Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214266.roa
File: AS214266.roa (raw, json)
Hash identifier: ViqMgl/I/QTl/VUxYIP3KI1XqdO3dYqadEOKEw+3eN8=
Subject key identifier: F0:5B:A8:3F:27:77:80:3E:50:25:FF:B2:B6:30:9D:B9:DB:8E:35:19
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 401EF180116177117204D5301D0472ECEB1ECD11
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214266.roa
Signing time: Tue 02 Jun 2026 10:06:07 +0000
ROA not before: Tue 02 Jun 2026 10:01:07 +0000
ROA not after: Tue 01 Jun 2027 10:06:07 +0000
asID: 214266
IP address blocks: 2a09:4b40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 14:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1e:f1:80:11:61:77:11:72:04:d5:30:1d:04:72:ec:eb:1e:cd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 2 10:01:07 2026 GMT
Not After : Jun 1 10:06:07 2027 GMT
Subject: CN=F05BA83F2777803E5025FFB2B6309DB9DB8E3519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:dc:c1:81:3f:90:6f:eb:2e:82:62:83:6e:
61:04:b8:ba:dc:a8:0d:65:e0:7d:ea:15:97:b8:52:
e5:f1:88:f7:ab:95:e3:3b:50:81:9d:fb:04:26:5a:
ee:03:9e:6e:46:70:f5:87:66:da:79:de:ea:08:0d:
10:5d:54:ff:03:f8:79:57:23:59:20:b1:59:28:2e:
13:a1:51:15:1c:3c:04:2b:23:d4:17:0c:0b:9e:22:
40:2e:4e:a4:e2:7c:75:10:7d:8a:2e:cb:64:c4:b6:
57:60:81:cf:3e:8f:03:91:d4:6f:c2:d0:fd:73:02:
fb:2e:2e:61:ec:b3:1a:57:ef:d9:d6:fc:3d:f4:e1:
a7:22:f7:c7:fa:01:b8:0a:54:3a:1c:99:e8:db:46:
2d:cd:3a:bd:a7:16:ab:e4:a4:96:b7:cb:ac:7c:f6:
29:9e:ce:e5:53:80:b6:58:92:c4:1d:7c:e2:ae:a6:
4f:0d:0f:a1:3e:b6:70:93:39:9e:bf:07:05:65:0f:
9a:85:c5:7c:20:52:c3:f3:94:c3:67:4f:b1:8a:fa:
a0:22:2d:d4:2b:46:75:82:ad:87:e7:d0:c2:6e:4d:
5d:be:04:9d:a2:25:7f:f1:45:74:56:70:a5:bf:08:
67:7b:a8:fd:fc:e8:04:5f:b6:0c:0e:fa:75:dd:ed:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:A8:3F:27:77:80:3E:50:25:FF:B2:B6:30:9D:B9:DB:8E:35:19
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
79:21:e7:81:a5:8f:b2:d9:e0:81:5a:f4:31:70:f9:65:47:94:
0d:04:5a:89:05:fb:8f:58:f6:e5:53:67:13:25:b9:6d:d2:9d:
1b:5f:55:3a:f1:15:23:af:c1:0b:c8:87:bd:e6:87:e4:8d:3a:
3d:92:10:04:fe:ee:a6:3d:6b:5c:0b:d4:57:5b:9c:c6:82:82:
17:c5:2a:64:69:7a:f2:fd:5a:d5:72:dd:a3:49:d6:92:82:44:
61:f3:b6:96:75:5b:8b:38:af:f5:63:1d:b1:53:09:ee:ed:18:
5d:e9:b1:b4:c9:f3:22:23:53:75:a7:eb:09:9a:46:8c:73:9d:
1d:cd:6d:24:4f:14:fc:4b:14:45:9a:2c:d7:76:3f:a7:34:de:
3a:ae:05:09:4d:0f:4b:25:21:97:04:d1:35:44:a9:1b:7d:b9:
89:76:2b:85:3f:ad:e2:8d:7d:f0:cd:3d:ca:d4:e6:db:a6:86:
3f:7b:1a:2e:13:bb:4e:6a:46:cb:e4:33:72:91:8c:68:9f:a9:
78:08:7c:4a:27:15:52:3a:50:35:d2:41:68:a4:fe:b5:33:be:
e6:cf:27:6a:e7:1c:be:c2:3c:f0:43:e4:ad:d1:87:ba:b3:4f:
b8:5e:e1:a6:fd:22:84:aa:44:9a:64:15:ff:ba:85:06:a9:18:
54:bb:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:16:18 2026 by rpki-client