Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214618.roa
File: AS214618.roa (raw, json)
Hash identifier: WR0KNGIaEcphySz/0DjL2o1xo4jcN7geq7l9F1syWro=
Subject key identifier: 97:A0:9C:45:1C:E5:89:3D:F7:AC:0F:BB:E0:89:C5:A7:AF:FF:0F:12
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2C86EF36B645CD33420EA4CDC96B70C1E6CAED3C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214618.roa
Signing time: Mon 21 Sep 2026 11:49:35 +0000
ROA not before: Mon 21 Sep 2026 11:44:35 +0000
ROA not after: Mon 20 Sep 2027 11:49:35 +0000
asID: 214618
IP address blocks: 92.112.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:86:ef:36:b6:45:cd:33:42:0e:a4:cd:c9:6b:70:c1:e6:ca:ed:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 21 11:44:35 2026 GMT
Not After : Sep 20 11:49:35 2027 GMT
Subject: CN=97A09C451CE5893DF7AC0FBBE089C5A7AFFF0F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:85:c3:08:a7:e9:34:94:60:72:11:a3:ed:
49:bc:c2:a7:a6:9e:43:2d:77:eb:6b:18:a8:5a:33:
b7:ec:46:93:b2:48:ec:bb:69:c8:9e:b4:db:89:bd:
85:56:26:e2:a5:60:fd:08:3c:fa:2c:56:1d:ee:b8:
ec:80:ae:7e:27:a9:6c:5d:fd:4a:88:3a:69:21:8d:
71:65:27:77:d5:e8:8e:0a:aa:cc:3c:3c:09:51:e1:
86:72:f8:5e:e9:8a:b2:81:e9:21:fc:a9:f0:92:5f:
d8:06:1f:49:bb:f9:95:b8:2a:6d:4c:59:6c:df:8f:
fb:8c:e7:ad:89:ad:f0:92:b2:23:9d:c1:81:40:da:
8b:4b:3e:23:61:16:ff:58:48:14:70:13:f8:7a:f2:
24:8a:ee:6f:69:c0:c7:8b:a7:b4:18:34:af:8a:0c:
16:a3:50:9e:d8:6a:68:d8:81:97:29:8c:ad:13:54:
f8:df:9d:ce:7d:92:64:32:9f:49:c9:af:f6:31:c0:
e4:6c:10:46:7b:87:6f:73:40:25:0d:63:35:21:e9:
5a:de:27:e0:89:e4:84:9b:09:ee:bc:a3:3c:cb:1e:
13:f7:5f:5e:ae:1a:2c:e4:31:a3:2c:17:c3:da:33:
24:36:d6:fa:a6:b9:26:a6:20:fb:64:7a:6b:61:da:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A0:9C:45:1C:E5:89:3D:F7:AC:0F:BB:E0:89:C5:A7:AF:FF:0F:12
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:df:93:b8:71:91:5e:8e:d7:72:ca:d2:8e:db:11:dd:16:51:
ab:3f:88:a2:43:1a:5b:d8:cc:10:56:95:3f:dd:ca:a1:9f:8a:
a0:08:03:19:5b:31:0e:89:e7:9e:e2:a1:37:e2:9f:a3:7c:5b:
55:57:c6:52:c8:9c:10:79:00:78:50:e0:0e:0d:1a:58:a9:a8:
c1:4b:4e:e9:3d:57:d7:da:a1:8a:ca:c8:89:18:6e:16:f7:ff:
51:16:a4:c8:8a:c2:ec:86:21:e6:e9:4e:e6:af:0e:f7:11:23:
84:8a:82:df:af:45:03:ce:3d:78:ff:35:5d:22:67:c2:55:72:
aa:6c:9b:ec:e0:bd:87:1d:9f:a0:7e:2b:31:fb:ee:95:2e:c6:
7a:9b:0a:cc:77:7e:ec:9f:53:19:50:aa:c5:6b:68:f4:24:39:
5b:74:71:26:c3:a1:39:8b:eb:c6:1f:f9:7b:31:cd:8e:81:bb:
90:56:5c:a2:93:92:5d:12:f2:cc:5f:87:f9:4f:b1:94:39:fb:
d9:39:3b:52:4f:1c:91:20:cb:dc:66:b8:3c:dd:36:71:84:00:
b2:7f:67:53:1a:48:a6:24:69:7e:6e:af:cf:b9:21:fd:03:0c:
f3:cc:fc:4c:71:67:ac:7b:17:e4:f6:c5:4c:98:ea:dc:7f:50:
e0:00:a5:ff
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIULIbvNrZFzTNCDqTNyWtwwebK7TwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MjExMTQ0MzVaFw0yNzA5MjAxMTQ5MzVaMDMxMTAvBgNV
BAMTKDk3QTA5QzQ1MUNFNTg5M0RGN0FDMEZCQkUwODlDNUE3QUZGRjBGMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm34XDCKfpNJRgchGj7Um8wqem
nkMtd+trGKhaM7fsRpOySOy7acietNuJvYVWJuKlYP0IPPosVh3uuOyArn4nqWxd
/UqIOmkhjXFlJ3fV6I4Kqsw8PAlR4YZy+F7pirKB6SH8qfCSX9gGH0m7+ZW4Km1M
WWzfj/uM562JrfCSsiOdwYFA2otLPiNhFv9YSBRwE/h68iSK7m9pwMeLp7QYNK+K
DBajUJ7YamjYgZcpjK0TVPjfnc59kmQyn0nJr/YxwORsEEZ7h29zQCUNYzUh6Vre
J+CJ5ISbCe68ozzLHhP3X16uGizkMaMsF8PaMyQ21vqmuSamIPtkemth2nPFAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUl6CcRRzliT33rA+74InFp6//DxIwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE0NjE4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHBE
MA0GCSqGSIb3DQEBCwUAA4IBAQA/35O4cZFejtdyytKO2xHdFlGrP4iiQxpb2MwQ
VpU/3cqhn4qgCAMZWzEOieee4qE34p+jfFtVV8ZSyJwQeQB4UOAODRpYqajBS07p
PVfX2qGKysiJGG4W9/9RFqTIisLshiHm6U7mrw73ESOEioLfr0UDzj14/zVdImfC
VXKqbJvs4L2HHZ+gfisx++6VLsZ6mwrMd37sn1MZUKrFa2j0JDlbdHEmw6E5i+vG
H/l7Mc2OgbuQVlyik5JdEvLMX4f5T7GUOfvZOTtSTxyRIMvcZrg83TZxhACyf2dT
GkimJGl+bq/PuSH9AwzzzPxMcWesexfk9sVMmOrcf1DgAKX/
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:59:26 2026 by rpki-client