Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214677.roa
File: AS214677.roa (raw, json)
Hash identifier: ziyS1QooYy2W0CgPfJxCXaOWzgRpS4rgASekclR7quA=
Subject key identifier: DA:F0:36:78:C2:A1:31:60:83:05:97:7F:8C:C7:BF:1A:A9:03:E2:41
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 15AE88C6597303A666043C75D40732B44A22FE16
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214677.roa
Signing time: Thu 12 Nov 2026 09:49:41 +0000
ROA not before: Thu 12 Nov 2026 09:44:41 +0000
ROA not after: Thu 11 Nov 2027 09:49:41 +0000
asID: 214677
IP address blocks: 141.11.100.0/24 maxlen: 24
141.11.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ae:88:c6:59:73:03:a6:66:04:3c:75:d4:07:32:b4:4a:22:fe:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 12 09:44:41 2026 GMT
Not After : Nov 11 09:49:41 2027 GMT
Subject: CN=DAF03678C2A131608305977F8CC7BF1AA903E241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:52:5c:74:bf:99:9e:ef:8e:3a:3a:a1:c5:
a4:64:87:35:46:da:fa:42:d6:8d:35:43:19:f9:d6:
e7:2d:bc:ba:a3:14:fe:32:cd:16:55:f4:25:40:9a:
02:c2:e4:a8:33:1e:a6:90:4b:59:16:a4:0f:a3:8f:
df:7c:6b:b7:6c:03:a4:75:4f:0d:5a:90:59:47:18:
d2:5f:d0:01:3c:64:3d:df:db:1f:26:20:73:da:f6:
b3:09:fe:25:f7:bf:6d:bb:7a:a7:78:54:24:18:0f:
05:d9:ff:97:7b:87:8f:e1:39:f1:0e:34:29:01:d8:
8e:2e:9e:f1:98:c7:9f:6d:73:57:79:6b:fb:a2:65:
fb:65:30:63:e3:9c:c3:d7:b1:47:5e:a4:b5:83:31:
e4:4b:a7:c8:06:e6:7d:88:4c:93:b8:6f:95:03:fe:
ab:48:91:db:3e:8c:85:e7:24:b6:2a:e5:00:fb:7c:
bf:17:49:d8:54:ba:1a:4f:d3:44:f7:7b:9a:d3:07:
4c:61:bb:b6:70:1a:95:79:f5:d9:28:2a:b5:97:e0:
37:1c:33:51:15:cd:fc:b1:4c:0b:5b:76:64:6e:dd:
b6:54:df:fb:6f:ad:56:f9:20:c3:cb:16:86:8d:fb:
b9:9b:4e:71:4c:06:47:c7:16:da:f2:ef:36:5f:2c:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:36:78:C2:A1:31:60:83:05:97:7F:8C:C7:BF:1A:A9:03:E2:41
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.100.0/24
141.11.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a9:74:9d:09:e9:1b:dd:70:4b:25:3c:58:00:04:84:b7:01:
ab:3d:63:ae:5d:92:41:c9:e9:88:2c:ac:44:b2:42:98:e5:80:
da:eb:cb:71:cb:8c:38:8f:63:7e:c9:92:96:f4:65:f9:f4:b4:
14:cf:b6:5f:e7:1b:0d:f1:72:35:48:ee:e1:a0:42:8c:57:0e:
db:2b:37:fc:30:b6:13:32:d5:b9:78:58:1e:b9:0a:0b:3d:9b:
dd:f8:fd:b0:e8:b7:f1:a4:4f:44:10:ee:a8:e6:ca:55:b6:c6:
5d:92:78:d8:54:c5:cc:1c:cf:79:b4:a6:7e:d8:87:25:e7:b2:
8d:17:fe:46:44:34:b6:0b:fb:74:94:60:f6:06:0b:30:fd:6e:
4b:7e:a6:3b:2d:7c:d3:2d:87:48:fc:ae:c1:4b:74:7a:98:4c:
bf:87:19:06:7f:85:9f:15:aa:a7:95:2e:cb:50:a1:c5:1d:67:
7b:62:97:0c:04:e7:c4:49:51:f1:64:95:e1:d3:1b:b2:af:d6:
b8:3a:ce:2b:34:1a:0f:fa:51:77:85:5e:32:f9:da:c6:f3:93:
ca:07:6b:69:c2:e7:4d:2d:8d:5b:bb:e9:f3:cf:a3:27:8e:35:
0c:90:0b:4c:c1:03:74:c0:08:a1:5d:ac:7e:6c:7d:90:c0:d1:
88:8c:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:55:25 2026 by rpki-client