Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: BRVGusNQXZQA9290xF1cCQ84TQ/Un3fxObrxRXteQHQ=
Subject key identifier: F3:6F:EC:11:B4:FA:09:6A:7E:E5:59:58:2E:75:5F:8E:24:E6:68:EC
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2C249588EB622DFAEA16F335732029E80BD46A93
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
Signing time: Tue 10 Nov 2026 12:47:21 +0000
ROA not before: Tue 10 Nov 2026 12:42:21 +0000
ROA not after: Tue 09 Nov 2027 12:47:21 +0000
asID: 214432
IP address blocks: 78.105.221.0/24 maxlen: 24
78.105.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:24:95:88:eb:62:2d:fa:ea:16:f3:35:73:20:29:e8:0b:d4:6a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 10 12:42:21 2026 GMT
Not After : Nov 9 12:47:21 2027 GMT
Subject: CN=F36FEC11B4FA096A7EE559582E755F8E24E668EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:47:85:f6:82:7e:0d:0a:53:88:f0:a2:64:
e1:9a:ae:b5:39:86:ac:55:7f:46:bb:25:82:9e:a4:
b8:f2:1d:b6:4a:9c:70:fc:0e:2b:bd:68:7e:3e:db:
0f:a5:1c:2d:6a:23:d8:63:30:c0:82:ae:47:d1:f1:
6d:d7:68:92:55:d2:44:ec:55:c6:ee:d8:be:11:0f:
ae:a0:01:b4:40:c2:bf:e2:e0:36:59:96:bf:63:b3:
5a:0b:b7:b1:fe:73:fe:19:e8:84:30:37:ec:bb:e4:
9b:d3:5c:f7:22:ad:7b:38:c7:a2:33:03:c7:87:e5:
22:f4:2e:81:f9:ab:01:65:8b:51:cc:0f:de:73:82:
c2:5f:5a:a9:e3:c3:a4:a1:45:59:b3:13:eb:b7:1e:
f8:2d:6d:74:7c:0a:6c:ec:67:60:b0:ce:3e:23:82:
15:c4:33:2c:49:f2:a6:33:90:a1:c1:5b:94:36:21:
af:8c:f1:c9:78:23:b1:73:5c:be:fc:76:6d:03:4d:
60:b4:e1:1b:0a:bd:16:7a:9f:b5:70:ec:dc:29:50:
93:d3:f3:a5:9d:e7:ee:06:39:49:f3:a7:2e:75:c5:
4a:5a:f9:23:20:d5:3a:eb:ac:ab:99:aa:09:cb:27:
3b:54:ea:ba:bd:75:69:ee:d3:e7:41:dc:fc:98:ff:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:EC:11:B4:FA:09:6A:7E:E5:59:58:2E:75:5F:8E:24:E6:68:EC
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.221.0/24
78.105.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ad:77:5f:05:c3:d0:de:15:17:71:7c:03:3a:2a:70:41:fc:
3f:4c:d0:8b:f8:ad:18:7e:90:bd:87:4a:9a:df:8f:b5:56:91:
e8:3f:e5:08:9b:70:45:52:2e:2f:a0:35:ec:8b:b3:b0:ae:20:
6b:9d:02:e7:12:c6:f5:be:2c:54:58:36:42:18:54:30:b6:e0:
33:ae:fd:88:a8:48:11:bf:f5:e3:84:d9:b2:82:56:fe:04:37:
0b:dd:34:28:c4:06:31:26:4c:ed:0e:c5:46:aa:27:45:0d:5a:
19:9d:03:de:b2:07:b6:e1:41:f0:56:87:3b:e5:59:dd:a4:09:
dc:ae:1b:92:a2:3a:61:de:b7:8d:0a:86:2d:8e:e2:a4:2b:f2:
76:2a:f5:51:b2:e7:90:cf:7d:6e:0c:a9:20:e5:cf:2c:dc:75:
9c:19:fc:ad:ec:d1:00:62:6c:15:9c:9e:90:de:8a:8b:c0:89:
a6:1f:e1:6f:aa:0e:f4:06:f6:0c:19:39:ab:52:57:dd:c7:bf:
5c:80:7f:32:88:b2:f7:ef:90:86:59:8c:aa:63:c8:ef:5b:a5:
94:7a:b9:43:14:72:e1:83:b9:32:e1:8e:33:a4:a3:7c:94:eb:
46:e8:75:28:26:bd:03:ca:33:5d:5c:b6:b6:fb:85:82:a4:b3:
b3:42:55:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:30:53 2026 by rpki-client