Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214016.roa
File: AS214016.roa (raw, json)
Hash identifier: W6ti/RATgqaM3qap3QfC4fQWUbt3pI3Tlg0kD7irAq8=
Subject key identifier: A5:8C:9E:07:FF:22:3C:06:D0:C4:16:88:C3:B6:41:16:A3:E4:67:4A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 57A25D024361F44E3D32EEBAD1708DA18B42B171
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214016.roa
Signing time: Wed 14 Oct 2026 03:09:18 +0000
ROA not before: Wed 14 Oct 2026 03:04:18 +0000
ROA not after: Wed 13 Oct 2027 03:09:18 +0000
asID: 214016
IP address blocks: 2a0f:85c1:8be::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a2:5d:02:43:61:f4:4e:3d:32:ee:ba:d1:70:8d:a1:8b:42:b1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 14 03:04:18 2026 GMT
Not After : Oct 13 03:09:18 2027 GMT
Subject: CN=A58C9E07FF223C06D0C41688C3B64116A3E4674A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:f8:38:55:96:fc:e8:2b:94:72:55:ad:af:
8f:5f:01:17:bc:5d:b9:71:94:9b:73:d4:17:cc:d1:
e7:11:d9:da:20:b9:34:8a:e1:2c:50:c4:cf:4e:cf:
05:2b:a1:cc:c4:9d:59:b5:80:4a:4c:84:62:30:c2:
74:a9:da:cf:e5:29:4e:d3:e1:60:0b:90:35:5f:81:
0e:81:27:7c:64:f2:26:98:13:85:60:61:e7:09:cd:
53:ea:69:8a:7e:d2:f9:90:b3:2e:51:90:7b:d8:c5:
f6:84:42:db:18:9e:61:a2:04:2b:5b:db:be:1f:25:
94:70:00:fd:72:fa:f7:10:1d:38:f4:3d:25:af:b3:
f1:7e:2f:11:05:54:e0:1c:ed:18:14:43:47:52:3e:
3d:32:0f:a1:02:7a:50:6b:98:e8:5e:f7:c7:53:dc:
cc:9e:2d:d8:2b:71:05:22:1c:d3:af:c9:0c:4d:dc:
91:25:f3:49:b5:bc:40:b5:a3:e3:e8:7e:12:19:b2:
25:07:82:40:ff:f4:40:ff:1e:53:e6:75:7c:42:99:
b6:77:13:56:7e:61:73:c6:b0:b7:87:e6:90:07:a3:
f4:60:cf:b1:31:9a:3e:db:f5:0c:91:f9:12:0a:2d:
5f:7d:ef:22:a3:e4:7a:26:bd:00:bd:cb:c9:f0:c6:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8C:9E:07:FF:22:3C:06:D0:C4:16:88:C3:B6:41:16:A3:E4:67:4A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8be::/48
Signature Algorithm: sha256WithRSAEncryption
be:03:fe:3d:c1:94:3d:84:84:38:30:9d:dc:79:1f:d8:aa:b8:
12:5f:7f:ee:40:57:f8:b1:d2:db:b8:3a:9d:c8:d8:2f:ff:3b:
85:70:f9:34:43:38:af:d9:ae:a8:73:bf:5c:d5:54:93:d9:6c:
fb:f2:fc:ff:b2:e1:7d:7b:5a:54:b5:51:4f:f8:7d:c8:16:e5:
dd:48:09:e3:77:24:6e:bc:ca:f3:c0:11:54:d8:ec:77:1b:3c:
3a:bd:6a:f5:fa:c4:1b:f8:58:ba:2e:25:ca:49:10:d0:f4:0e:
4f:54:cc:cc:57:4a:e8:b4:71:e5:25:96:eb:8a:3b:8e:a1:d8:
a3:b4:2d:00:1a:0f:dd:e9:ff:3d:74:c7:d3:74:fe:48:70:76:
18:c1:72:e8:f8:95:99:f3:e9:d7:ed:84:95:3c:3d:34:25:0d:
4d:1a:ca:5d:d9:bf:fe:74:44:cf:2d:bc:6f:fa:7e:db:0e:10:
d7:34:1c:b3:63:58:42:4b:34:5d:de:6b:af:5a:02:8c:5c:82:
95:79:0d:35:8c:b9:91:c9:2a:94:c1:89:b1:1c:8c:c4:18:75:
d6:89:fd:dd:af:86:1f:ad:c1:11:5f:17:24:fd:1a:87:f3:c9:
1c:0c:13:43:66:c7:fa:e0:db:b1:44:dd:d1:24:cb:3d:3e:08:
8b:01:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:27:33 2026 by rpki-client