Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214084.roa
File: AS214084.roa (raw, json)
Hash identifier: NrepfSR8cTKudNKhBk3GnXMsNdlUNsex7QDMz2TMpjw=
Subject key identifier: 94:EF:E0:CA:4A:9D:C5:13:54:6B:A9:05:0E:A3:9D:28:08:10:84:52
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1584980F5DD8FAE8437E08C346DF899A811FBE7D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214084.roa
Signing time: Wed 19 Aug 2026 03:09:06 +0000
ROA not before: Wed 19 Aug 2026 03:04:06 +0000
ROA not after: Wed 18 Aug 2027 03:09:06 +0000
asID: 214084
IP address blocks: 2a0f:85c1:8b7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:84:98:0f:5d:d8:fa:e8:43:7e:08:c3:46:df:89:9a:81:1f:be:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 03:04:06 2026 GMT
Not After : Aug 18 03:09:06 2027 GMT
Subject: CN=94EFE0CA4A9DC513546BA9050EA39D2808108452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:de:40:9d:96:9a:fd:9e:59:49:de:4f:53:
33:d3:7e:e2:46:37:b1:d1:e6:61:90:8d:22:04:e2:
06:c7:f3:db:9d:ec:ab:f9:1a:3b:14:44:fe:e1:24:
10:45:26:76:58:ef:34:73:82:6f:d1:74:1f:bc:36:
b5:ed:3f:52:d6:e1:61:ea:24:b7:14:75:de:cb:20:
54:ef:b5:67:eb:c8:61:0e:d3:5f:94:a0:fd:b6:fa:
27:5c:84:29:9b:86:17:7c:66:b2:be:38:32:0b:14:
e0:e0:ad:b8:86:e2:de:74:31:ee:56:fd:f5:64:ac:
7e:05:1b:ec:90:e2:b4:5f:32:53:9b:1a:af:f2:17:
53:6c:24:2e:02:fc:18:95:ad:2d:92:e4:0a:4e:b0:
92:00:29:26:bd:bf:cf:aa:4b:01:4e:95:81:c1:e4:
a9:f4:5c:35:19:ff:b7:9d:d2:d8:26:e2:83:75:16:
d5:dd:3d:ac:1f:e4:8a:94:ff:9f:80:61:55:fe:5a:
4f:2c:63:7e:17:29:2c:88:0b:52:12:c9:fc:bb:88:
bd:c8:ce:a8:61:62:f4:d7:3e:2b:56:a9:c2:41:fc:
34:05:e3:2d:39:b1:3c:86:a8:93:1d:bf:df:50:e9:
41:91:00:c8:74:ef:66:07:63:97:ec:96:6d:f1:97:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:E0:CA:4A:9D:C5:13:54:6B:A9:05:0E:A3:9D:28:08:10:84:52
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214084.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8b7::/48
Signature Algorithm: sha256WithRSAEncryption
c3:c0:f3:40:71:74:45:9d:4f:e3:9e:42:0d:ff:50:04:fa:4b:
5c:b1:86:d0:77:f1:f5:89:e5:5e:08:28:2d:88:18:39:07:26:
15:10:24:43:39:bb:ee:c3:22:e9:23:6a:b1:73:cd:bf:a2:24:
ea:a9:02:9d:9c:b7:80:eb:cb:8f:14:55:79:c6:ed:75:09:a1:
0a:97:6b:65:c1:fb:65:28:87:96:ca:a4:80:95:0d:e2:1d:cd:
b9:ed:86:00:4b:b1:33:5d:58:85:b2:2b:d2:b9:67:03:56:8d:
12:be:a7:a9:d7:7a:ab:c4:8f:e2:e9:f3:e0:5b:1d:26:55:5c:
80:c7:5a:5f:06:1a:44:fe:62:d0:b1:22:17:68:25:e9:a3:20:
ba:ba:4a:4d:48:78:c1:7d:85:4e:6e:e3:19:75:b6:76:1c:54:
db:50:7b:28:d6:ce:79:46:7b:76:a6:0f:90:00:1d:f2:cf:27:
a7:62:fb:68:fa:35:e6:06:6a:3b:6f:58:f4:53:82:52:22:3a:
e9:a7:8a:d3:71:1b:56:f6:94:e2:81:ea:2c:dc:1b:9c:5c:cd:
c5:2f:39:28:5a:0c:ac:77:8a:56:75:33:fa:70:72:da:94:11:
55:e7:ad:07:2f:36:95:c4:69:5c:b1:c7:5f:13:e6:97:1f:63:
1f:7b:ec:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:59:28 2026 by rpki-client