Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214312.roa
File: AS214312.roa (raw, json)
Hash identifier: ecACTyQhnM2Ap6yRZxKBXTS0r5UDA4zEkMfBOUreDVs=
Subject key identifier: F8:E1:41:10:D0:01:7D:A7:F5:26:51:93:AE:8F:8D:55:B2:7B:81:A9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5519F4053E8D0ED1ECCC2E4F9E5E41DBA3B2F1A6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214312.roa
Signing time: Tue 21 Jul 2026 05:08:55 +0000
ROA not before: Tue 21 Jul 2026 05:03:55 +0000
ROA not after: Tue 20 Jul 2027 05:08:55 +0000
asID: 214312
IP address blocks: 2a0f:85c1:892::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:19:f4:05:3e:8d:0e:d1:ec:cc:2e:4f:9e:5e:41:db:a3:b2:f1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:55 2026 GMT
Not After : Jul 20 05:08:55 2027 GMT
Subject: CN=F8E14110D0017DA7F5265193AE8F8D55B27B81A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:d4:d8:87:e7:41:82:fd:e0:dc:a7:ff:60:
28:4a:33:79:7d:0b:f6:b8:d6:0e:8c:bf:5c:ab:6b:
45:32:97:38:fc:92:8d:ac:9f:69:93:00:a5:d5:b4:
48:20:97:92:74:5b:46:34:12:af:f8:9b:f4:0d:d5:
47:4c:06:72:96:fd:c8:fb:9b:82:25:d9:17:ed:2a:
07:c2:48:f7:8d:55:c3:38:8f:23:1e:0c:c5:02:4d:
f6:47:06:11:81:6f:70:a2:7a:1a:d8:6b:dc:8b:9e:
1c:94:7a:02:02:ad:51:38:2a:3d:7e:d4:48:f9:2c:
6f:1c:c3:8b:12:ff:fa:4e:88:6b:b3:75:6b:49:42:
dc:55:97:5a:19:5f:11:54:2a:67:61:41:d4:43:5f:
cb:66:4c:a3:c2:08:ce:7d:68:28:38:05:e2:eb:ec:
e4:7d:b5:09:bc:69:d0:ab:35:ed:4f:7f:2f:39:e3:
ec:60:fc:c0:7d:d1:1d:53:bd:05:46:7f:98:56:fe:
bd:52:0b:f3:8c:d1:cf:f7:84:92:9c:dd:ac:a6:9e:
09:25:65:79:e2:c9:10:4a:70:52:20:59:1a:4a:fa:
28:3f:7c:cc:2b:57:6f:1b:cc:fa:ee:98:1c:94:1c:
37:c3:2e:7f:76:a8:33:1a:2f:78:93:63:82:27:09:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E1:41:10:D0:01:7D:A7:F5:26:51:93:AE:8F:8D:55:B2:7B:81:A9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:892::/48
Signature Algorithm: sha256WithRSAEncryption
cb:5e:7b:4a:9c:68:27:4b:70:9a:48:46:ed:81:eb:9b:ca:dc:
b5:90:c3:d6:5e:8e:81:4a:9c:9a:32:ea:cc:cb:c6:49:d5:d4:
2a:38:16:11:fd:7d:6f:45:00:57:1b:1e:ac:1c:03:b9:1d:a8:
cb:94:77:79:e7:c2:fc:06:fe:0e:c3:ad:24:fc:0d:3f:3b:ba:
8d:78:93:a1:27:e8:ce:09:3f:e4:70:bd:9d:54:93:78:4c:88:
3f:11:23:de:86:6f:ad:01:a6:b1:98:42:af:0e:fb:cf:b7:de:
f8:ed:74:4b:b3:c9:d4:f4:0b:d0:14:66:f9:73:14:a1:1c:bd:
d1:e5:0d:60:7d:b9:bf:f5:2d:31:15:40:39:48:cc:30:48:67:
82:80:a2:19:1d:79:90:ea:9a:c5:ef:e2:1a:63:87:45:a4:ed:
37:12:f5:ee:3e:d7:b1:cd:24:16:d8:88:44:27:8a:44:af:3c:
50:af:bb:88:ca:ab:1b:bd:17:02:1a:a1:1f:a0:85:2a:8d:72:
42:a8:3f:5c:39:09:13:6a:6d:62:a6:36:d1:89:61:33:6a:75:
ed:a8:c7:33:71:e8:f4:d3:a0:51:27:51:a2:3b:bb:27:78:47:
26:2d:5b:9b:a1:92:9e:fc:34:91:c6:c4:aa:0e:d5:70:77:9c:
1d:82:3e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:43 2026 by rpki-client