60:11:7c:b4:f4:e1:18:55:39:f5:78:4a:
4f:cc:12:fc:a9:0b:c4:b6:e8:df:f9:e5:1e:03:7b:
7e:c6:39:b8:8d:6b:6e:ef:f8:31:1d:68:cc:71:40:
bb:c7:92:3e:b8:16:45:1a:28:d7:c9:39:44:f4:97:
ba:71:2a:47:4f:49:1d:c9:13:b3:b4:d1:74:71:d3:
9c:13:23:3e:46:bc:6e:89:54:c0:57:91:6e:20:d5:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:04:7A:25:51:C5:81:8F:C1:51:73:5B:04:8A:90:F2:D2:F7:29:AD
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.254.0/24
Signature Algorithm: sha256WithRSAEncryption
12:af:72:02:a5:c6:31:50:c7:33:46:fb:8d:a5:f3:fd:d2:85:
39:ff:12:e1:63:f1:98:4d:1d:d1:d8:62:9c:b9:72:3e:cd:6b:
aa:e9:71:26:31:b7:73:87:93:77:bd:34:c5:0e:2e:0d:56:4d:
6f:38:11:da:d9:5f:88:bd:12:fa:e0:d2:f4:4a:8b:4b:18:3b:
1f:04:c1:82:b4:f0:e5:77:fb:45:fe:b6:55:6f:d0:29:8e:5f:
07:7a:fe:89:49:b6:7a:a2:9a:d6:7d:b9:49:23:36:10:97:af:
8a:4d:fa:5a:ae:08:c1:bb:d7:c6:b5:01:22:50:6e:d0:90:14:
08:4d:02:c9:db:6e:7b:e1:20:0b:24:b6:be:c2:55:d4:68:05:
22:a0:4e:56:4d:2f:71:ac:00:dc:21:7e:da:c3:bf:a0:63:b5:
4b:74:c3:c5:97:de:9e:77:2a:43:0c:b9:c1:a3:6f:6e:98:78:
ff:b6:8e:1d:ad:10:d1:1a:58:a5:b5:16:86:b5:b6:9f:cf:4e:
95:63:73:e3:ba:c0:ba:17:13:12:09:f1:9d:3c:f3:7f:56:3a:
88:d4:09:ff:62:98:da:42:ef:83:fd:40:a7:26:fb:30:65:ef:
af:5c:17:79:4b:bd:6b:de:9b:03:69:a5:91:fb:33:1b:72:05:
ee:cf:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:37 2026 by rpki-client