Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214563.roa
File: AS214563.roa (raw, json)
Hash identifier: kzY/rJ3vDWfj3UmRC/TdvofUNHsLS+S2IPwMDTlS83c=
Subject key identifier: DA:36:A0:96:A1:09:77:62:B1:AC:EF:8F:80:F5:AD:18:2B:B0:E9:55
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 58D32FB645F8704E76EB2DA9CF0E0F9A6779F7C4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214563.roa
Signing time: Sun 02 Aug 2026 12:49:16 +0000
ROA not before: Sun 02 Aug 2026 12:44:16 +0000
ROA not after: Sun 01 Aug 2027 12:49:16 +0000
asID: 214563
IP address blocks: 2a13:9500:d1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d3:2f:b6:45:f8:70:4e:76:eb:2d:a9:cf:0e:0f:9a:67:79:f7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 2 12:44:16 2026 GMT
Not After : Aug 1 12:49:16 2027 GMT
Subject: CN=DA36A096A1097762B1ACEF8F80F5AD182BB0E955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:33:d1:a5:74:7c:4b:e9:c9:f5:bb:4c:33:
c6:1e:5a:ed:df:20:9a:fe:87:5a:9f:c5:af:90:0a:
8d:4a:15:2b:f2:ae:75:38:6b:90:fd:37:27:dd:76:
13:4c:4f:55:2f:d9:3c:c5:65:d5:fe:ed:74:ce:c7:
b0:a2:16:df:7d:24:84:3b:d0:26:68:c1:e4:d8:d8:
47:80:3e:5c:46:ca:78:ad:b5:34:62:7d:fa:25:6b:
3d:6d:4b:a1:fd:9e:b9:5c:78:ff:95:70:bb:60:e9:
16:c2:ca:c9:eb:78:c4:44:46:8d:5b:07:c7:12:82:
b8:3f:4c:1b:8d:0f:d9:ba:ec:c2:42:b2:0d:61:6d:
dd:64:b5:cb:39:c4:f8:89:16:dc:d7:ed:63:68:73:
1f:a1:06:d9:01:e7:a4:18:26:49:56:9b:f2:69:b8:
7f:8f:fc:ac:4a:46:4d:86:f1:9e:44:0e:9e:0d:04:
4c:b4:27:5b:f2:32:fc:c8:9b:60:c5:54:72:d0:ec:
6f:c9:af:e5:63:d7:cd:30:84:0d:61:0e:eb:3e:5d:
12:6f:9b:97:12:40:69:56:8d:b6:a4:93:fe:0a:de:
22:dd:9d:e5:d3:ac:1c:e4:bf:ba:a1:cd:6f:7b:35:
e5:1d:d6:df:cd:49:1a:19:0c:c4:58:5c:72:77:b8:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:A0:96:A1:09:77:62:B1:AC:EF:8F:80:F5:AD:18:2B:B0:E9:55
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214563.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:d1::/48
Signature Algorithm: sha256WithRSAEncryption
36:e5:09:ce:a5:8b:9e:b5:e9:61:e8:c7:09:3c:58:cb:94:dc:
5c:be:32:63:43:ba:11:02:56:37:6c:55:a5:ff:f8:3f:89:65:
cd:a4:3d:fd:04:3d:e3:34:fe:5c:7e:ad:9b:8e:07:f0:07:4e:
d1:93:36:c2:d5:04:06:30:62:d7:e2:fc:13:a8:1a:fa:65:6a:
0f:66:32:3d:22:81:7b:31:be:97:7d:98:48:8c:50:dd:40:f2:
c2:71:8d:67:16:6e:32:30:87:9e:f9:3a:79:43:53:03:c5:54:
88:b1:ed:55:be:1e:d1:94:50:5b:ce:a1:a7:26:b6:9a:17:8b:
25:83:30:3b:1d:a1:c1:70:73:fc:e8:2b:b3:be:60:9d:d7:d7:
22:bb:3b:4b:b3:bc:0b:32:30:ea:8b:88:36:10:e9:4e:0c:10:
c4:4f:3c:cc:72:d8:38:ca:21:43:53:97:00:28:36:c6:ef:ec:
d2:71:e1:54:e1:e2:5f:bc:08:93:b6:9d:84:64:b0:bf:0f:3a:
74:40:2f:00:dc:2a:74:44:e2:b4:1b:4e:0c:a1:67:7f:fb:49:
45:92:f9:5d:27:57:97:77:fe:30:cd:bb:24:58:cd:6f:9d:83:
30:de:a6:39:54:1d:be:46:63:34:7b:3e:d3:65:6a:d9:c6:4d:
17:ef:99:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:17:48 2026 by rpki-client