Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214139.roa
File: AS214139.roa (raw, json)
Hash identifier: 5wqouEqCMNfDIdPxtKa2+lmVZYHrQ7w3xGTHkY10yxw=
Subject key identifier: F3:A4:EF:5D:72:E4:5E:88:A9:AE:21:E7:23:1C:FA:B9:B8:01:BA:59
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 17A85EA8B94B0ED868541253686EE4B57A5581BA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214139.roa
Signing time: Tue 20 Oct 2026 17:49:37 +0000
ROA not before: Tue 20 Oct 2026 17:44:37 +0000
ROA not after: Tue 19 Oct 2027 17:49:37 +0000
asID: 214139
IP address blocks: 195.20.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a8:5e:a8:b9:4b:0e:d8:68:54:12:53:68:6e:e4:b5:7a:55:81:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 20 17:44:37 2026 GMT
Not After : Oct 19 17:49:37 2027 GMT
Subject: CN=F3A4EF5D72E45E88A9AE21E7231CFAB9B801BA59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:e1:d7:e0:5c:3c:76:76:b8:ad:b8:06:c3:
22:b7:2b:e9:1b:ab:e1:d1:70:a5:26:e8:68:1f:24:
01:50:30:0d:b8:f8:c8:13:b9:cb:03:64:4d:d0:57:
70:07:30:c9:c5:65:91:cf:44:5f:4d:19:fc:7e:dd:
0d:25:28:9d:b3:9b:91:35:20:fe:bf:05:ff:55:b6:
64:90:90:1c:4b:5b:e8:ee:e9:27:8f:f4:e9:c5:35:
6b:dc:34:3f:77:fc:88:a9:51:9c:75:5e:77:7d:1a:
75:4c:f9:c0:ae:95:12:7e:e7:5e:84:27:c8:35:13:
0f:92:e5:40:b6:47:bc:ac:b5:bb:32:0a:3f:a4:07:
d2:68:d9:10:0d:ac:db:13:a7:7b:4f:9d:4b:fd:d3:
7f:b6:cc:0a:41:37:44:9a:28:b4:a1:30:1d:98:4e:
97:60:3b:a6:a2:4a:97:d1:6d:88:ee:2c:0e:48:36:
9b:a6:96:eb:03:b2:38:13:0e:01:3d:fe:f4:95:48:
df:47:62:5e:c4:32:20:02:94:87:00:70:2e:17:a0:
ad:88:9e:84:3b:bb:3a:18:b6:fc:88:37:cd:e5:79:
98:6d:b4:03:00:3e:4e:a7:32:58:f9:99:10:34:f6:
c0:ba:c8:29:af:9f:f2:46:19:9a:0d:c9:ed:39:6e:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A4:EF:5D:72:E4:5E:88:A9:AE:21:E7:23:1C:FA:B9:B8:01:BA:59
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.104.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:56:d2:ad:ba:95:a8:c1:84:04:9a:9d:99:22:a2:aa:c8:f6:
6c:ee:ad:e4:b6:bc:dd:06:cb:d9:9c:57:39:20:12:09:3f:ba:
bd:eb:42:bb:cb:eb:5d:c2:38:11:90:7a:53:43:f8:ce:93:28:
72:02:8c:0a:55:94:98:c8:d7:87:85:b8:66:79:6c:4c:50:62:
ef:53:33:dd:fd:5e:99:53:34:5b:f9:0d:cf:49:cd:8c:15:6f:
1b:da:24:ba:ef:e2:e2:56:79:a3:ad:63:94:7e:fe:f8:08:3b:
8e:78:92:49:85:af:75:b9:8e:36:a5:43:74:3d:ca:22:70:40:
1e:a7:ee:43:0b:59:82:51:1d:12:d8:e6:90:3f:4a:4b:1c:11:
88:01:66:18:0b:17:87:87:20:78:f7:c3:84:ad:68:65:27:88:
fa:63:4b:d3:64:13:86:19:e0:9c:4e:0c:18:f7:55:bb:65:31:
d9:7e:65:c3:07:a5:73:2d:03:4e:8f:87:62:c7:da:80:2f:77:
73:53:17:46:2b:94:4a:2c:9d:77:76:78:9a:34:ab:db:14:4c:
70:8d:eb:f1:ce:70:5b:b0:50:cb:ea:97:49:bb:9a:56:10:26:
7d:ce:39:e9:e3:6d:b0:46:93:e6:f1:a2:22:4e:1c:aa:a0:55:
98:6d:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:29:10 2026 by rpki-client