Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214657.roa
File: AS214657.roa (raw, json)
Hash identifier: Vrx8S4UjAiUJxhu0Rb6fwbLAWyGsWiAHQVR7j+uhcP8=
Subject key identifier: 63:69:A6:A8:24:E0:AA:45:58:09:CF:A1:68:62:DD:8E:81:DD:E8:4F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7557A72524C2A30C0DD93B0E36D760EBEDC75A82
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214657.roa
Signing time: Fri 16 Oct 2026 05:30:09 +0000
ROA not before: Fri 16 Oct 2026 05:25:09 +0000
ROA not after: Fri 15 Oct 2027 05:30:09 +0000
asID: 214657
IP address blocks: 2a13:9500:7a::/48 maxlen: 48
2a13:9500:de::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:57:a7:25:24:c2:a3:0c:0d:d9:3b:0e:36:d7:60:eb:ed:c7:5a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 16 05:25:09 2026 GMT
Not After : Oct 15 05:30:09 2027 GMT
Subject: CN=6369A6A824E0AA455809CFA16862DD8E81DDE84F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:a8:df:a2:7f:35:1e:18:e6:5f:4e:83:13:
d7:29:18:1f:1d:9f:ba:ac:d9:8a:05:1d:0e:4c:e6:
39:38:6f:ea:82:78:68:c4:77:7c:35:4e:a8:c0:cc:
d9:5c:83:b8:fb:89:f7:bd:b7:7f:44:1d:7d:96:7e:
05:56:d6:ac:12:f3:06:0d:17:78:fe:2b:eb:fd:58:
b3:d3:63:7c:9e:ae:eb:b6:23:e4:95:8d:ee:e1:cd:
ca:da:f0:21:87:32:e5:51:10:c1:9b:58:1f:b8:c9:
59:67:eb:89:f4:ea:1d:df:7b:c2:bc:67:52:08:ce:
f7:e0:ad:07:e0:64:bf:e0:71:7a:d8:11:1d:30:b3:
1c:5f:31:e6:1a:7b:ea:10:81:4a:90:b9:32:c6:fa:
9b:48:4b:47:79:11:bc:12:a6:5b:52:1a:df:23:62:
4d:51:9f:9c:fb:6a:46:33:36:1a:be:30:d1:a4:df:
3b:16:93:47:61:50:e2:6f:0f:95:0b:6c:7f:ac:f6:
25:15:0e:8a:14:81:bf:aa:3e:62:3c:ec:64:b3:ec:
c8:a7:54:f7:bc:4f:f7:4a:03:8e:95:f5:58:aa:32:
17:05:22:f8:0b:9f:8e:d2:8f:6c:14:db:c5:3e:e0:
7c:cc:57:79:98:5c:c1:78:6d:92:f9:09:03:31:31:
7c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:69:A6:A8:24:E0:AA:45:58:09:CF:A1:68:62:DD:8E:81:DD:E8:4F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214657.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:7a::/48
2a13:9500:de::/48
Signature Algorithm: sha256WithRSAEncryption
a2:55:ee:81:0a:b6:e7:bf:77:a5:20:44:16:12:30:71:9f:c8:
bf:bf:3c:4d:d8:a6:85:0c:c1:29:da:47:16:96:29:3b:1c:62:
3f:e2:28:83:69:63:64:3e:41:cb:d1:c3:0c:e3:7e:c5:ca:10:
02:6e:0b:28:5b:6d:03:ca:d6:f2:8e:6a:24:a7:0b:53:56:57:
cb:ec:3e:c4:44:5c:e6:db:d9:a3:c8:7b:26:f4:fa:23:ea:9b:
4c:fd:3b:70:0d:16:ff:c0:d5:de:d9:11:b7:e0:f2:f0:53:aa:
0f:5b:2e:72:9a:95:81:e6:fb:55:9c:6f:98:d4:54:30:03:79:
6f:82:43:7a:f4:34:27:91:16:7b:53:5d:6d:b9:e7:09:d6:9d:
43:98:f6:82:cc:44:52:28:e6:85:f4:83:c8:c0:17:7c:22:02:
53:8a:e6:18:fb:1c:b6:7c:e9:25:4b:69:cf:76:67:6d:1c:6e:
24:c5:60:97:7e:8b:84:49:1c:37:c4:f4:13:e3:bb:43:7f:c9:
57:8e:a1:c2:92:e8:0a:02:36:aa:9f:c7:c9:2b:be:0e:7f:16:
ab:39:4d:33:01:a4:59:2b:cc:13:55:ed:9a:aa:48:b3:12:96:
ff:66:5c:58:c9:f7:15:c9:5e:39:d2:a6:33:74:84:ab:7b:28:
f4:40:77:bb
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUdVenJSTCowwN2TsONtdg6+3HWoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMTYwNTI1MDlaFw0yNzEwMTUwNTMwMDlaMDMxMTAvBgNV
BAMTKDYzNjlBNkE4MjRFMEFBNDU1ODA5Q0ZBMTY4NjJERDhFODFEREU4NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBqjfon81HhjmX06DE9cpGB8d
n7qs2YoFHQ5M5jk4b+qCeGjEd3w1TqjAzNlcg7j7ife9t39EHX2WfgVW1qwS8wYN
F3j+K+v9WLPTY3yeruu2I+SVje7hzcra8CGHMuVREMGbWB+4yVln64n06h3fe8K8
Z1IIzvfgrQfgZL/gcXrYER0wsxxfMeYae+oQgUqQuTLG+ptIS0d5EbwSpltSGt8j
Yk1Rn5z7akYzNhq+MNGk3zsWk0dhUOJvD5ULbH+s9iUVDooUgb+qPmI87GSz7Min
VPe8T/dKA46V9ViqMhcFIvgLn47Sj2wU28U+4HzMV3mYXMF4bZL5CQMxMXzdAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUY2mmqCTgqkVYCc+haGLdjoHd6E8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0NjU3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhOV
AAB6AwcAKhOVAADeMA0GCSqGSIb3DQEBCwUAA4IBAQCiVe6BCrbnv3elIEQWEjBx
n8i/vzxN2KaFDMEp2kcWlik7HGI/4iiDaWNkPkHL0cMM437FyhACbgsoW20Dytby
jmokpwtTVlfL7D7ERFzm29mjyHsm9Poj6ptM/TtwDRb/wNXe2RG34PLwU6oPWy5y
mpWB5vtVnG+Y1FQwA3lvgkN69DQnkRZ7U11tuecJ1p1DmPaCzERSKOaF9IPIwBd8
IgJTiuYY+xy2fOklS2nPdmdtHG4kxWCXfouESRw3xPQT47tDf8lXjqHCkugKAjaq
n8fJK74OfxarOU0zAaRZK8wTVe2aqkizEpb/ZlxYyfcVyV450qYzdISreyj0QHe7
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:53:00 2026 by rpki-client