Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214143.roa
File: AS214143.roa (raw, json)
Hash identifier: BHnJZw4ywbQwPzDqbPimmmEZalYD4EE8T2kx/v+pb4o=
Subject key identifier: BE:45:A5:1F:9D:5E:25:91:34:67:CA:4C:C6:76:95:60:B2:8B:D0:30
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2051EDB4628F21C3E69506474EA00B4730A08B0A
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214143.roa
Signing time: Tue 21 Apr 2026 03:29:38 +0000
ROA not before: Tue 21 Apr 2026 03:24:38 +0000
ROA not after: Tue 20 Apr 2027 03:29:38 +0000
asID: 214143
IP address blocks: 141.11.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:51:ed:b4:62:8f:21:c3:e6:95:06:47:4e:a0:0b:47:30:a0:8b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 21 03:24:38 2026 GMT
Not After : Apr 20 03:29:38 2027 GMT
Subject: CN=BE45A51F9D5E25913467CA4CC6769560B28BD030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:99:08:e3:21:b8:64:62:05:01:96:4e:ae:
2e:4a:f6:9a:70:c4:ef:48:14:a1:a2:f0:06:00:41:
68:2a:3a:0a:bc:51:45:80:59:97:da:0f:1f:02:ae:
af:93:ba:20:1c:ef:69:a6:a5:97:4c:35:bf:a3:0f:
26:0a:0a:8b:0e:a7:7c:f3:65:45:fb:48:e2:9a:f3:
e0:79:f5:c6:7b:2e:6e:0c:e3:1d:b6:23:7f:8d:33:
24:3e:89:e5:51:be:d7:b5:eb:e5:78:3f:aa:b4:0b:
cf:4a:8b:97:00:10:a9:7a:39:fd:5f:04:d8:1c:33:
c1:bc:c7:01:16:e3:6f:80:9f:22:dd:17:ad:76:65:
c5:3a:4f:89:96:6b:5d:3d:52:e7:2d:26:e1:03:1e:
2b:cc:54:60:39:3d:4e:89:a2:0b:aa:27:9a:20:2f:
69:d6:e7:39:ae:e3:e8:0d:84:09:7e:2a:9f:b0:b9:
98:7f:8f:35:c7:e5:d9:f3:34:66:1f:95:be:21:77:
a1:66:67:2a:70:e3:ae:00:39:24:05:1e:a0:93:0e:
57:08:d5:d5:9d:be:9b:45:10:52:20:d9:df:c5:23:
7f:70:0d:c3:2c:ed:7b:8a:79:dc:9f:51:5d:a3:a4:
b1:1e:dd:22:5d:1d:8d:41:fe:a7:62:51:ab:05:a5:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:45:A5:1F:9D:5E:25:91:34:67:CA:4C:C6:76:95:60:B2:8B:D0:30
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214143.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:20:20:d7:da:de:3d:c9:0a:6a:34:c4:3a:8f:40:61:c4:f4:
14:19:e7:64:fb:a2:f9:c3:dd:4f:78:e1:d9:4b:c6:3a:13:29:
4b:79:e4:5a:92:b9:60:b3:41:86:0d:5d:01:bb:e3:2c:cb:80:
91:51:df:59:90:7c:43:d5:46:c8:f9:42:d0:fc:0c:f3:df:31:
21:3f:0f:c4:96:1b:57:23:0c:24:ca:5e:26:37:bf:44:de:46:
b9:4c:e7:8b:37:72:44:23:ba:60:31:f8:e6:d3:50:1d:93:a8:
e3:11:de:92:be:d1:2f:69:c6:38:2f:ef:3c:13:3b:e5:56:ea:
31:24:d7:98:bd:37:85:d5:ff:65:0f:db:d1:05:f6:a8:57:ad:
6a:2f:b4:3c:b3:b8:14:06:60:8a:96:7f:30:62:9c:c2:f0:ab:
9b:2c:2c:02:ed:81:c3:c4:fd:95:0b:0c:38:d6:f1:fa:58:f7:
39:28:c3:98:d4:f9:83:40:fe:60:b7:50:d1:64:23:1b:9c:d4:
e0:5a:4d:e9:84:ad:a2:d8:9a:86:fa:fb:fd:08:9b:60:2b:22:
a0:bb:9f:06:2e:8e:73:c7:19:8e:ee:57:43:d3:8a:4b:b8:ed:
20:ac:67:a4:8b:19:6f:c7:55:32:43:15:a2:28:9c:99:c3:56:
22:90:23:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:04 2026 by rpki-client