Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214340.roa
File: AS214340.roa (raw, json)
Hash identifier: XIV2TohmaRv4t1+xePtjpt/iWD0EoFJg9mhJhJaH0YY=
Subject key identifier: FA:F8:3A:E9:59:81:0B:2C:92:D3:B5:6A:47:8C:43:B8:09:5E:13:45
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 65386917C5264E48AB157E4BE2E8F28E51DF7120
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214340.roa
Signing time: Thu 25 Jun 2026 09:48:41 +0000
ROA not before: Thu 25 Jun 2026 09:43:41 +0000
ROA not after: Thu 24 Jun 2027 09:48:41 +0000
asID: 214340
IP address blocks: 92.113.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:38:69:17:c5:26:4e:48:ab:15:7e:4b:e2:e8:f2:8e:51:df:71:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 25 09:43:41 2026 GMT
Not After : Jun 24 09:48:41 2027 GMT
Subject: CN=FAF83AE959810B2C92D3B56A478C43B8095E1345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:9c:ad:92:a5:c8:8c:73:be:ff:01:68:27:
a2:d1:87:58:94:d9:77:e8:fa:7c:93:3e:fa:af:7b:
f5:f8:85:11:ac:35:fc:79:97:fe:5d:d0:f7:3f:85:
3c:66:ca:0d:5d:9a:fc:59:65:1c:f6:8d:bf:ef:3b:
48:f1:5d:5e:af:50:bb:11:4f:d5:e2:f9:da:5d:3d:
f1:74:1d:2d:49:e0:a3:6a:99:a8:54:74:62:cb:16:
18:44:0c:8d:9c:62:77:db:5c:7e:db:f8:dd:ca:0f:
df:f7:94:c3:a5:84:a6:a3:b2:db:02:13:53:6c:1f:
55:ef:e5:56:13:d3:25:e5:c7:f5:76:be:ca:82:51:
de:6c:0b:0a:d0:99:a4:52:eb:d5:5c:95:85:23:34:
e4:43:15:77:23:57:50:9a:87:7a:6a:c5:c5:b6:af:
18:3b:18:cb:bd:a7:6c:b1:05:00:f8:11:f6:75:31:
4c:ea:85:dd:f6:8a:a5:8b:bd:45:e3:e4:9e:4c:71:
a3:a1:d9:62:43:f5:17:46:be:77:e3:4f:16:42:8c:
a2:b5:96:d3:7a:da:79:2d:d5:2a:67:3d:6d:ad:7b:
36:34:a0:e1:3f:9c:30:c5:bd:93:78:24:9b:c2:66:
8a:47:01:37:8b:36:c0:4a:5d:49:8f:11:fc:da:a9:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:3A:E9:59:81:0B:2C:92:D3:B5:6A:47:8C:43:B8:09:5E:13:45
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.12.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3c:f5:41:d8:16:5b:71:98:c2:74:75:09:23:8f:55:d1:7f:
14:a2:b4:c3:72:e5:4e:f6:12:e4:22:ed:1e:ac:57:f1:aa:23:
dc:84:88:0d:40:d6:c7:d0:78:4e:bf:58:2b:28:6d:a5:dd:6a:
08:f8:8c:9d:17:be:2d:03:4b:53:c9:dc:f2:21:69:d8:70:57:
fb:ff:f6:04:f6:b1:f9:3c:3a:f5:5e:8b:d8:e1:7d:23:40:29:
56:1f:46:89:0a:44:58:ee:8d:22:c4:18:c7:9d:95:2a:5f:e8:
43:e0:a7:96:a5:b6:89:77:ea:60:ad:38:c5:48:6c:6e:8b:a9:
c3:2c:e6:fa:b1:c9:80:78:1a:a6:c1:10:35:18:d8:f3:0b:72:
87:f6:01:96:0a:1c:d8:a1:fc:03:e4:5e:22:16:71:d6:b4:7f:
c8:e9:e7:2c:fd:40:05:7a:9a:95:e3:2d:37:2a:72:86:b3:f3:
61:6d:b5:07:da:2d:4a:95:fd:2b:1e:ec:d9:70:45:c2:12:d3:
0b:a8:c7:59:1d:ab:ef:f1:5d:d4:c5:21:b0:b4:b2:28:c5:f3:
63:4f:ae:af:0f:b4:50:3b:aa:04:e3:1e:32:58:b0:f3:8c:0b:
dd:91:69:eb:18:8f:bf:63:1d:e0:65:94:6a:99:fb:e1:ff:d3:
fb:56:a1:6f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUZThpF8UmTkirFX5L4ujyjlHfcSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA2MjUwOTQzNDFaFw0yNzA2MjQwOTQ4NDFaMDMxMTAvBgNV
BAMTKEZBRjgzQUU5NTk4MTBCMkM5MkQzQjU2QTQ3OEM0M0I4MDk1RTEzNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgBpytkqXIjHO+/wFoJ6LRh1iU
2Xfo+nyTPvqve/X4hRGsNfx5l/5d0Pc/hTxmyg1dmvxZZRz2jb/vO0jxXV6vULsR
T9Xi+dpdPfF0HS1J4KNqmahUdGLLFhhEDI2cYnfbXH7b+N3KD9/3lMOlhKajstsC
E1NsH1Xv5VYT0yXlx/V2vsqCUd5sCwrQmaRS69VclYUjNORDFXcjV1Cah3pqxcW2
rxg7GMu9p2yxBQD4EfZ1MUzqhd32iqWLvUXj5J5McaOh2WJD9RdGvnfjTxZCjKK1
ltN62nkt1SpnPW2tezY0oOE/nDDFvZN4JJvCZopHATeLNsBKXUmPEfzaqWPbAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU+vg66VmBCyyS07VqR4xDuAleE0UwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE0MzQwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHEM
MA0GCSqGSIb3DQEBCwUAA4IBAQBRPPVB2BZbcZjCdHUJI49V0X8UorTDcuVO9hLk
Iu0erFfxqiPchIgNQNbH0HhOv1grKG2l3WoI+IydF74tA0tTydzyIWnYcFf7//YE
9rH5PDr1XovY4X0jQClWH0aJCkRY7o0ixBjHnZUqX+hD4KeWpbaJd+pgrTjFSGxu
i6nDLOb6scmAeBqmwRA1GNjzC3KH9gGWChzYofwD5F4iFnHWtH/I6ecs/UAFepqV
4y03KnKGs/NhbbUH2i1Klf0rHuzZcEXCEtMLqMdZHavv8V3UxSGwtLIoxfNjT66v
D7RQO6oE4x4yWLDzjAvdkWnrGI+/Yx3gZZRqmfvh/9P7VqFv
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:03 2026 by rpki-client