Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214578.roa
File: AS214578.roa (raw, json)
Hash identifier: 44aX1/zE+gokO4vc8VJc4WmS+ey4hZYXNXiAz4lzado=
Subject key identifier: 05:25:2A:A6:B1:98:8D:D9:18:97:B4:34:16:73:14:09:CF:B6:55:99
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2D731FF1426F97575554E51FAF7F489B96A64090
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214578.roa
Signing time: Sun 05 Jul 2026 05:03:57 +0000
ROA not before: Sun 05 Jul 2026 04:58:57 +0000
ROA not after: Sun 04 Jul 2027 05:03:57 +0000
asID: 214578
IP address blocks: 143.14.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:73:1f:f1:42:6f:97:57:55:54:e5:1f:af:7f:48:9b:96:a6:40:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 5 04:58:57 2026 GMT
Not After : Jul 4 05:03:57 2027 GMT
Subject: CN=05252AA6B1988DD91897B43416731409CFB65599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:d3:db:33:3d:e1:e6:dc:56:01:67:0e:0a:
ab:39:95:b8:30:f3:06:3e:56:de:35:cb:ff:47:e0:
90:47:50:33:50:5d:9f:86:e6:b4:96:df:1a:c8:71:
be:0c:a7:b1:68:ea:00:67:13:5a:f8:cd:19:28:b7:
2d:52:29:89:5f:ad:ae:cb:f3:72:86:f7:8f:61:e3:
26:6f:9e:71:3a:70:95:02:1c:33:f4:8c:df:bc:45:
4c:19:69:0b:69:ca:83:50:ff:9b:5d:08:43:80:97:
9b:f8:f6:69:02:77:81:43:44:d0:00:f2:5f:f6:35:
95:19:1b:ea:ef:1e:a9:53:58:fe:dd:46:ad:44:34:
ac:fd:12:9f:47:e8:fc:e9:bc:d8:eb:20:58:d8:54:
1d:26:bd:aa:4d:b7:70:39:06:74:77:52:27:1f:e2:
8d:66:bd:0e:db:4e:7e:c1:39:c9:8d:9b:b4:64:3b:
2f:3d:67:30:4f:ef:35:36:ca:f3:a8:6a:3a:45:3d:
cd:bd:20:a8:e6:81:c7:e3:29:07:29:a4:df:4e:af:
f1:6c:8b:fd:50:4a:ce:3b:bc:20:c4:72:85:94:3a:
fd:5d:90:2b:3d:4b:61:d8:f9:80:c6:d0:40:27:24:
25:ea:e8:c7:94:73:71:06:89:12:d7:48:f3:99:57:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:25:2A:A6:B1:98:8D:D9:18:97:B4:34:16:73:14:09:CF:B6:55:99
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214578.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.192.0/24
Signature Algorithm: sha256WithRSAEncryption
72:78:79:94:01:2d:a9:23:a4:1b:a2:45:a3:fa:22:01:14:5c:
b2:2c:be:2a:84:55:ee:1b:e2:cd:09:09:07:99:6e:b4:c6:06:
99:a5:0d:68:52:70:ee:f3:6e:16:09:9f:19:a5:e2:05:99:f2:
88:cf:c7:db:f6:b3:fc:8e:a6:4c:02:11:b8:a4:1e:2e:af:e8:
02:a6:66:7e:25:e3:c6:23:7c:0f:8e:57:94:d5:11:e2:07:25:
ef:21:68:6a:9e:55:c9:5a:4f:84:d1:45:c9:fa:e6:f9:11:1e:
c6:73:ff:1f:7a:84:43:e2:42:a5:18:16:fc:40:a7:29:25:79:
97:99:45:d6:ae:55:73:cc:ec:4b:33:e6:5b:23:44:22:0f:97:
cf:ed:02:fd:ea:55:98:8b:37:6c:d9:39:7e:60:11:02:28:c0:
b5:16:b9:8f:89:5f:7c:de:62:00:d0:44:f5:bb:b1:ba:1e:4f:
aa:f4:80:db:99:4a:cd:6d:fa:90:e9:a4:da:aa:7c:ec:73:69:
21:c8:2e:e8:59:9c:c4:55:74:7f:c5:de:84:fe:a9:a1:36:3e:
8c:72:82:54:8f:02:7d:85:b0:96:9d:c6:b2:e0:66:66:45:cb:
b1:e6:4d:8e:1e:31:3b:a8:93:75:85:a2:d9:3d:88:ff:77:c8:
f3:4f:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:40 2026 by rpki-client