Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214159.roa
File: AS214159.roa (raw, json)
Hash identifier: JQ+LMWtsGMWQj4o336e4B9dQKB2UzfqkKH2w77d6Sc4=
Subject key identifier: 00:3A:68:F4:E6:AE:1D:E4:09:A6:5A:37:6D:E2:44:B8:3D:52:3E:25
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 38EF3ED898FF0AAA0248D40FC2A11B9FFAE425DE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214159.roa
Signing time: Mon 21 Sep 2026 18:49:35 +0000
ROA not before: Mon 21 Sep 2026 18:44:35 +0000
ROA not after: Mon 20 Sep 2027 18:49:35 +0000
asID: 214159
IP address blocks: 167.148.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ef:3e:d8:98:ff:0a:aa:02:48:d4:0f:c2:a1:1b:9f:fa:e4:25:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 21 18:44:35 2026 GMT
Not After : Sep 20 18:49:35 2027 GMT
Subject: CN=003A68F4E6AE1DE409A65A376DE244B83D523E25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:b3:3f:19:d8:a0:90:2c:55:9c:1a:aa:1a:
37:b5:ce:39:f6:4e:79:e0:48:39:85:d8:23:21:94:
3e:ac:d6:90:88:0f:df:f3:dd:68:2f:03:bd:73:82:
8d:e3:ac:d0:85:83:45:05:ed:97:41:43:d6:62:bd:
c8:37:0b:70:cd:ec:85:a4:b2:f0:5e:19:bb:c0:a6:
9c:85:27:c2:fd:6e:72:f2:c1:79:b3:d7:26:e4:34:
71:df:cb:07:b3:57:ba:91:ed:a3:3f:3c:2d:52:90:
fc:74:80:e1:38:89:fa:27:8e:7a:61:04:35:dc:b4:
fc:1e:8f:49:1c:f8:96:9d:a8:cc:4b:cf:8e:94:d2:
57:18:35:ed:e7:47:5c:ef:ac:e0:9a:fa:a3:3a:f1:
97:76:cb:2d:f5:f9:38:ba:f4:26:bf:61:6b:b9:a0:
4f:60:83:7b:f6:f2:c6:6d:e5:cd:5a:e4:bf:2a:63:
15:e2:1d:41:69:c1:32:75:f7:42:13:83:25:ab:8b:
15:02:b2:02:79:eb:41:8b:74:4a:8e:35:7a:98:3e:
0f:c7:53:0b:97:f1:5f:22:5d:4b:ff:cb:ab:80:a7:
10:b1:18:5c:21:22:09:10:0f:87:45:f4:50:9f:5c:
36:d0:22:6c:86:45:15:a9:2b:8a:bd:c2:88:f6:f3:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3A:68:F4:E6:AE:1D:E4:09:A6:5A:37:6D:E2:44:B8:3D:52:3E:25
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214159.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:bb:43:48:bb:7b:a5:37:88:5c:79:3e:35:61:07:41:20:25:
2c:93:19:af:2c:b7:67:b4:82:9f:d6:36:d7:88:93:48:54:84:
6f:46:51:60:08:85:4d:bc:36:29:65:3b:a5:8c:fc:19:75:1b:
24:96:da:a9:c4:25:8d:2c:e0:5b:80:ab:34:e2:c2:e6:8c:90:
a1:cf:7a:97:bd:3a:7c:86:cc:62:c8:85:09:6f:85:e6:74:b9:
30:8d:d3:63:17:df:e2:db:c3:b1:e7:29:8a:ca:79:cc:93:f4:
e1:59:ed:55:61:61:b3:03:14:a1:9c:d1:76:1b:8f:a1:f8:67:
0a:51:3c:c4:f6:a1:8f:21:fa:6a:ff:e4:b1:7a:50:07:26:b9:
26:89:86:cf:06:e6:6f:61:e3:1e:0d:59:ca:ae:36:10:a3:f5:
c7:1e:90:c3:42:c1:67:d6:e8:ef:ea:25:85:3b:ad:a8:f3:42:
5a:23:6d:cb:ef:00:ca:61:00:69:99:cd:11:57:c2:ac:17:6a:
25:1b:d6:ab:36:d6:c8:b5:53:15:c2:f0:02:b9:0f:21:01:d3:
4b:7f:63:7e:32:7d:80:59:f6:bd:70:47:93:6d:49:08:29:76:
d0:bc:ee:18:7f:df:f0:08:53:a4:ac:fc:10:62:88:65:e1:e1:
76:82:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:34:06 2026 by rpki-client