Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214033.roa
File: AS214033.roa (raw, json)
Hash identifier: t9iTL7gqm9384z0CKRgvioA0YGown8FPtyA2mL2pfzY=
Subject key identifier: 11:30:2A:6F:FB:D8:39:F6:8A:77:F8:02:68:C6:4F:CF:42:C7:39:4D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0D85DAA4CAA7E95D0867C5D0ECC09C19C978CE40
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214033.roa
Signing time: Fri 17 Oct 2025 04:36:35 +0000
ROA not before: Fri 17 Oct 2025 04:31:35 +0000
ROA not after: Fri 16 Oct 2026 04:36:35 +0000
asID: 214033
IP address blocks: 2a14:7581:f80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:85:da:a4:ca:a7:e9:5d:08:67:c5:d0:ec:c0:9c:19:c9:78:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 17 04:31:35 2025 GMT
Not After : Oct 16 04:36:35 2026 GMT
Subject: CN=11302A6FFBD839F68A77F80268C64FCF42C7394D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:25:b5:d6:22:38:f9:8e:11:d0:f3:e1:b2:
70:ff:72:71:c7:9e:65:94:6a:36:4c:6f:69:94:dc:
15:b1:a2:6b:d4:85:8d:27:15:a5:28:29:2d:71:a2:
e0:ad:15:03:90:1c:d6:36:a9:92:b9:ed:71:70:99:
2d:51:6a:dc:e6:0b:b3:b2:a0:28:54:8e:b9:8a:fa:
a0:6e:c1:dc:76:e9:76:e8:03:71:f8:99:2c:ca:69:
35:d9:ca:77:0e:cc:f2:2a:92:c6:ab:f2:49:64:f9:
7b:c9:2d:a2:79:c8:7e:55:30:1d:fd:3f:a0:78:19:
de:22:e5:59:0b:eb:a5:ea:00:4e:07:bd:00:f5:2a:
cf:60:ec:76:49:2c:f1:2d:7d:55:c9:69:36:0d:51:
c6:85:26:3c:b7:63:70:c4:7b:38:a8:4b:7b:f8:07:
50:8b:ec:f0:f5:84:b7:29:96:f8:dd:3e:18:16:6e:
0d:2d:76:ca:ef:86:16:3b:d3:36:56:6e:49:67:8d:
fe:fc:5a:a4:43:d4:a7:6e:35:46:8d:2f:91:56:7a:
f7:87:2c:22:43:40:e5:df:55:46:b5:a1:8e:9d:9b:
62:f7:62:14:7e:8a:0c:e1:f7:76:25:ea:ff:26:df:
4c:91:8c:a7:6d:d3:b7:f9:66:a1:dc:b4:04:1b:f2:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:30:2A:6F:FB:D8:39:F6:8A:77:F8:02:68:C6:4F:CF:42:C7:39:4D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f80::/44
Signature Algorithm: sha256WithRSAEncryption
06:3a:2e:71:07:e9:c4:90:fc:1a:1f:03:e0:c2:8d:13:21:c4:
66:8d:94:af:46:59:35:7d:1c:6c:d8:d7:6d:d4:56:18:be:75:
b9:20:e8:3b:b1:fd:52:21:d3:f7:32:6b:31:e3:f8:90:1a:66:
62:e0:e6:35:00:68:72:d0:de:1b:3f:e1:e0:3a:a5:f3:a1:fb:
f4:d5:39:88:01:fe:9e:36:77:85:f0:58:7e:87:21:74:51:1f:
9c:fc:ac:20:4b:d2:c6:e0:3b:87:9d:ca:4a:89:25:9c:62:fa:
cd:57:a4:29:7b:2d:70:e6:b4:44:80:04:6f:e9:7e:60:3e:d8:
25:78:40:9b:37:8e:a0:53:ba:c4:9d:c1:8d:98:c7:4c:53:ec:
2d:5e:73:11:4b:53:30:37:39:95:1e:66:99:8a:90:c4:5f:c7:
3f:3b:43:e3:b7:eb:8e:d2:6f:4a:e9:d0:8d:31:c4:12:d3:31:
72:df:43:83:d7:52:fb:cd:33:21:53:8e:bd:2b:32:ba:2a:2d:
25:a9:3e:ec:65:47:d9:5b:e1:8e:99:a4:ae:c8:cd:56:43:e0:
2c:b8:02:83:fd:73:b8:8a:f2:ea:60:7e:84:b7:ef:6b:6d:88:
4d:a0:7d:02:09:2c:62:65:f7:6c:98:36:da:a7:80:95:0d:a3:
d8:44:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:12 2025 by rpki-client