Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: 1CS/cXaTBpmMsT+t2HYnCXyOOqfsH3Ve164QrW6Gh68=
Subject key identifier: 3E:8D:F2:D1:85:68:7F:88:4D:30:A4:E2:EF:6A:C5:7B:19:7F:24:6F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4FCA5AF041523673265F0AC72D9423F5E2915B3D
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
Signing time: Mon 23 Mar 2026 11:43:25 +0000
ROA not before: Mon 23 Mar 2026 11:38:25 +0000
ROA not after: Mon 22 Mar 2027 11:43:25 +0000
asID: 214025
IP address blocks: 141.11.237.0/24 maxlen: 24
141.11.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ca:5a:f0:41:52:36:73:26:5f:0a:c7:2d:94:23:f5:e2:91:5b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 23 11:38:25 2026 GMT
Not After : Mar 22 11:43:25 2027 GMT
Subject: CN=3E8DF2D185687F884D30A4E2EF6AC57B197F246F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:62:98:a1:61:90:78:48:2d:a2:a6:2b:5d:
e4:39:b3:49:4c:ed:f5:bb:d4:6f:7d:07:09:98:84:
34:ce:01:ed:3e:cb:4d:70:8d:dc:d6:fb:22:26:8e:
97:e5:19:e1:a1:b0:5a:9b:3b:1a:d7:46:6f:1a:8b:
8e:11:49:29:5c:e2:e6:cd:8c:ca:2b:7b:9b:2c:cf:
99:39:cb:b7:08:8c:71:1d:0e:27:a3:f0:bf:a7:30:
4d:15:d5:b1:eb:a8:f9:f7:64:5c:3e:93:5f:6a:6f:
2a:d1:18:f5:93:e5:61:44:b5:06:f1:15:b5:c7:f0:
af:81:e4:9f:dd:ba:98:f4:bf:4f:13:16:49:ec:26:
a2:f8:db:84:20:c4:9a:02:ff:b6:0e:ed:a2:02:a4:
36:d3:8f:f2:df:82:40:74:0a:8d:29:8b:67:a3:7d:
84:31:04:5d:b3:da:54:8b:21:fc:29:75:c2:92:e9:
dd:bd:5c:67:af:ba:2d:2d:8b:3d:9a:06:df:32:ca:
83:87:ae:a4:95:a4:e2:e3:5d:87:5c:ae:5f:18:cd:
9a:a3:52:0d:7d:90:30:27:2e:5e:9c:0a:51:78:92:
1a:d4:49:8d:a4:e8:7f:60:f9:93:86:d6:78:7f:70:
e7:f2:7f:8b:d3:88:d3:8f:97:c4:94:e4:d0:0a:9e:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:F2:D1:85:68:7F:88:4D:30:A4:E2:EF:6A:C5:7B:19:7F:24:6F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.237.0/24
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:e7:fc:01:97:53:91:41:03:0a:79:92:03:f7:bd:5c:90:27:
d6:5c:75:2b:ec:4d:21:fb:83:92:b6:ed:56:f0:1e:8e:d5:93:
3c:b9:21:ca:97:65:5e:0b:93:38:11:74:d9:8d:0f:d3:ca:90:
dd:bc:89:1e:78:51:02:dd:58:b7:b8:00:8f:3f:0e:3c:0e:05:
75:a9:cd:66:f4:87:3c:1d:96:79:a4:26:ec:03:a5:81:71:15:
bb:6b:aa:69:19:50:e6:0d:a2:c1:99:dc:09:fe:3d:9a:54:2c:
7b:47:06:84:17:9b:53:59:99:9c:08:7d:6d:4c:b8:0b:ed:56:
45:98:20:a6:82:7b:86:87:b7:1c:b1:b9:ca:ed:ae:38:d2:af:
e8:5b:21:a8:9e:55:34:bd:fd:07:2d:da:90:79:66:a3:12:23:
59:96:9d:e9:14:5c:44:df:2e:52:61:05:a7:34:c8:44:e2:23:
44:b1:86:10:dc:c2:93:82:6f:d5:88:3f:d1:ba:f5:b7:03:3b:
e3:cd:c8:62:1f:fc:5f:9e:38:1d:1d:e0:e7:e8:ad:4e:23:97:
5c:10:13:17:f7:30:59:ee:12:7b:29:a7:45:21:1c:c8:e6:5a:
7d:67:5e:a7:dc:41:44:29:03:62:34:83:e2:f9:ac:01:2c:c3:
67:6c:8f:37
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUT8pa8EFSNnMmXwrHLZQj9eKRWz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjAzMjMxMTM4MjVaFw0yNzAzMjIxMTQzMjVaMDMxMTAvBgNV
BAMTKDNFOERGMkQxODU2ODdGODg0RDMwQTRFMkVGNkFDNTdCMTk3RjI0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdq2KYoWGQeEgtoqYrXeQ5s0lM
7fW71G99BwmYhDTOAe0+y01wjdzW+yImjpflGeGhsFqbOxrXRm8ai44RSSlc4ubN
jMore5ssz5k5y7cIjHEdDiej8L+nME0V1bHrqPn3ZFw+k19qbyrRGPWT5WFEtQbx
FbXH8K+B5J/dupj0v08TFknsJqL424QgxJoC/7YO7aICpDbTj/LfgkB0Co0pi2ej
fYQxBF2z2lSLIfwpdcKS6d29XGevui0tiz2aBt8yyoOHrqSVpOLjXYdcrl8YzZqj
Ug19kDAnLl6cClF4khrUSY2k6H9g+ZOG1nh/cOfyf4vTiNOPl8SU5NAKnko9AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUPo3y0YVof4hNMKTi72rFexl/JG8wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE0MDI1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjQvt
AwQAjQvwMA0GCSqGSIb3DQEBCwUAA4IBAQDC5/wBl1ORQQMKeZID971ckCfWXHUr
7E0h+4OStu1W8B6O1ZM8uSHKl2VeC5M4EXTZjQ/TypDdvIkeeFEC3Vi3uACPPw48
DgV1qc1m9Ic8HZZ5pCbsA6WBcRW7a6ppGVDmDaLBmdwJ/j2aVCx7RwaEF5tTWZmc
CH1tTLgL7VZFmCCmgnuGh7ccsbnK7a440q/oWyGonlU0vf0HLdqQeWajEiNZlp3p
FFxE3y5SYQWnNMhE4iNEsYYQ3MKTgm/ViD/RuvW3AzvjzchiH/xfnjgdHeDn6K1O
I5dcEBMX9zBZ7hJ7KadFIRzI5lp9Z16n3EFEKQNiNIPi+awBLMNnbI83
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:33:41 2026 by rpki-client