Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214199.roa
File: AS214199.roa (raw, json)
Hash identifier: Cfv2vWq1Y6dYKgfuW/3J9u1P945Cic9jKBHKaI1tYKU=
Subject key identifier: 67:8F:7C:6E:9C:B8:C8:BD:99:8D:F4:25:10:87:C4:01:C4:12:93:F4
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2AA920AA9AD6B2D04194866E70CDE984094E900B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214199.roa
Signing time: Tue 21 Jul 2026 05:08:54 +0000
ROA not before: Tue 21 Jul 2026 05:03:54 +0000
ROA not after: Tue 20 Jul 2027 05:08:54 +0000
asID: 214199
IP address blocks: 2a0f:85c1:897::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a9:20:aa:9a:d6:b2:d0:41:94:86:6e:70:cd:e9:84:09:4e:90:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:54 2026 GMT
Not After : Jul 20 05:08:54 2027 GMT
Subject: CN=678F7C6E9CB8C8BD998DF4251087C401C41293F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:1f:95:3d:d4:71:01:0d:9a:ba:32:d7:b2:
5a:2e:bf:2a:ff:5f:ef:63:1b:72:9e:72:2f:9e:8b:
02:36:7f:35:c6:37:91:b6:55:88:0b:db:26:dd:ce:
c1:61:af:60:c7:e3:34:5d:b6:58:67:cf:4c:64:c5:
0c:fb:8d:b6:dc:9e:e3:c7:62:59:8e:cd:fa:33:a6:
21:89:ac:e7:10:14:20:57:82:64:01:dc:eb:9f:4c:
00:2a:8b:a8:6f:f5:31:c6:7e:2e:98:0c:bf:55:29:
7c:a6:3a:02:42:e0:6f:f9:ac:fd:a9:cf:00:88:89:
f1:84:69:22:9f:56:75:8c:92:00:cd:3e:75:b4:ac:
ff:4b:49:d2:77:33:1d:25:c5:17:c5:e2:48:58:a2:
87:c1:76:f4:12:18:76:6f:67:b4:81:ec:3e:6f:9c:
c7:f9:de:e4:77:a9:00:9c:92:83:ae:6f:2c:71:14:
d8:0c:fe:34:83:8a:12:41:f1:39:b3:61:41:fb:2e:
2e:be:5a:5f:be:fe:ab:ed:26:73:83:bf:28:a3:55:
53:ba:3d:70:fc:45:01:2c:b1:ef:ff:73:49:6a:7f:
95:ef:26:5d:ac:2f:6b:64:d1:d5:6d:4b:1d:7b:b2:
9b:4f:70:ff:6e:4d:a3:05:cd:2c:76:62:e7:13:95:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8F:7C:6E:9C:B8:C8:BD:99:8D:F4:25:10:87:C4:01:C4:12:93:F4
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:897::/48
Signature Algorithm: sha256WithRSAEncryption
9b:41:ac:61:42:0c:da:24:b5:00:20:a2:1f:52:1d:da:ee:b3:
8e:4e:ff:64:0d:c7:72:da:62:8d:7e:2b:e5:9a:c7:20:d9:42:
76:6c:98:a1:7a:e6:35:c0:c1:87:aa:48:15:bc:48:a7:6d:f6:
98:cc:d9:0a:0f:ec:29:e8:a2:d5:88:ad:a5:f2:52:73:90:54:
01:42:ad:6b:36:e3:76:52:f3:87:5f:c4:57:57:62:35:36:14:
37:47:92:de:41:87:c4:0a:8d:2e:df:d2:83:27:19:13:5e:57:
3d:b8:ed:07:e5:22:f8:f0:da:c2:26:82:bd:93:f7:47:05:16:
4f:86:d1:47:44:28:32:5e:01:bf:9f:a1:72:c4:1c:fc:e7:d5:
5f:2a:92:e3:47:18:6f:ba:65:30:ca:f7:53:fb:11:00:05:65:
da:be:98:a5:06:3f:16:42:e1:64:43:40:d4:cb:41:cb:2a:04:
24:fd:4f:76:8c:e4:a2:b8:4a:b4:ab:88:20:43:67:9b:0f:0b:
b1:1a:07:56:25:39:25:26:d2:4a:d8:61:6a:7b:cd:8b:63:25:
ef:18:d5:51:40:c0:e7:11:01:ba:8e:14:7a:9e:e6:c5:bd:ae:
5a:1a:c7:87:3c:78:31:7b:09:5e:a9:5b:87:e1:eb:7a:b7:f1:
94:d3:3f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:47 2026 by rpki-client