Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214028.roa
File: AS214028.roa (raw, json)
Hash identifier: 4uEoNn3PKpEmNWLW99aB5h5FwE5yLcxaF7sHslaG994=
Subject key identifier: 1D:DC:EA:D2:01:55:C7:B5:60:B0:DF:8A:F5:B7:77:23:1E:19:4C:57
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0A824D7B3F8D0B48901AA41368E33A40AD197B6D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214028.roa
Signing time: Wed 19 Aug 2026 03:09:05 +0000
ROA not before: Wed 19 Aug 2026 03:04:05 +0000
ROA not after: Wed 18 Aug 2027 03:09:05 +0000
asID: 214028
IP address blocks: 2a0f:85c1:8b9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:82:4d:7b:3f:8d:0b:48:90:1a:a4:13:68:e3:3a:40:ad:19:7b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 03:04:05 2026 GMT
Not After : Aug 18 03:09:05 2027 GMT
Subject: CN=1DDCEAD20155C7B560B0DF8AF5B777231E194C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:82:8c:ae:93:a0:ba:cf:c7:8d:6b:9b:c9:
57:f5:b4:03:8a:6e:64:e1:6e:c9:8c:4c:4d:ff:c0:
7a:68:cc:dd:19:e2:ce:07:b9:28:38:e6:54:bc:3a:
6d:45:e7:2f:d6:61:01:d5:4c:d5:f6:aa:4b:d3:d3:
d5:10:35:42:26:3f:b8:c4:cc:a2:72:61:3a:04:55:
fd:29:2d:83:22:0c:ed:79:30:e6:18:28:83:fa:60:
68:70:f4:9c:d2:08:05:52:ae:4b:7f:a5:41:de:ad:
52:14:56:2f:38:b1:55:28:4f:3d:9c:24:93:4f:86:
59:5a:ed:01:be:3f:c7:2d:87:68:ef:6e:a8:51:cc:
4b:3c:7a:b7:ae:76:9e:cc:9e:fc:38:ef:73:f9:bf:
a9:11:dc:7c:45:bb:26:c5:87:5e:59:0d:05:fd:63:
6c:8f:0d:4c:60:c1:5a:99:86:a4:11:64:f1:40:32:
9f:15:99:cb:c1:de:5b:24:b5:da:f5:3d:2f:63:f6:
83:06:15:a6:39:ea:c6:be:54:0d:6e:11:77:9e:60:
4b:1a:c2:27:46:1a:76:0d:ca:9a:20:19:30:dc:4b:
ed:cf:1e:b6:d6:27:d4:7a:ff:f6:8d:ad:df:52:ca:
cd:49:35:85:59:b8:fa:5a:00:fc:53:60:b9:b0:e1:
10:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DC:EA:D2:01:55:C7:B5:60:B0:DF:8A:F5:B7:77:23:1E:19:4C:57
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214028.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8b9::/48
Signature Algorithm: sha256WithRSAEncryption
8c:76:66:8c:c1:e5:4c:ca:1a:ec:b1:8b:9a:dc:05:bb:73:37:
5b:fa:40:f2:33:39:1d:73:5b:e2:d2:f0:23:7b:3a:62:65:51:
16:d4:01:a2:ed:97:3a:17:c5:07:7f:d9:e5:34:40:ba:3d:03:
f2:0e:3e:3f:27:e0:d0:a0:eb:8d:4e:82:57:6a:67:dc:4c:dc:
1f:76:37:bc:c8:24:dc:3e:32:84:6e:1f:1b:c7:1a:7a:cc:d2:
90:a6:58:2a:7b:13:67:f4:e7:9c:55:3b:98:b6:2b:b4:a4:04:
05:32:7b:66:28:ea:8b:ea:02:13:63:79:52:cd:8e:e9:5b:e8:
09:34:c4:37:ba:57:7d:a0:34:79:59:53:af:6e:3c:57:87:28:
b3:11:f0:49:6e:a9:8f:d7:ce:18:2d:02:66:7f:53:5d:21:12:
f0:ed:a5:0e:11:f0:e5:a6:b3:2f:35:f7:15:f8:de:96:61:b6:
e1:35:4b:06:cf:6f:7c:fc:49:e3:6c:a9:0e:80:5f:94:72:4d:
83:13:c5:37:65:b3:6f:2b:e8:c7:12:58:ce:08:6d:c1:cc:59:
5f:f7:53:50:7f:8d:9c:66:6c:d6:9e:fd:90:f5:e0:11:ee:5a:
79:f6:e2:95:16:8c:2f:46:51:52:8f:ad:2c:01:58:ac:2f:35:
66:13:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:50 2026 by rpki-client