Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: XjH3rZDlnv1OhuoCy0YRZuoFYnYUmyVv/P+zLWZsGrc=
Subject key identifier: F3:09:A9:FF:A8:31:3C:27:30:44:70:2F:BB:B5:EB:9C:B8:46:60:09
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6965CEAAA94E4058C6C3FF8CA6B0D2FD53ED0A6A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214432.roa
Signing time: Sat 27 Jun 2026 12:38:04 +0000
ROA not before: Sat 27 Jun 2026 12:33:04 +0000
ROA not after: Sat 26 Jun 2027 12:38:04 +0000
asID: 214432
IP address blocks: 130.185.124.0/24 maxlen: 24
191.101.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:65:ce:aa:a9:4e:40:58:c6:c3:ff:8c:a6:b0:d2:fd:53:ed:0a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 27 12:33:04 2026 GMT
Not After : Jun 26 12:38:04 2027 GMT
Subject: CN=F309A9FFA8313C273044702FBBB5EB9CB8466009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:b4:f5:7f:7b:5b:0a:36:b4:93:6c:ce:ad:
02:dd:ff:9d:eb:6e:b3:8d:19:4c:18:10:d8:16:a7:
62:12:f2:98:e8:31:b3:ef:f3:9c:d5:4b:b1:80:a0:
b5:64:7c:a1:21:47:90:00:7c:f7:77:c6:9e:ab:d2:
16:61:fd:86:c1:83:87:b1:5e:cb:dc:f5:aa:13:ff:
3c:48:2a:ea:73:6c:1e:c2:12:31:62:23:f3:4d:e7:
15:71:4c:44:a5:a8:22:39:b3:36:a8:42:40:d2:96:
97:3e:85:b2:28:ed:f2:91:f8:96:dc:78:9b:1d:2e:
99:6a:6a:93:7f:ab:d3:2f:40:61:45:22:2d:dc:0d:
07:5f:f5:cd:8c:8b:33:3a:d1:f1:dc:a8:2a:95:44:
1b:d7:02:e9:48:eb:22:18:c4:df:43:5c:d5:f3:ed:
40:df:3b:15:69:6a:b8:7d:39:6d:7d:a3:74:cd:e4:
8d:15:d3:ca:74:52:7f:17:d9:a1:76:91:bc:91:48:
cf:db:03:3c:59:f1:2a:9b:89:4d:f1:b6:1f:64:b4:
e7:e8:0d:e6:72:29:95:0a:22:d9:95:7f:fa:a7:52:
64:4e:0d:8f:fb:fa:ed:44:a8:c6:dc:0e:85:60:e6:
98:6f:f0:d9:08:95:ff:b6:d7:a6:c9:37:0c:b1:12:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:09:A9:FF:A8:31:3C:27:30:44:70:2F:BB:B5:EB:9C:B8:46:60:09
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.124.0/24
191.101.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a1:f4:11:58:08:b3:fe:f9:44:d9:6c:f2:5e:5c:f7:10:b1:
63:ae:1f:6a:3e:0b:65:2a:bb:63:ee:4e:97:1a:45:cc:56:16:
a0:ab:d5:ad:98:8a:1d:a2:3d:c0:29:50:cd:c9:40:69:70:39:
e9:9f:55:37:6e:a8:80:4a:17:12:2c:20:5d:03:db:69:3f:65:
12:84:24:35:3e:70:e5:4c:54:2f:aa:c5:7a:b6:49:1a:e5:28:
05:b8:15:f6:ff:cf:95:e2:64:d4:a3:b9:2d:78:75:ff:08:c9:
e6:83:d8:fa:15:a4:e1:67:8a:29:ea:b1:46:8a:c6:f7:57:cc:
83:17:c2:ae:cb:56:e9:63:fa:21:d4:0d:a2:32:c6:d2:9c:69:
64:63:e7:aa:8b:0d:d9:19:fc:cb:0c:3d:80:b2:44:5f:d5:35:
91:30:cf:e3:0c:f3:33:8b:b6:70:3d:f3:ed:dd:de:54:e3:4f:
3a:c7:4c:65:5a:47:16:6e:fe:f3:10:c4:32:40:9a:ba:fa:cf:
38:e9:1f:5c:f3:89:60:e7:b7:a7:a7:17:4a:33:6e:1b:da:64:
15:6c:54:71:a7:ae:48:2a:37:5a:45:a4:4d:4f:0d:6d:10:81:
53:d4:7a:85:d1:2d:a0:35:24:b0:24:10:2f:35:e4:11:05:b3:
85:c3:e2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:37:05 2026 by rpki-client