Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214337.roa
File: AS214337.roa (raw, json)
Hash identifier: 9U4cAebVY8iFO2uojT8H7rPeTzv1ovF/wl7Qnsg2thI=
Subject key identifier: 3B:38:B8:4E:0D:8C:96:C0:C0:C6:FC:EA:E7:3A:56:CF:52:7A:E0:77
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0160B87BCDDC044A9A6EBD698F6319B16E2D77BD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214337.roa
Signing time: Mon 06 Jul 2026 16:08:49 +0000
ROA not before: Mon 06 Jul 2026 16:03:49 +0000
ROA not after: Mon 05 Jul 2027 16:08:49 +0000
asID: 214337
IP address blocks: 2a0f:85c1:88e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:60:b8:7b:cd:dc:04:4a:9a:6e:bd:69:8f:63:19:b1:6e:2d:77:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 6 16:03:49 2026 GMT
Not After : Jul 5 16:08:49 2027 GMT
Subject: CN=3B38B84E0D8C96C0C0C6FCEAE73A56CF527AE077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:41:4b:a0:03:72:bc:9a:d0:13:ab:ed:90:
10:31:88:4d:8f:3e:43:37:f7:c9:d8:46:3f:b7:4e:
1d:d1:06:88:29:3f:73:74:f2:57:3f:c6:e3:26:e0:
56:3b:ea:a3:0e:26:b7:73:1c:ca:6d:dd:1f:bd:da:
17:a5:37:c2:b2:93:fe:77:67:dc:d3:29:ba:61:42:
b4:37:62:8f:6d:06:d4:08:42:a3:e2:62:57:f1:b4:
fa:a1:70:c7:a5:0e:3a:19:f9:b6:6e:3e:79:6b:c9:
4d:e6:1c:5a:8d:3b:a6:46:29:46:e6:2a:38:16:f2:
f8:5c:11:a2:f5:c1:6e:8a:73:03:80:ef:af:b4:3f:
3e:d1:9f:43:48:64:3e:90:f5:eb:99:a0:66:a9:7d:
64:37:81:be:46:6e:35:57:0b:02:c5:42:b8:bd:c0:
0a:17:dc:ca:a4:99:b4:d0:1c:02:9d:60:3f:64:6f:
bf:ff:5d:cc:82:ce:90:65:97:cf:8e:68:84:79:12:
db:0a:cb:bc:5d:cc:4c:1e:81:fc:86:89:93:e6:7f:
6c:8d:00:60:37:22:0a:84:b6:b4:09:f2:d0:05:a7:
bc:d5:cb:01:0b:6d:8c:2b:9e:40:2a:e1:a9:76:4f:
bc:af:48:b9:67:d6:ca:00:f4:a4:c7:d6:0a:49:31:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:B8:4E:0D:8C:96:C0:C0:C6:FC:EA:E7:3A:56:CF:52:7A:E0:77
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:88e::/48
Signature Algorithm: sha256WithRSAEncryption
d8:64:92:b5:f0:42:d4:7d:67:05:bb:25:b7:55:74:6f:95:86:
07:2d:3d:82:b6:03:d6:26:9d:fa:07:45:f5:05:50:63:d1:d6:
57:6f:e3:98:88:58:b2:74:ef:e1:63:9d:fb:f4:a2:a1:42:15:
0c:b7:62:96:55:8e:5c:bc:04:4b:a6:a7:f3:a9:cc:82:f8:0a:
6b:6b:80:30:e3:56:fc:25:38:0c:e5:d2:d9:df:7e:af:6c:55:
90:b9:f1:a9:ca:7f:16:1f:2f:38:9b:1a:ab:18:81:48:1f:ee:
7b:93:0a:30:76:51:63:01:0b:c0:fb:78:4e:69:7c:74:e8:90:
3d:93:58:96:60:0a:02:f8:90:35:79:64:5f:05:50:bd:7f:2e:
ef:3a:3a:6c:c4:81:5d:c0:82:1f:58:64:83:9c:f1:bf:32:47:
c2:12:df:ec:e4:06:91:65:37:fb:0c:f5:bf:ae:0e:0b:fb:0c:
fa:4a:dc:fe:cc:0a:64:8d:70:05:81:05:54:85:ab:ee:cf:be:
b1:6c:20:29:65:37:6a:dd:d9:6c:56:b7:a7:3a:61:ec:82:36:
f7:4e:97:45:bd:c3:00:f5:ef:a3:c1:04:d4:cd:f8:00:29:f0:
8a:f2:60:45:72:c9:2e:7f:1e:d9:22:73:81:ec:4a:fd:1f:8c:
0f:cd:1e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:25 2026 by rpki-client