Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214138.roa
File: AS214138.roa (raw, json)
Hash identifier: CTLvg7RWwKvFpTdpBnvlehlTchiAinsjwAM9X6tWQpk=
Subject key identifier: 9E:4D:5D:D2:AF:67:CF:E1:AA:D5:0B:C7:FC:05:6F:93:85:D4:A9:AD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 510E25960E51BEF5AF845405112BA44522C69AF8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214138.roa
Signing time: Mon 29 Jun 2026 12:56:07 +0000
ROA not before: Mon 29 Jun 2026 12:51:07 +0000
ROA not after: Mon 28 Jun 2027 12:56:07 +0000
asID: 214138
IP address blocks: 2a13:9500:199::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:0e:25:96:0e:51:be:f5:af:84:54:05:11:2b:a4:45:22:c6:9a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 29 12:51:07 2026 GMT
Not After : Jun 28 12:56:07 2027 GMT
Subject: CN=9E4D5DD2AF67CFE1AAD50BC7FC056F9385D4A9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:97:32:dd:10:97:ed:8a:bf:9b:3b:19:e7:
47:d3:f3:f1:f7:53:02:8a:07:75:17:86:e9:0d:87:
e6:b1:af:e1:0b:c8:22:f0:a1:24:31:56:ce:89:7b:
db:e8:12:f1:cb:fd:3a:1a:21:c1:4c:4b:8f:ab:36:
90:6b:dd:c3:55:39:fc:f5:e8:9f:f4:f3:7b:09:7f:
2b:a0:9c:89:31:63:af:c2:3e:ef:0c:a6:33:70:03:
36:c0:1a:16:63:7e:a4:e3:9c:18:e5:09:22:a2:9b:
9a:99:a7:b9:02:51:ff:19:48:e6:8b:77:6e:a3:42:
f2:59:cf:5f:f9:67:8f:35:be:43:95:8c:c6:92:d2:
de:63:07:2c:23:d9:5f:21:f1:1e:3f:1e:5a:fd:b5:
0e:2b:d1:a0:7d:1b:14:0c:53:13:2b:f5:82:b4:d2:
79:66:0a:70:70:48:5e:3d:30:98:a0:0a:ce:87:64:
93:28:ac:ad:88:24:b5:2f:f5:77:59:a4:02:ea:51:
4c:88:36:3b:bf:17:d8:5f:55:96:ef:3a:ac:d8:64:
4b:a7:b7:34:f5:4b:65:a3:c9:dc:04:d6:fc:d5:67:
a2:44:51:c7:f8:d0:b2:06:25:b4:1b:8d:73:d8:39:
49:95:ed:f2:fe:5b:68:c2:30:75:9f:1e:25:c2:aa:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4D:5D:D2:AF:67:CF:E1:AA:D5:0B:C7:FC:05:6F:93:85:D4:A9:AD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:199::/48
Signature Algorithm: sha256WithRSAEncryption
60:db:1a:1a:f1:9d:da:f0:e2:2a:ff:5c:01:b2:68:c3:d1:46:
f3:23:43:84:e4:2e:d1:fc:b6:cc:df:a6:62:80:fc:73:a7:d3:
df:af:50:96:6b:b3:36:1a:94:b8:4a:cd:3b:d4:48:86:fa:4a:
80:90:77:e4:37:dc:d1:b4:30:22:a7:6c:b8:44:60:26:43:0a:
ba:3b:00:20:dc:c5:e8:d2:f1:13:bd:dd:4a:ba:8e:11:b7:91:
91:5a:d9:95:e9:6b:02:99:00:ac:71:0e:5e:47:b4:0c:15:55:
0b:20:c2:5f:53:ff:37:64:73:7f:1e:ff:a0:28:0b:a4:43:2e:
ce:4e:d8:17:32:ca:b7:4f:47:9c:02:ca:ee:6f:d7:cb:cb:89:
c0:d7:9e:2e:81:8e:92:29:ed:06:50:c1:c0:e1:30:98:3d:f4:
a1:e9:3e:90:99:0b:c7:06:a9:05:04:0a:9e:8f:2e:13:01:0a:
82:c1:54:c5:6c:b6:27:8d:e9:e5:a7:d9:5f:cd:0d:d6:31:f6:
42:72:ea:fe:11:31:56:01:60:f5:ad:c2:fd:af:07:71:ee:e1:
27:9e:8c:5e:aa:b7:ec:e7:dd:80:45:93:f5:e0:46:8f:30:9f:
9b:67:40:dd:4b:b5:f8:6f:f2:b4:f1:6c:7c:71:41:da:1b:09:
ce:e1:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:14 2026 by rpki-client