Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214266.roa
File: AS214266.roa (raw, json)
Hash identifier: II0lLFp4LAgilyAki3BYp4boBrhGw90oDAZ2lwgm8ak=
Subject key identifier: 6A:7A:FB:D8:49:E0:1F:3E:32:95:BE:FD:3C:37:C0:BE:11:68:75:F4
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4B82E6F791EB8D2169BA88AD850AE9F3BCBA6310
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214266.roa
Signing time: Sat 14 Nov 2026 10:33:28 +0000
ROA not before: Sat 14 Nov 2026 10:28:28 +0000
ROA not after: Sat 13 Nov 2027 10:33:28 +0000
asID: 214266
IP address blocks: 94.118.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:82:e6:f7:91:eb:8d:21:69:ba:88:ad:85:0a:e9:f3:bc:ba:63:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 14 10:28:28 2026 GMT
Not After : Nov 13 10:33:28 2027 GMT
Subject: CN=6A7AFBD849E01F3E3295BEFD3C37C0BE116875F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:c5:ac:a6:0b:96:60:9c:61:a3:9c:be:21:
75:8a:ab:73:65:df:9a:85:9a:0c:1f:72:85:ad:15:
6a:a0:2e:74:32:3c:4b:dd:2a:ce:d6:89:aa:d5:5d:
db:80:13:30:31:a6:e0:17:7c:69:6c:1a:95:3d:bd:
ee:7c:15:f5:9a:2a:60:dc:12:e5:39:ac:29:61:7b:
df:ac:ef:05:d3:c6:63:72:00:97:54:c1:b2:21:31:
be:38:f5:f8:a6:55:68:06:a6:9b:ce:71:df:6e:78:
c2:ad:7e:83:de:c2:c8:97:fa:ee:47:95:06:ad:40:
54:8a:d9:b6:95:36:43:ed:82:14:b8:09:d1:0f:10:
f0:16:55:c7:0a:f1:28:ec:1a:d4:d3:6e:10:bf:3f:
69:72:35:80:b5:37:c6:4f:b7:27:87:5d:70:ee:1a:
ff:00:af:3a:67:a7:14:2b:1c:bf:39:ae:f4:e0:a0:
9b:4c:74:ca:75:48:cb:36:1d:d5:0a:75:a4:77:aa:
52:b2:47:20:28:f5:a7:43:e0:ec:96:83:79:a9:8c:
3e:21:16:18:28:f7:0f:66:18:d3:a5:91:44:62:ff:
4a:74:83:c0:4d:c9:01:4a:2f:f5:41:68:1d:f6:bd:
f1:71:6e:f3:05:fd:00:02:be:dd:fd:48:a8:82:99:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:FB:D8:49:E0:1F:3E:32:95:BE:FD:3C:37:C0:BE:11:68:75:F4
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.61.0/24
Signature Algorithm: sha256WithRSAEncryption
21:55:e3:ab:53:42:5a:8f:ae:bb:83:48:42:d4:5d:b4:c4:03:
2c:eb:2f:48:1a:47:b4:33:f2:95:d5:8a:1a:1a:dd:54:7c:34:
0a:a0:11:fb:96:c5:bc:10:58:66:5a:31:a2:6f:d1:68:fb:18:
37:ca:98:b6:d6:0e:39:f4:06:61:d9:ae:44:33:b1:ef:3c:f7:
9a:85:fa:8b:70:56:10:68:53:f7:3b:d3:4a:a5:e1:75:a5:80:
86:c6:b8:ca:33:df:af:8b:30:53:c0:9d:91:f3:74:85:57:67:
e0:61:47:17:bb:37:f9:c1:c4:ca:79:18:a3:00:ef:da:2e:3c:
76:f9:ef:d1:c8:0d:d6:6a:0f:2c:26:48:f0:b0:46:3b:1c:52:
74:6c:e9:68:d6:4c:03:78:3b:e3:da:d3:3d:9e:7c:7e:20:6e:
61:38:10:cb:5c:5d:e7:50:ab:7f:08:b8:9c:60:38:e1:c9:d7:
12:41:08:8b:a6:16:8b:48:e1:25:b8:00:ee:b4:90:fa:77:d8:
eb:7e:37:af:b0:dd:b6:6d:39:c2:8b:3a:3c:a8:13:f4:22:ce:
dd:69:33:d7:8b:ce:c0:bc:ab:d2:67:3d:dd:9c:92:a8:23:ff:
39:61:b4:10:48:75:9d:70:ce:e0:ed:0b:e0:12:95:58:11:08:
6e:f4:ef:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:48:07 2026 by rpki-client