Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214563.roa
File: AS214563.roa (raw, json)
Hash identifier: DN4qhBndbooUe4bIaQjHxKtwdaoahRMjpmEpPdFhhMQ=
Subject key identifier: FD:E8:1B:A4:48:F3:0A:C9:BB:AF:09:21:01:D7:13:AE:D4:26:3B:21
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2F19B68E11B2C32DF5DF044A165F6EC9C3305E3F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214563.roa
Signing time: Sun 31 Aug 2025 12:24:39 +0000
ROA not before: Sun 31 Aug 2025 12:19:39 +0000
ROA not after: Sun 30 Aug 2026 12:24:39 +0000
asID: 214563
IP address blocks: 2a13:9500:d1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:19:b6:8e:11:b2:c3:2d:f5:df:04:4a:16:5f:6e:c9:c3:30:5e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 31 12:19:39 2025 GMT
Not After : Aug 30 12:24:39 2026 GMT
Subject: CN=FDE81BA448F30AC9BBAF092101D713AED4263B21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:88:39:a7:85:33:62:3c:72:2b:cc:88:0b:
97:f7:b7:64:82:76:c3:f7:a2:ac:87:44:8d:23:89:
18:88:07:b1:98:e1:ae:c4:7d:46:e5:ec:ca:78:54:
7f:69:ab:65:ef:21:1c:42:0e:e3:c8:f0:a4:1b:d2:
e5:5b:15:b2:16:a6:7e:13:9b:2d:e8:01:4d:3d:78:
a5:61:87:a0:ec:39:66:b7:c5:e7:a1:c1:ea:c5:40:
91:e8:0b:5d:ce:a9:a5:0a:7d:36:ef:53:27:70:58:
60:1a:49:57:9d:7c:08:9b:5d:f9:36:a9:97:44:d8:
2c:02:8f:5f:b9:93:46:e5:fd:cc:db:c3:14:5a:8b:
84:b0:5b:79:c8:57:72:8f:2d:78:aa:24:91:29:47:
4c:56:b1:fe:87:9b:af:61:70:e0:63:6f:4c:49:67:
a2:af:12:d8:87:e2:b7:db:12:83:0d:c7:9d:f3:f1:
1a:ad:0d:f2:d1:aa:9b:a5:9c:4f:57:56:a5:e5:b8:
2e:2f:0c:4d:65:6b:a7:ec:5b:be:d3:2f:9f:63:d7:
9b:54:0f:6a:6a:6e:d3:9f:26:89:d7:89:85:08:1e:
f8:41:08:cb:59:60:11:f2:99:40:7e:37:ae:0c:67:
ea:7a:74:6f:86:c4:69:e5:3a:f6:73:7c:84:ae:c5:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E8:1B:A4:48:F3:0A:C9:BB:AF:09:21:01:D7:13:AE:D4:26:3B:21
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214563.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:d1::/48
Signature Algorithm: sha256WithRSAEncryption
54:26:0f:54:fb:f1:90:b3:36:18:63:b4:4d:f3:a4:e7:b3:81:
03:31:ae:a1:6b:86:6a:64:b1:86:6d:85:69:ac:ca:1a:1c:67:
25:4f:69:71:7d:9f:c6:18:f6:ee:77:4a:24:ca:0f:62:ce:33:
51:62:2e:d2:09:a7:21:04:7f:85:b0:2d:64:c4:6b:ff:51:e0:
ec:7a:f0:f8:1a:9d:04:dc:85:00:9a:6e:1f:d4:5a:2b:37:eb:
e7:85:b8:91:73:cb:ca:a0:f9:92:60:4c:5d:bc:4c:b3:8a:ab:
4f:08:7a:f0:db:88:06:51:ca:c1:b3:ad:ff:44:50:f2:a6:c2:
f5:df:72:fa:67:3b:8b:04:4b:1a:53:6c:d2:90:55:7a:e0:3c:
7e:37:d2:ee:cc:66:3f:86:f5:99:c8:90:0e:bf:00:d9:a4:1d:
ba:3b:ee:36:bb:2d:f0:00:e0:cd:7e:a3:f2:c1:05:76:d9:0a:
60:71:0f:12:1c:c8:a6:d7:ef:4d:83:e9:8e:6b:83:d3:60:b7:
63:fd:03:66:28:dc:39:e2:25:7b:eb:be:09:87:58:d6:eb:f6:
c7:45:53:fb:c3:b8:dc:a8:42:9a:b5:e0:c5:5e:bc:2b:b1:f2:
6e:d3:98:10:b1:6e:f7:4c:0d:e7:7a:7c:e3:8e:34:4e:49:66:
89:a1:5d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:45:34 2025 by rpki-client