Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: pBcNPpXIMycMDw1TsOoGb8Be3fr+YI5TAjSoMsrF+R4=
Subject key identifier: FA:43:CE:B2:D3:80:5D:CF:D4:5D:61:0C:51:C9:7F:40:8B:D1:FF:4B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 76EABAC523113783E0A2DE88CA711F689C7772B3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
Signing time: Sat 27 Jun 2026 12:38:06 +0000
ROA not before: Sat 27 Jun 2026 12:33:06 +0000
ROA not after: Sat 26 Jun 2027 12:38:06 +0000
asID: 214432
IP address blocks: 155.117.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ea:ba:c5:23:11:37:83:e0:a2:de:88:ca:71:1f:68:9c:77:72:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 27 12:33:06 2026 GMT
Not After : Jun 26 12:38:06 2027 GMT
Subject: CN=FA43CEB2D3805DCFD45D610C51C97F408BD1FF4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:07:d6:47:30:6d:83:5c:5f:40:f7:d7:f4:
a0:4a:12:25:c1:e6:ef:fd:16:f6:af:ba:f7:d6:b0:
5a:4e:5f:af:18:7d:05:c4:57:c5:ab:d8:fc:16:fe:
39:4d:a9:25:40:07:c9:31:8c:ca:36:62:8e:a4:3f:
a5:32:d2:13:fd:4d:7f:7c:47:df:6c:a8:f3:6e:19:
e1:aa:33:94:b0:c3:e1:36:7b:99:24:24:32:d5:0e:
27:2a:f6:18:c7:c2:24:50:2e:3c:fa:b3:ba:6d:60:
3d:ab:bc:e0:39:e5:99:1c:26:58:e6:7e:00:15:37:
7a:14:e0:c3:71:dd:ca:19:ad:52:fe:52:c0:60:d9:
5e:cc:e5:ff:2f:80:ce:ec:b6:47:be:fd:72:d3:8a:
82:69:fd:34:f2:ca:15:ea:f8:e8:ac:a8:95:ab:92:
6d:2a:5c:0d:aa:da:7b:68:5b:46:ad:fd:0f:5a:72:
6a:ad:08:9d:fc:b6:9e:63:3a:64:da:2b:f1:39:61:
d8:3e:ed:10:f6:89:3e:b8:99:b4:2d:5a:f3:54:90:
d9:40:be:e3:1b:a6:fa:e2:a4:dc:9e:6b:c3:2d:07:
fb:a0:0e:93:16:e0:8c:9e:93:08:35:42:72:24:ea:
14:e1:34:a8:06:28:4f:2f:77:30:f2:14:d6:d9:b7:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:43:CE:B2:D3:80:5D:CF:D4:5D:61:0C:51:C9:7F:40:8B:D1:FF:4B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.212.0/24
Signature Algorithm: sha256WithRSAEncryption
87:46:11:1a:28:2c:90:33:87:73:d2:9f:eb:80:87:0a:f0:34:
57:4b:52:8c:6e:c6:81:2b:c5:82:d4:45:00:9e:3f:81:62:f2:
20:dd:c5:37:38:e3:0b:51:e9:ec:93:e4:53:6d:fa:0a:08:32:
81:d3:1d:16:cc:70:02:24:a4:79:bb:41:0d:33:3c:90:63:76:
f4:e6:8e:a8:73:e6:82:1b:5a:eb:c2:9c:d6:ec:bc:18:5f:66:
79:6c:d7:e6:5f:bb:a5:df:1d:31:16:4c:c0:03:c3:07:e3:b2:
58:74:e8:0f:72:4d:44:34:fd:f3:86:5d:4d:f9:82:1c:cb:29:
90:e1:d4:fa:b5:48:bc:f1:ef:1c:46:f1:3d:cc:63:ab:df:26:
c7:9f:cc:fc:6b:f0:6b:10:af:4b:f7:0c:59:ff:fa:de:b2:e8:
8c:e3:79:1c:9d:53:3f:67:fc:4b:05:c2:69:da:15:51:e9:b1:
d2:c9:6d:8e:43:eb:34:a3:7f:e9:1d:ed:26:7f:44:38:bf:31:
55:57:68:58:06:66:2d:cd:33:83:a8:7a:8b:7c:27:44:00:2c:
38:57:87:9b:49:19:06:3c:79:87:45:2c:b6:81:2a:65:ff:f1:
8d:77:a6:52:b8:61:da:86:9f:8c:c6:03:ee:de:2a:c8:2d:60:
b4:d1:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:17 2026 by rpki-client