Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214941.roa
File: AS214941.roa (raw, json)
Hash identifier: sDWnE6NzzDzr2na6A7sq+ZA3+yWXu80+Kze6XDepnzs=
Subject key identifier: 53:98:E9:65:E5:2D:10:EE:95:38:4C:39:CE:35:57:F0:D9:63:42:67
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5764FA9387182606B9E392532CF202D663B0FB96
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214941.roa
Signing time: Mon 22 Sep 2025 08:55:07 +0000
ROA not before: Mon 22 Sep 2025 08:50:07 +0000
ROA not after: Mon 21 Sep 2026 08:55:07 +0000
asID: 214941
IP address blocks: 91.198.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:64:fa:93:87:18:26:06:b9:e3:92:53:2c:f2:02:d6:63:b0:fb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 22 08:50:07 2025 GMT
Not After : Sep 21 08:55:07 2026 GMT
Subject: CN=5398E965E52D10EE95384C39CE3557F0D9634267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:23:5c:a5:06:fc:84:17:fa:4d:b2:3f:14:70:
51:c7:6e:3f:ce:87:65:75:81:60:a3:e5:92:7e:0f:
5b:61:58:ef:b1:b1:b5:7b:64:f6:7f:7a:c2:cd:8b:
73:93:3c:cc:7f:6e:d7:33:f8:2c:1c:7a:ae:39:24:
38:6e:0d:01:e0:5d:cd:76:93:28:19:30:e7:ba:a6:
41:21:7e:8a:7f:0a:6f:98:29:71:bc:9f:fe:ff:69:
dd:1f:f7:14:05:3f:06:a5:eb:8e:ca:b1:3c:d4:bb:
5a:bd:fd:0b:3d:5a:60:fe:79:28:93:6d:51:07:31:
d8:21:ca:cc:1f:d8:69:13:53:3d:5e:bc:8a:e0:67:
d0:b9:e5:f0:96:c3:e0:d4:48:f5:73:38:a6:d6:20:
9e:09:ac:62:63:82:60:1c:b7:bd:96:90:61:45:f1:
e1:b8:55:85:64:79:08:26:e7:6f:0b:f5:7f:ed:19:
d5:9c:3e:fe:72:14:3b:75:1f:de:34:0d:f9:ed:7c:
f9:42:dc:19:78:da:3e:32:76:5f:8c:0c:79:5f:72:
ae:01:06:65:cc:ea:9a:48:6d:20:7a:3a:27:56:ec:
0e:ef:24:11:12:f8:80:25:53:6d:41:d5:5c:d0:c9:
89:35:2d:86:20:e3:76:bc:f0:7e:f2:df:ce:b4:b0:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:E9:65:E5:2D:10:EE:95:38:4C:39:CE:35:57:F0:D9:63:42:67
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.66.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f6:3e:ca:d3:67:46:de:0b:70:15:2f:5b:9d:70:31:d6:f4:
d9:88:e4:6a:2a:d9:22:19:6b:94:bb:80:e8:d4:2d:b4:62:5b:
b7:9f:a4:85:bc:6e:7e:6c:ea:7b:ed:c3:76:c5:1b:34:52:53:
3d:dc:56:1a:aa:b3:06:f5:71:61:36:36:18:87:cd:2a:a0:a0:
70:dc:4f:99:e0:79:9d:01:aa:a0:f3:87:a1:72:f9:a6:30:56:
d2:84:41:c0:b6:aa:7f:74:ff:7b:67:fc:f1:9b:62:a4:11:c2:
f8:72:b3:15:4e:b3:63:cf:da:4f:f4:a1:c1:54:ac:f9:73:fe:
a9:84:6d:94:8a:50:84:be:74:90:96:76:36:b3:bf:b5:51:1c:
52:4a:87:af:4d:9e:e3:74:c0:86:49:76:0d:c9:67:71:8a:53:
80:b9:6d:d4:ad:95:d8:d6:f4:6c:68:61:3d:9b:b6:46:8b:bd:
43:b7:c9:a8:dc:78:be:cc:29:96:89:c4:48:54:db:b9:a8:bc:
46:25:d6:5c:be:82:0b:0c:13:64:e5:82:a6:e7:00:44:e4:78:
3e:12:27:86:e4:44:3b:90:ec:3d:5e:f1:5c:4f:02:0e:02:c5:
1b:ae:aa:2d:1d:dd:a8:b9:a6:3f:9f:6c:66:f5:74:61:de:23:
c1:a1:20:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:47:41 2025 by rpki-client