Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214024.roa
File: AS214024.roa (raw, json)
Hash identifier: f8NsMV5uGdNaJirG0uUgzXUAULFQfM3hTW7MOqbvM6A=
Subject key identifier: 39:93:65:35:4E:E5:E5:18:EE:D9:98:25:12:8D:62:DF:65:A8:3C:6C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2CCE3EA41EC6EF69825072DCB508E7DCDE0BF7C9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214024.roa
Signing time: Fri 08 Aug 2025 06:05:06 +0000
ROA not before: Fri 08 Aug 2025 06:00:06 +0000
ROA not after: Fri 07 Aug 2026 06:05:06 +0000
asID: 214024
IP address blocks: 178.95.89.0/24 maxlen: 24
178.95.90.0/24 maxlen: 24
178.95.91.0/24 maxlen: 24
178.95.232.0/24 maxlen: 24
178.95.233.0/24 maxlen: 24
178.95.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ce:3e:a4:1e:c6:ef:69:82:50:72:dc:b5:08:e7:dc:de:0b:f7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 8 06:00:06 2025 GMT
Not After : Aug 7 06:05:06 2026 GMT
Subject: CN=399365354EE5E518EED99825128D62DF65A83C6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:b6:5d:66:47:8c:63:55:01:91:85:18:cc:
3b:95:0a:da:e2:8e:32:9b:d9:13:ca:33:07:ac:37:
d9:54:d1:fc:bd:15:e9:09:bc:58:ee:ef:10:4f:a5:
db:87:62:7a:44:5c:7d:bd:61:12:57:68:1e:e6:f8:
a1:11:cf:bf:0f:f9:ba:cf:69:aa:08:a9:41:8e:b9:
e5:c1:ea:30:5f:93:ec:7f:98:46:f5:cf:06:62:d0:
e1:29:ec:a8:78:26:94:e5:8e:cf:04:47:d1:7c:50:
9c:c0:db:80:f1:89:72:13:8c:dd:bb:a4:67:c5:43:
aa:a2:f7:36:8a:60:18:01:68:33:dc:b7:f8:18:0c:
42:ff:8b:83:c8:13:f4:78:c8:3e:1c:91:60:d6:43:
16:2c:d3:93:5d:6c:5a:3c:67:f5:17:bf:a9:00:28:
fb:c3:90:58:8f:65:b8:32:88:c1:ed:70:fe:28:44:
9b:37:77:b3:b5:b4:59:36:a4:3c:d1:bf:4a:69:69:
f5:9d:2e:24:1d:18:f0:98:98:4b:3b:06:df:de:de:
cc:82:be:14:53:78:f9:0d:86:fc:97:07:80:c1:21:
6a:df:07:0b:17:36:7c:bb:ea:62:ab:1d:2e:3f:f9:
0a:d1:a3:e8:e1:10:67:7d:bc:76:a3:19:60:84:ab:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:65:35:4E:E5:E5:18:EE:D9:98:25:12:8D:62:DF:65:A8:3C:6C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.89.0-178.95.91.255
178.95.232.0-178.95.234.255
Signature Algorithm: sha256WithRSAEncryption
a8:ef:0f:bf:bf:88:d2:b5:42:89:79:06:47:f9:5f:5a:24:73:
90:59:4d:d6:60:ad:80:79:f5:85:13:2c:1e:59:93:79:3a:96:
bc:e5:b1:d6:2f:d8:75:b3:5c:0e:02:99:b0:e8:52:c5:8b:21:
74:df:6c:60:7a:64:0f:e1:c7:9c:b0:a1:ca:d1:bb:e6:8a:97:
f6:f4:ef:d8:ee:b3:23:f7:ce:5b:fb:aa:84:79:53:79:a1:85:
4a:e7:33:4a:c5:3c:f1:42:b9:65:35:14:ec:91:9d:5a:66:f8:
ca:72:18:a2:7e:f8:09:10:88:59:c6:8d:4f:07:d5:2f:33:47:
bd:8d:27:7f:11:b1:2a:81:55:fb:90:a0:09:5b:24:03:8e:68:
a2:72:a8:8d:b8:d4:cc:0c:89:29:66:9f:01:ab:63:cc:f8:08:
c8:f4:ba:b6:0e:b0:0c:26:13:f2:4d:99:c2:7c:4e:f5:e6:1d:
53:a6:17:2c:6f:9f:7d:5f:d2:2d:97:61:b2:22:80:98:a3:3b:
c2:9f:3e:a2:64:fb:92:66:a8:4c:ff:a6:1f:fb:7e:aa:57:b7:
97:fd:6b:06:5e:47:23:da:2c:cd:7f:e3:0e:31:4a:94:a0:90:
58:81:48:ed:42:a1:36:98:62:4b:bc:01:82:e8:50:3d:99:c4:
e2:75:1a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:17:47 2025 by rpki-client