Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214299.roa
File: AS214299.roa (raw, json)
Hash identifier: 8roUp1TG5Fe+L/Pjt8wsqLfQJ8itRI8wkxPIYIiZYLs=
Subject key identifier: B0:B5:A5:D1:46:8C:9E:37:B6:1B:48:A0:5B:18:26:2F:64:C4:1D:1A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5091488368AB6EEA53F776B44373377EB7E13BFF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214299.roa
Signing time: Tue 21 Jul 2026 05:08:54 +0000
ROA not before: Tue 21 Jul 2026 05:03:54 +0000
ROA not after: Tue 20 Jul 2027 05:08:54 +0000
asID: 214299
IP address blocks: 2a0f:85c1:895::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:91:48:83:68:ab:6e:ea:53:f7:76:b4:43:73:37:7e:b7:e1:3b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:54 2026 GMT
Not After : Jul 20 05:08:54 2027 GMT
Subject: CN=B0B5A5D1468C9E37B61B48A05B18262F64C41D1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:ca:12:d5:17:88:68:6c:94:06:2b:d0:52:
55:bc:57:a6:fe:92:81:8c:a0:d9:fa:2b:25:db:2d:
3b:a4:14:f1:88:ae:05:ea:82:93:2a:e1:ec:0c:73:
7b:1f:b4:35:00:88:bb:13:39:4e:c3:0a:53:45:dc:
7c:95:eb:df:7d:85:5f:12:f4:27:be:62:6a:6b:28:
eb:29:25:59:8b:db:7d:26:49:1a:e9:cc:37:5e:a3:
3e:6c:16:b9:6d:94:f1:19:6d:f4:ca:0e:3f:30:b9:
b6:7a:92:38:a1:01:b6:ec:0b:5d:e7:57:c1:51:75:
41:9c:3e:0e:f9:3b:96:9c:2d:49:77:8f:85:2e:5c:
09:9e:c9:f8:cf:76:a7:fd:6c:a4:3b:93:05:1d:9d:
11:da:cd:42:6a:da:7f:21:6c:12:f3:61:a4:95:5b:
d2:28:aa:ec:74:01:1a:44:7c:3a:e8:e4:f7:9b:84:
42:49:01:3c:77:43:60:d5:96:8c:5b:53:5d:15:20:
df:c7:55:02:c0:04:90:0e:dc:33:9c:e5:c8:9c:43:
b2:ca:06:c3:6a:ff:22:0e:33:ec:0a:f0:88:23:17:
7d:fa:22:f0:fd:d0:84:60:93:bc:b8:64:64:a0:ac:
8b:05:97:f4:d4:bd:71:6e:8d:91:dd:87:93:a9:f7:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B5:A5:D1:46:8C:9E:37:B6:1B:48:A0:5B:18:26:2F:64:C4:1D:1A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:895::/48
Signature Algorithm: sha256WithRSAEncryption
c6:60:ef:f8:89:ae:d6:d8:b0:98:d4:b9:14:9e:1e:ad:b1:a5:
f2:e8:43:8b:11:06:e6:7a:71:65:c4:2f:ad:48:41:fe:71:16:
af:c1:73:51:6e:96:bf:1e:9a:32:cc:60:43:90:4f:de:de:47:
e5:fe:46:f1:87:e6:70:23:b6:91:d6:9b:cf:4b:f8:2f:c0:4d:
74:74:65:57:92:7e:c9:54:81:95:d3:13:f9:f4:71:1f:36:e6:
3d:eb:0b:4c:44:65:7c:52:72:9a:14:9a:1b:cd:16:7a:ee:fe:
f7:a9:28:f8:62:cf:bf:bc:63:ed:f0:b4:f0:b4:f0:81:06:f8:
6f:84:b8:c5:a9:69:56:80:c0:3a:20:45:c4:94:0f:f3:a6:aa:
ff:a1:cd:41:c8:f2:bc:6e:49:47:03:db:61:f7:e6:c8:75:c2:
95:a6:ce:6c:08:6c:75:db:5a:e4:37:a1:b7:12:44:a3:0d:c0:
ba:bf:67:9f:6e:60:36:13:30:d9:f9:b1:c1:66:f2:7b:f8:02:
29:78:1c:5b:7f:d7:05:a1:d2:4c:a1:a3:84:b8:2f:38:74:86:
dc:1b:30:f9:c3:1a:62:0d:8d:6f:af:a1:5e:0a:bf:36:b3:1d:
85:b2:f4:b6:e8:19:66:b1:51:da:66:0a:ec:e6:eb:46:75:24:
fb:4a:da:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:16 2026 by rpki-client