Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214143.roa
File: AS214143.roa (raw, json)
Hash identifier: wKG3WgkJFky5e8CcILjuII5wKQ1Ahn3sLrjhseaj22k=
Subject key identifier: 90:CF:0B:A4:4B:09:F2:1E:89:4F:84:EB:6A:72:C5:D6:B5:34:3F:50
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7B3CF86B26AC92F712C228D5998535A10B16FC07
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214143.roa
Signing time: Mon 16 Jun 2025 10:32:56 +0000
ROA not before: Mon 16 Jun 2025 10:27:56 +0000
ROA not after: Mon 15 Jun 2026 10:32:56 +0000
asID: 214143
IP address blocks: 46.203.2.0/24 maxlen: 24
178.92.102.0/24 maxlen: 24
178.92.104.0/24 maxlen: 24
178.92.105.0/24 maxlen: 24
178.92.107.0/24 maxlen: 24
178.92.109.0/24 maxlen: 24
178.92.153.0/24 maxlen: 24
178.92.166.0/24 maxlen: 24
178.92.185.0/24 maxlen: 24
178.92.197.0/24 maxlen: 24
178.92.198.0/24 maxlen: 24
178.92.201.0/24 maxlen: 24
178.92.211.0/24 maxlen: 24
178.92.215.0/24 maxlen: 24
178.92.223.0/24 maxlen: 24
178.92.224.0/24 maxlen: 24
178.92.226.0/24 maxlen: 24
178.92.229.0/24 maxlen: 24
178.92.230.0/24 maxlen: 24
178.92.235.0/24 maxlen: 24
178.92.237.0/24 maxlen: 24
178.92.249.0/24 maxlen: 24
178.92.251.0/24 maxlen: 24
178.93.4.0/24 maxlen: 24
178.93.9.0/24 maxlen: 24
178.93.27.0/24 maxlen: 24
178.93.40.0/24 maxlen: 24
178.93.42.0/24 maxlen: 24
178.93.141.0/24 maxlen: 24
178.93.142.0/24 maxlen: 24
178.93.145.0/24 maxlen: 24
178.93.147.0/24 maxlen: 24
178.93.152.0/24 maxlen: 24
178.93.155.0/24 maxlen: 24
178.93.162.0/24 maxlen: 24
178.93.167.0/24 maxlen: 24
178.93.210.0/24 maxlen: 24
178.93.214.0/24 maxlen: 24
178.93.218.0/24 maxlen: 24
178.93.228.0/24 maxlen: 24
178.93.233.0/24 maxlen: 24
178.94.12.0/24 maxlen: 24
178.94.16.0/24 maxlen: 24
178.94.18.0/24 maxlen: 24
178.94.33.0/24 maxlen: 24
178.94.35.0/24 maxlen: 24
178.94.40.0/24 maxlen: 24
178.94.82.0/24 maxlen: 24
178.94.104.0/24 maxlen: 24
178.94.118.0/24 maxlen: 24
178.94.210.0/24 maxlen: 24
178.94.220.0/24 maxlen: 24
178.94.234.0/24 maxlen: 24
178.94.238.0/24 maxlen: 24
178.94.239.0/24 maxlen: 24
178.94.240.0/24 maxlen: 24
178.94.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:3c:f8:6b:26:ac:92:f7:12:c2:28:d5:99:85:35:a1:0b:16:fc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 16 10:27:56 2025 GMT
Not After : Jun 15 10:32:56 2026 GMT
Subject: CN=90CF0BA44B09F21E894F84EB6A72C5D6B5343F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:4c:09:f7:58:7e:98:2f:7d:33:cc:35:fc:
24:71:c4:e2:03:04:6d:af:b4:ec:25:15:24:67:f5:
a1:6f:20:cb:71:47:33:56:3f:63:ed:47:f0:da:20:
a8:3d:8f:7d:92:64:ca:2e:67:f1:c9:94:b5:6e:86:
fb:a1:ff:43:f4:73:35:ea:7c:58:9c:e0:bf:2a:a6:
c1:35:80:58:04:3e:58:0d:ec:b8:ff:57:dd:88:9b:
44:77:09:27:ca:87:bb:6e:cb:3e:ac:2c:cb:c8:2f:
2c:02:5c:1c:3b:e7:87:b6:0d:e0:21:90:3d:41:0f:
26:43:df:8b:9b:f5:4d:cf:6f:08:3b:85:a9:9e:97:
5d:27:f3:27:e3:2f:78:a9:87:29:27:5c:28:0f:b6:
00:c8:34:a3:ed:eb:20:78:16:d0:9e:f1:8e:ab:77:
14:12:8b:df:7d:41:f9:67:54:e5:47:ff:7b:a3:6f:
cf:16:e0:f5:91:95:bf:90:44:05:63:a1:fa:ef:93:
4a:74:4f:ea:43:dd:86:b8:c1:b2:84:9f:07:f7:27:
cd:6e:ac:0c:22:1e:31:c9:16:68:06:db:7d:7c:96:
3c:bd:7f:fa:32:4c:d2:8a:30:d3:cb:71:5f:a9:4e:
52:8a:e4:80:ce:82:ea:79:b5:f4:2f:d7:1b:7a:b3:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CF:0B:A4:4B:09:F2:1E:89:4F:84:EB:6A:72:C5:D6:B5:34:3F:50
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214143.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.2.0/24
178.92.102.0/24
178.92.104.0/23
178.92.107.0/24
178.92.109.0/24
178.92.153.0/24
178.92.166.0/24
178.92.185.0/24
178.92.197.0-178.92.198.255
178.92.201.0/24
178.92.211.0/24
178.92.215.0/24
178.92.223.0-178.92.224.255
178.92.226.0/24
178.92.229.0-178.92.230.255
178.92.235.0/24
178.92.237.0/24
178.92.249.0/24
178.92.251.0/24
178.93.4.0/24
178.93.9.0/24
178.93.27.0/24
178.93.40.0/24
178.93.42.0/24
178.93.141.0-178.93.142.255
178.93.145.0/24
178.93.147.0/24
178.93.152.0/24
178.93.155.0/24
178.93.162.0/24
178.93.167.0/24
178.93.210.0/24
178.93.214.0/24
178.93.218.0/24
178.93.228.0/24
178.93.233.0/24
178.94.12.0/24
178.94.16.0/24
178.94.18.0/24
178.94.33.0/24
178.94.35.0/24
178.94.40.0/24
178.94.82.0/24
178.94.104.0/24
178.94.118.0/24
178.94.210.0/24
178.94.220.0/24
178.94.234.0/24
178.94.238.0-178.94.240.255
178.94.243.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:66:dc:ae:40:9a:e8:2d:c3:75:3c:89:43:9a:6d:49:9a:91:
8c:d7:e1:2e:fb:7e:d5:a2:31:fa:f1:ed:0f:70:05:34:c3:d8:
43:7e:99:bd:18:54:95:bc:b0:ef:30:4e:75:8c:a7:d9:fc:69:
51:76:12:61:e6:9a:1b:e4:0f:f3:db:7f:b6:db:87:3e:d9:7f:
39:bd:d8:82:97:cc:95:b0:cf:4e:fd:5b:ae:f3:d7:8f:c9:81:
07:49:c8:bf:7c:33:81:ff:12:50:e4:94:d5:5a:4b:36:ee:f6:
05:86:05:89:0c:a8:61:49:9e:51:2e:33:c3:6e:48:72:af:0c:
ec:d0:f7:33:cd:7a:30:a0:4f:96:a5:a4:4e:f9:8e:15:2c:91:
c5:74:76:5e:95:03:3b:ce:ac:a4:ce:31:e8:b1:89:07:cc:c1:
bc:0f:97:ea:46:f0:e2:5c:07:51:5c:24:33:8c:17:8c:80:5b:
43:dc:08:bf:43:c7:55:21:19:dd:33:c0:c8:7f:14:9a:f1:0c:
d2:bb:89:84:15:72:1d:2f:78:fc:e1:3e:8d:f9:a0:dd:b0:53:
11:be:22:b0:25:8b:db:28:60:56:80:f5:74:79:8e:30:fb:fe:
b5:af:38:9f:57:f9:33:ab:36:96:4d:cd:7b:54:20:fa:50:0b:
3a:9b:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:58:57 2025 by rpki-client