Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214208.roa
File: AS214208.roa (raw, json)
Hash identifier: Annz0N8pdS3UaSWMDt/rzZM0km4n3J03JqkhAUFjia0=
Subject key identifier: 77:18:23:25:80:86:17:C6:38:53:04:4E:8F:9E:60:E1:5A:06:95:2A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 172C0FE7ECEBAE477161EE0D4A429AC66D1CCF4E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214208.roa
Signing time: Fri 24 Jul 2026 08:53:21 +0000
ROA not before: Fri 24 Jul 2026 08:48:21 +0000
ROA not after: Fri 23 Jul 2027 08:53:21 +0000
asID: 214208
IP address blocks: 143.14.184.0/24 maxlen: 24
146.103.36.0/24 maxlen: 24
148.135.154.0/24 maxlen: 24
150.241.145.0/24 maxlen: 24
155.117.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2c:0f:e7:ec:eb:ae:47:71:61:ee:0d:4a:42:9a:c6:6d:1c:cf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 24 08:48:21 2026 GMT
Not After : Jul 23 08:53:21 2027 GMT
Subject: CN=77182325808617C63853044E8F9E60E15A06952A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:d2:77:7b:72:a5:9f:3d:f0:cb:79:77:3b:
d4:7f:7e:e2:af:a8:df:13:9f:af:34:cc:c5:27:35:
38:73:3d:33:f7:1a:80:f8:8b:fe:47:4f:1b:e5:ad:
32:5b:28:bd:f1:45:39:d7:55:f4:bc:54:7c:b0:cd:
36:63:e5:ad:b4:3d:25:5b:d2:99:b9:f4:94:2a:e9:
ee:1e:46:25:85:14:b2:98:f4:05:28:fd:e4:2d:f5:
c4:9f:66:da:83:ff:1d:f8:b0:0b:ad:0b:f7:c4:7b:
96:e2:26:d2:eb:cc:a4:f9:f5:6d:0e:e1:93:d7:4f:
1d:14:24:1c:f7:2d:13:d1:ea:3f:6a:90:fe:a8:50:
19:33:b0:69:9f:0a:ca:7e:8c:6c:76:8e:cc:f1:8d:
8e:bd:07:71:35:58:8f:19:81:32:69:31:ba:e7:67:
4e:b7:0c:01:7c:69:64:f6:22:57:87:91:df:d0:85:
b3:e9:b1:6c:26:d8:3a:0f:7b:df:2a:87:40:bb:0e:
e8:e9:a5:09:de:02:29:2c:ea:50:18:31:b2:f5:96:
8f:67:e5:1a:ee:6d:a5:36:46:1d:53:bb:b5:eb:7a:
8f:94:e7:ed:52:2a:9f:4d:f9:07:4b:8e:cd:ad:0a:
ee:bc:69:f5:60:8c:77:92:ef:97:b2:42:16:80:6e:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:18:23:25:80:86:17:C6:38:53:04:4E:8F:9E:60:E1:5A:06:95:2A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.184.0/24
146.103.36.0/24
148.135.154.0/24
150.241.145.0/24
155.117.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:3b:ee:e0:73:43:a8:58:47:0b:8e:dd:67:d8:3b:57:2d:3d:
d6:5d:5f:62:93:d0:17:6d:ff:b5:d9:ae:d8:e9:c4:19:4c:9d:
19:75:a1:0c:6b:80:5d:bc:fa:5f:0f:7e:3a:7d:c5:0c:33:42:
91:ce:4c:d6:f7:c8:48:bd:b7:f6:71:b4:45:5f:7f:ec:25:e8:
89:86:2e:b9:3e:4a:0f:82:00:54:2b:d4:c6:e1:6f:50:e6:6c:
aa:ea:14:6e:25:e2:ee:63:fc:a9:71:a9:f6:21:07:15:9f:47:
6f:5a:10:97:51:b3:db:36:1b:90:ee:6c:f0:f8:47:d7:99:7a:
0c:b6:fb:51:20:22:e5:d4:30:4c:3a:0a:ec:c4:4a:38:27:97:
78:0f:5c:ea:db:97:f2:26:24:0e:d8:84:ff:c8:b2:8c:e4:b2:
95:c2:dc:0f:da:70:f9:a5:3d:51:9b:70:04:40:28:ca:bb:82:
aa:f7:23:29:fc:8c:65:87:e3:88:c0:5e:61:85:6f:3c:94:03:
08:1c:12:2d:96:cd:2c:5e:0b:d5:9a:e5:7d:8a:2c:fd:7a:81:
cb:71:18:5b:0f:f2:88:e4:41:f1:53:26:93:33:99:db:f4:60:
79:03:2b:8a:ed:73:5c:34:f3:01:0b:c2:06:9b:4d:70:59:37:
99:b2:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:35:41 2026 by rpki-client