Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214372.roa
File: AS214372.roa (raw, json)
Hash identifier: l6W5P+7EGJfBRIyva3UR08qhYKppWRFQGB7KWoE55+w=
Subject key identifier: 9F:CF:5A:4E:E5:1C:A8:98:C5:3A:72:75:65:F5:C1:D5:B5:4C:5F:83
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0122CDA593744085C945CDB9E00281D044FCC48D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214372.roa
Signing time: Tue 21 Jul 2026 05:08:54 +0000
ROA not before: Tue 21 Jul 2026 05:03:54 +0000
ROA not after: Tue 20 Jul 2027 05:08:54 +0000
asID: 214372
IP address blocks: 2a0f:85c1:884::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:22:cd:a5:93:74:40:85:c9:45:cd:b9:e0:02:81:d0:44:fc:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:54 2026 GMT
Not After : Jul 20 05:08:54 2027 GMT
Subject: CN=9FCF5A4EE51CA898C53A727565F5C1D5B54C5F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:20:eb:4e:7a:c5:78:56:d1:fb:9f:42:1e:
8a:9c:47:a2:06:b3:e0:f0:e1:74:a3:e8:e4:b1:83:
1f:e9:fc:02:93:b4:09:de:db:6e:78:36:be:4b:1c:
13:2b:9b:a3:79:70:a4:bf:80:cc:1d:c6:b8:95:a3:
d4:aa:66:dc:20:38:49:78:bc:f2:9f:8f:76:a5:3e:
7e:73:ac:63:62:b5:5b:cb:a6:af:a4:fa:89:bb:c3:
41:ea:c3:c4:fb:f7:cd:e5:a8:f4:0a:a1:7b:67:03:
d0:a5:0e:76:70:23:35:76:c8:2f:9d:ab:09:e5:85:
df:da:6d:0e:38:51:bb:77:ce:fc:95:9f:40:2c:19:
0f:b1:96:7f:8b:33:7b:f3:f2:bc:ab:50:05:fb:dc:
19:00:01:2f:9a:79:ed:d1:d7:70:a9:44:28:0a:b6:
a2:b5:56:7f:69:bb:0b:8e:63:cc:bd:8a:b5:b9:ae:
56:41:9a:48:33:74:8f:34:a5:95:d9:88:2f:c3:ef:
82:63:74:07:b5:39:d0:0b:ad:52:4e:75:bd:92:2a:
95:f9:da:e2:f6:1b:d6:42:c7:2b:41:be:0a:53:23:
82:b7:ed:de:4a:f7:5c:1c:1d:06:36:be:62:d5:9a:
15:a4:a5:f1:ed:c2:ec:65:6c:7e:86:9a:33:bc:ff:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:5A:4E:E5:1C:A8:98:C5:3A:72:75:65:F5:C1:D5:B5:4C:5F:83
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214372.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:884::/48
Signature Algorithm: sha256WithRSAEncryption
ca:a7:d2:aa:ee:f9:dd:d1:16:bf:d9:79:2b:f4:77:89:77:02:
08:06:89:00:d4:4b:0c:70:8a:d3:31:51:a2:3b:ee:e6:33:0f:
8c:f7:34:42:7b:76:f3:3c:74:aa:a1:05:b7:f1:1d:41:5b:2d:
12:40:59:50:66:ee:41:40:df:81:15:73:16:11:da:41:5d:f9:
b5:a3:fa:98:71:d6:70:2d:4f:3d:de:67:a6:76:ff:9b:55:b6:
c5:24:a1:b5:45:ff:7e:f7:5b:38:b5:3f:98:71:ca:df:e4:22:
56:cf:89:80:44:34:ea:e5:bc:65:3c:6f:23:de:4a:15:8f:d2:
c8:4f:65:4d:b3:6a:89:6e:51:7c:f8:f3:15:27:fd:c7:73:72:
3f:d2:66:c8:2d:a5:05:14:99:7c:14:ff:a1:f9:66:c7:bf:f6:
6d:2f:bd:cb:9f:7b:36:f7:2e:81:c2:47:c7:80:54:c0:e7:a8:
bf:ac:17:17:47:cb:51:ee:4e:c7:36:9b:ed:94:57:3e:f0:46:
3d:f0:af:82:f2:ea:6e:50:37:9b:31:aa:1c:51:8d:62:b5:6c:
22:49:49:ca:98:7c:aa:f2:38:10:2a:3b:d3:72:95:d8:cb:40:
fb:09:3b:84:4c:0d:b4:75:e8:c2:4e:e8:a9:63:cb:75:26:c3:
e9:cc:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:06 2026 by rpki-client