Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214937.roa
File: AS214937.roa (raw, json)
Hash identifier: rksjRwoSfP72V8vfcf4YM8SH5dAnRPeaU0XvkM5nW+8=
Subject key identifier: 3F:4C:0F:9C:8E:22:E2:E3:4F:49:23:D9:A2:68:7F:B3:61:6E:DD:0E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0C338DFEAB3EE9AA6B409DEBA6F350FDB88F58BC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214937.roa
Signing time: Thu 02 Jul 2026 09:48:52 +0000
ROA not before: Thu 02 Jul 2026 09:43:52 +0000
ROA not after: Thu 01 Jul 2027 09:48:52 +0000
asID: 214937
IP address blocks: 178.92.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:33:8d:fe:ab:3e:e9:aa:6b:40:9d:eb:a6:f3:50:fd:b8:8f:58:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 2 09:43:52 2026 GMT
Not After : Jul 1 09:48:52 2027 GMT
Subject: CN=3F4C0F9C8E22E2E34F4923D9A2687FB3616EDD0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:27:63:f5:60:51:6b:f4:ea:a0:da:cf:8f:37:
45:e2:60:13:61:ae:42:90:07:bd:53:62:97:b1:8f:
e3:03:78:7e:f7:f7:b4:81:e2:4c:0e:72:a1:00:18:
06:94:54:c4:ed:f5:31:25:b5:44:9d:7e:bd:17:fd:
47:09:b6:62:b0:38:30:81:7c:e6:46:e3:44:e1:cd:
91:72:14:86:b0:76:12:97:fc:a3:3a:7a:66:d5:4b:
5d:9a:11:0a:d7:4f:22:62:b4:18:bd:28:05:3d:b5:
8d:f7:56:cb:b2:6c:8a:f1:5f:82:69:74:c7:ec:9e:
ea:42:ba:44:0d:eb:b0:10:86:19:62:a5:b0:f4:72:
e3:e9:80:aa:10:58:22:16:95:6c:dd:57:6b:9d:5a:
97:91:86:55:df:c0:c8:da:99:b3:c3:bd:99:ec:98:
89:1e:c9:3a:0e:01:9e:e1:3d:18:d0:db:c3:f4:b6:
99:50:2a:47:8a:59:74:43:14:23:d5:e8:88:91:7b:
d0:f9:8d:85:6c:2b:a0:ca:72:a2:56:04:ce:e9:fb:
2e:7e:bd:7c:4a:08:1d:59:44:dc:e1:af:af:34:b2:
64:0a:f6:ac:a3:d4:04:03:07:3e:f3:f0:08:b7:97:
8c:da:0c:7f:ea:02:8c:02:42:ba:66:f5:e3:b3:db:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4C:0F:9C:8E:22:E2:E3:4F:49:23:D9:A2:68:7F:B3:61:6E:DD:0E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:77:7f:cf:2c:c1:cd:c2:ef:d1:c7:02:1c:2c:88:c2:fa:c5:
b3:34:b8:8e:61:d2:f7:34:2b:e4:63:13:57:b8:4b:e1:75:65:
f2:6a:c2:0a:4e:00:af:08:35:92:cc:db:fa:09:20:0a:59:89:
fd:b7:8f:ac:ce:6b:54:bb:a5:69:70:37:e3:05:11:ff:8d:e3:
b6:3f:35:f9:7c:30:4b:c1:38:c0:92:5a:91:e0:84:00:0b:c1:
5d:87:84:72:da:10:5a:7a:9f:6e:84:6e:0c:25:17:e7:90:94:
71:b5:a4:96:cd:7a:c6:ca:66:1d:be:44:0e:e1:1b:2a:d1:71:
3c:1a:a5:11:5b:a3:e3:c2:0e:0f:22:a7:28:f3:a9:8a:f5:83:
8f:9a:f6:06:8f:0e:ce:23:2f:08:86:3a:bd:ed:54:cd:84:0d:
32:60:87:47:b7:7d:75:24:24:08:34:3f:3c:73:01:53:8f:e6:
0c:57:44:c6:e5:db:84:88:dd:90:d4:60:93:25:75:c7:bd:57:
4e:66:c6:1e:be:b4:f2:e8:b5:6c:a7:1a:20:da:dc:11:79:46:
4b:eb:3d:7a:54:c4:20:24:da:02:07:1e:41:10:46:1c:0e:1d:
1f:0a:80:70:d1:92:f8:14:f5:3a:42:ee:e4:aa:33:04:da:c3:
99:e6:89:cd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUDDON/qs+6aprQJ3rpvNQ/biPWLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA3MDIwOTQzNTJaFw0yNzA3MDEwOTQ4NTJaMDMxMTAvBgNV
BAMTKDNGNEMwRjlDOEUyMkUyRTM0RjQ5MjNEOUEyNjg3RkIzNjE2RUREMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQJ2P1YFFr9Oqg2s+PN0XiYBNh
rkKQB71TYpexj+MDeH7397SB4kwOcqEAGAaUVMTt9TEltUSdfr0X/UcJtmKwODCB
fOZG40ThzZFyFIawdhKX/KM6embVS12aEQrXTyJitBi9KAU9tY33VsuybIrxX4Jp
dMfsnupCukQN67AQhhlipbD0cuPpgKoQWCIWlWzdV2udWpeRhlXfwMjambPDvZns
mIkeyToOAZ7hPRjQ28P0tplQKkeKWXRDFCPV6IiRe9D5jYVsK6DKcqJWBM7p+y5+
vXxKCB1ZRNzhr680smQK9qyj1AQDBz7z8Ai3l4zaDH/qAowCQrpm9eOz20UrAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUP0wPnI4i4uNPSSPZomh/s2Fu3Q4wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE0OTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAslwA
MA0GCSqGSIb3DQEBCwUAA4IBAQCid3/PLMHNwu/RxwIcLIjC+sWzNLiOYdL3NCvk
YxNXuEvhdWXyasIKTgCvCDWSzNv6CSAKWYn9t4+szmtUu6VpcDfjBRH/jeO2PzX5
fDBLwTjAklqR4IQAC8Fdh4Ry2hBaep9uhG4MJRfnkJRxtaSWzXrGymYdvkQO4Rsq
0XE8GqURW6Pjwg4PIqco86mK9YOPmvYGjw7OIy8Ihjq97VTNhA0yYIdHt311JCQI
ND88cwFTj+YMV0TG5duEiN2Q1GCTJXXHvVdOZsYevrTy6LVspxog2twReUZL6z16
VMQgJNoCBx5BEEYcDh0fCoBw0ZL4FPU6Qu7kqjME2sOZ5onN
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:27:52 2026 by rpki-client