Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: 9PBCR2fSwy9833R+RivYF5S6aaJ5/IdrRoQVB7EsfRM=
Subject key identifier: 8E:82:8D:2A:C3:F3:2E:1D:E8:9C:57:70:C4:A3:6B:FC:92:61:B1:CE
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2D4489A85CEC2AA4F5032CFB4B7060E3DC69D203
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
Signing time: Sun 03 May 2026 14:06:21 +0000
ROA not before: Sun 03 May 2026 14:01:21 +0000
ROA not after: Sun 02 May 2027 14:06:21 +0000
asID: 214025
IP address blocks: 141.11.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:44:89:a8:5c:ec:2a:a4:f5:03:2c:fb:4b:70:60:e3:dc:69:d2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 3 14:01:21 2026 GMT
Not After : May 2 14:06:21 2027 GMT
Subject: CN=8E828D2AC3F32E1DE89C5770C4A36BFC9261B1CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:37:fa:96:59:e6:4a:39:25:26:bd:de:6a:
ba:46:7f:be:55:a5:a9:ab:bb:f4:b5:21:12:eb:82:
fb:fa:cc:82:3b:a8:7b:07:82:ca:68:b2:37:d9:8c:
41:8e:8e:c0:bd:19:89:b8:c1:bf:0f:8d:08:dd:5e:
5c:0f:47:1e:c2:ca:7c:f5:af:60:9f:52:44:c5:03:
a3:c9:9b:38:25:c4:56:5e:16:81:9c:d5:be:b9:32:
1d:67:14:8e:a3:71:d2:52:e1:5e:98:01:84:ad:0a:
fa:85:24:57:cc:c1:b9:27:06:f4:cc:e0:c4:9a:43:
eb:5d:e9:cb:db:9a:d0:44:1f:6a:73:f6:5e:a8:2b:
f5:da:96:23:10:fe:0a:cb:81:ef:2a:cc:94:59:f3:
3e:76:31:47:a6:21:f3:a8:50:2b:6f:81:02:4d:30:
8d:87:78:59:5f:5d:ef:4a:e6:7f:59:30:8c:8c:55:
29:80:e8:2b:96:94:31:35:ac:10:4c:63:0f:90:a4:
db:ee:5c:5e:97:a3:74:20:ce:4e:6f:70:d7:1e:ab:
55:98:65:7c:db:df:8c:15:6c:cb:a8:75:d4:82:dc:
d5:df:05:24:2b:52:b7:2e:00:4a:f8:12:da:b7:a9:
39:43:3d:6f:f0:d4:07:c8:87:21:c6:d9:b5:27:0a:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:8D:2A:C3:F3:2E:1D:E8:9C:57:70:C4:A3:6B:FC:92:61:B1:CE
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a1:41:63:ab:63:f5:ad:c0:6a:74:29:60:d8:8d:68:5b:74:
af:01:12:c5:85:f7:b4:f0:d6:b0:b2:57:c9:03:c1:e6:c7:9f:
17:a3:ed:79:c0:77:b8:3e:4d:ca:8f:f7:d6:fd:87:7f:6c:33:
01:1d:4f:e0:ef:b0:0b:52:07:5b:63:01:b8:f4:c9:e8:7c:e6:
88:f5:22:db:a3:6d:66:31:86:e1:21:9e:e5:09:da:37:2c:74:
62:53:91:22:b5:9f:5f:93:72:dd:4e:41:30:5e:dd:27:6d:74:
0c:2f:f5:ba:d8:22:8e:1c:8a:ff:77:2d:a2:3f:2a:c8:80:ce:
b4:42:e2:cc:74:e2:b9:3a:ec:6e:da:6e:08:f8:98:2b:6a:89:
e1:1a:11:7f:94:56:61:5b:5b:fd:8e:ce:cc:a5:0d:b1:ec:8f:
8f:b9:45:01:26:c4:c8:2d:0b:58:70:a8:b0:b0:11:87:ee:aa:
41:ec:6a:5b:1a:18:80:75:f9:83:67:98:5b:37:ec:aa:27:d9:
aa:ba:05:4d:4e:1d:70:66:0b:49:60:13:3e:a2:44:f7:5f:2c:
57:6a:7d:fc:16:d5:a9:4a:a1:38:cd:e3:a8:cd:de:b6:79:6c:
39:7d:a8:eb:61:0a:ad:c8:f2:ae:7c:27:77:8b:23:93:f1:87:
50:6c:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:35:36 2026 by rpki-client