Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214340.roa
File: AS214340.roa (raw, json)
Hash identifier: k75q3v5mwj53fIb1Ob93GbSFfbi3M6gXH5n9b5cMF+M=
Subject key identifier: B8:CC:F8:50:EA:6D:46:45:4B:31:D8:83:B3:FB:9B:47:35:64:A1:32
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 27D53BC0783D48E145AA9E5FEE0687491FA5550A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214340.roa
Signing time: Fri 26 Jun 2026 08:08:46 +0000
ROA not before: Fri 26 Jun 2026 08:03:46 +0000
ROA not after: Fri 25 Jun 2027 08:08:46 +0000
asID: 214340
IP address blocks: 2a0f:85c1:889::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d5:3b:c0:78:3d:48:e1:45:aa:9e:5f:ee:06:87:49:1f:a5:55:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:46 2026 GMT
Not After : Jun 25 08:08:46 2027 GMT
Subject: CN=B8CCF850EA6D46454B31D883B3FB9B473564A132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:f1:ad:d3:10:54:ac:b8:69:d8:c8:4d:0b:
6e:d3:67:51:33:31:19:36:42:d9:99:bc:7e:3d:b3:
04:e0:9d:10:74:6d:38:bc:14:3d:c3:39:8c:72:6d:
49:45:ae:42:5b:86:5a:1e:2f:08:10:0b:68:72:90:
be:a5:5c:83:31:50:57:de:6c:f8:a7:c6:5f:3f:0c:
d9:36:e7:e4:90:46:e8:d1:4e:be:0e:4d:47:f8:31:
95:88:dc:4e:51:f6:c0:36:06:2f:48:6b:78:c5:49:
9c:c6:4d:e7:91:02:b2:1c:65:90:4d:92:a4:bc:23:
21:be:31:68:f2:35:38:6b:3d:1d:b2:98:bd:d5:45:
6d:5d:5b:e0:de:8f:d9:b4:84:2b:c3:d6:39:27:15:
8c:3b:0b:5b:9e:93:1e:be:e7:63:25:0c:ce:82:d3:
1a:99:9f:87:2d:76:88:2b:ab:06:a2:1b:22:60:ce:
67:08:ce:b5:76:71:8d:b5:1a:4e:71:b0:45:e1:6a:
6f:bf:ca:46:8c:00:ab:49:59:79:4d:dd:dc:8d:47:
26:69:09:6b:dd:5a:14:2c:79:2c:f4:f1:b8:04:d5:
97:ab:f2:b5:bb:4f:7b:c1:fc:67:55:ab:71:0e:00:
a9:60:0e:e5:0b:1e:6a:4c:5f:55:a3:f0:71:5a:83:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:F8:50:EA:6D:46:45:4B:31:D8:83:B3:FB:9B:47:35:64:A1:32
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:889::/48
Signature Algorithm: sha256WithRSAEncryption
6a:c3:83:7f:e6:81:e8:5a:ac:2d:a0:77:93:17:2e:a2:cb:38:
c4:af:1d:fb:8a:bd:8a:f5:60:f7:0d:16:06:c6:63:48:bd:27:
94:6d:68:78:a8:1f:69:75:b1:6c:10:1c:ab:0c:62:dc:c7:82:
eb:be:50:70:f7:c1:cd:44:fc:f8:0a:59:d3:35:e7:a8:bd:7d:
5b:f6:3f:bd:18:c1:bd:63:bc:2e:6f:96:9e:c9:35:de:87:4f:
d0:95:34:a7:d0:b8:4b:5c:79:b3:b1:7d:70:0d:ba:bd:2e:55:
70:5d:81:b2:76:ab:21:10:9a:13:bf:e6:78:5a:3c:e4:9d:26:
a3:e2:d0:59:1b:cf:72:fd:3b:8d:36:c7:ed:3b:68:5e:f5:4f:
fd:d2:31:2c:83:8f:52:34:82:19:1c:23:6a:aa:05:84:35:9a:
c3:95:6c:09:35:33:41:3f:a5:ac:db:c2:69:8e:74:d6:63:05:
1a:ca:ca:74:dc:9b:de:59:93:31:16:f4:cc:16:60:ef:fd:5f:
69:1d:a7:c9:26:3a:cf:9e:28:ea:4c:b3:ae:f1:62:34:d1:1d:
aa:d3:2e:32:b3:b9:7b:94:59:97:5a:8a:1d:18:db:06:6f:a1:
92:fe:99:eb:8f:40:bf:28:35:4c:51:b9:7c:b3:93:02:b2:9f:
44:cc:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:37 2026 by rpki-client