Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214879.roa
File: AS214879.roa (raw, json)
Hash identifier: YZOXCzD+pYkMei7chW9K/9cqmQrKgcVdREVmOx+91To=
Subject key identifier: DF:31:69:E2:29:1B:E3:11:B6:8B:4D:DA:E3:AD:7D:27:B8:51:34:71
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4DD7EEAF7A2BE56A378B87906589F20754BD052C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214879.roa
Signing time: Thu 25 Jun 2026 04:48:41 +0000
ROA not before: Thu 25 Jun 2026 04:43:41 +0000
ROA not after: Thu 24 Jun 2027 04:48:41 +0000
asID: 214879
IP address blocks: 92.113.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d7:ee:af:7a:2b:e5:6a:37:8b:87:90:65:89:f2:07:54:bd:05:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 25 04:43:41 2026 GMT
Not After : Jun 24 04:48:41 2027 GMT
Subject: CN=DF3169E2291BE311B68B4DDAE3AD7D27B8513471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:3c:17:61:1f:a8:0e:8a:02:7b:e8:a5:34:
b4:bd:a5:ba:a9:2c:bf:c4:b6:43:fa:13:ac:0d:78:
d6:03:91:79:54:64:96:71:11:0d:44:92:8d:3a:6b:
82:43:3d:35:04:00:b4:9b:d9:8e:62:54:9a:ba:c1:
39:8c:9d:fc:fc:4b:fb:bc:59:cb:ae:35:fe:6b:2d:
f1:78:7e:0a:af:9b:e4:3f:dc:01:42:10:09:2f:66:
80:bd:79:f6:e3:d2:33:14:16:e7:3d:52:cd:85:6f:
15:d4:e3:86:49:db:29:45:5b:d6:32:c2:f6:32:81:
88:34:05:bc:1a:06:a0:e6:9b:d1:da:5c:ce:01:18:
ce:c1:15:2f:d8:79:ad:c0:44:fc:78:1a:94:03:0a:
e6:20:3d:c3:fe:b2:c1:9a:77:d1:41:39:f3:7b:4e:
4e:66:aa:77:6b:a2:25:ce:71:dc:43:7b:34:3d:71:
d6:c2:5f:f3:c9:21:4e:aa:fb:a5:d3:86:9d:5f:93:
04:29:59:db:ac:b6:79:d8:8f:6e:11:60:9b:9b:10:
0b:0d:a1:48:be:56:86:9f:9e:cf:02:d9:ea:2f:6d:
8f:e8:1a:3d:39:c8:85:a0:54:00:66:0c:cf:e6:d5:
22:65:90:d2:31:25:4f:94:55:80:dd:60:72:3f:95:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:31:69:E2:29:1B:E3:11:B6:8B:4D:DA:E3:AD:7D:27:B8:51:34:71
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214879.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.118.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5f:1f:78:02:84:d5:34:46:11:1b:b5:2e:f3:5e:47:c8:5b:
03:ff:68:d0:96:71:9a:21:7b:81:2c:b0:25:08:60:73:1b:d9:
cd:07:d7:5f:0d:36:50:da:95:4f:fd:22:4c:bf:6e:13:be:b8:
2e:2b:87:1d:03:40:a8:08:01:45:ec:25:78:97:3b:e6:20:e7:
2a:36:4c:29:aa:9a:d0:51:51:be:b5:43:a9:93:25:78:ce:46:
87:3a:3e:75:77:41:9c:b7:a0:ad:be:0f:91:47:9a:05:64:68:
cf:30:34:c2:05:1a:ae:3f:1a:02:ee:6c:49:89:b1:14:e0:13:
78:73:18:7e:e9:75:65:37:04:b2:e8:69:c5:92:0c:0f:43:13:
29:bc:87:95:70:76:c6:13:1f:4c:e2:4b:d2:2d:a0:b6:27:45:
bc:5c:b8:d1:ab:21:21:60:69:74:4e:bd:f6:67:33:0b:b5:20:
25:5d:5d:2b:dc:24:7e:7d:26:77:06:79:a5:16:bf:6b:d4:c0:
3e:de:05:27:57:2f:9e:ed:e6:ee:44:69:7a:d4:71:39:70:f2:
98:38:63:2b:1c:14:0c:9e:e3:a2:b5:ca:f5:58:5b:88:1c:aa:
83:d0:b9:49:19:35:22:b7:26:d0:8c:81:50:b9:50:09:46:55:
59:57:5b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 21:34:39 2026 by rpki-client