Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214374.roa
File: AS214374.roa (raw, json)
Hash identifier: R0IlZwwZvidz9flNr3H5/XBZVU2MW7fz3cI11lWgxxw=
Subject key identifier: 89:F4:ED:74:CD:89:1D:A0:A6:36:C2:EE:95:07:5D:99:D5:E8:27:E2
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6CE2C4431243CFD868BFDA13CD67F315EB71E96F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214374.roa
Signing time: Fri 26 Jun 2026 08:08:47 +0000
ROA not before: Fri 26 Jun 2026 08:03:47 +0000
ROA not after: Fri 25 Jun 2027 08:08:47 +0000
asID: 214374
IP address blocks: 2a0f:85c1:883::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e2:c4:43:12:43:cf:d8:68:bf:da:13:cd:67:f3:15:eb:71:e9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:47 2026 GMT
Not After : Jun 25 08:08:47 2027 GMT
Subject: CN=89F4ED74CD891DA0A636C2EE95075D99D5E827E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:fa:2d:af:c5:e7:f1:25:bc:c6:fe:3c:86:
21:7f:df:e8:75:46:eb:ff:3e:03:11:00:89:83:06:
e2:43:02:00:3a:9c:0b:37:11:f0:8b:0a:83:6a:07:
74:65:7a:65:a3:1b:ea:02:07:29:6e:13:a1:fc:f9:
35:c8:fa:1d:a4:4c:3d:31:f2:64:c9:de:c4:f7:7f:
b6:f0:eb:7f:2f:58:31:d7:ac:40:67:c4:55:88:01:
33:37:83:4a:ee:2d:3f:15:05:2f:e6:21:26:80:0b:
8f:52:1a:70:3b:09:52:45:d1:a8:a1:39:a5:f5:e2:
fb:bd:ec:8b:bc:9d:3a:dc:a2:73:e2:db:43:12:cc:
77:26:c4:c1:94:b3:4e:54:92:1c:f5:6a:64:f9:fa:
0b:c5:36:f3:e5:83:0b:c0:40:38:d7:22:99:78:62:
1d:da:f0:d3:57:0b:8b:22:88:96:58:1a:97:56:92:
7b:45:ef:6b:f8:ff:fc:ac:f3:31:86:35:65:19:4b:
32:67:df:4c:48:bf:40:21:dc:f3:f0:c9:ea:76:87:
2e:d7:c2:01:3b:b0:a6:a4:5e:e5:e3:ff:14:5c:9e:
4c:64:49:9b:99:94:d0:8e:b5:d1:92:25:db:be:9f:
b8:08:97:a5:2e:b2:d8:9c:2b:ad:7d:11:3d:00:9d:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:ED:74:CD:89:1D:A0:A6:36:C2:EE:95:07:5D:99:D5:E8:27:E2
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:883::/48
Signature Algorithm: sha256WithRSAEncryption
3a:e2:8d:12:dc:ea:73:ea:78:1e:41:94:f9:65:72:09:cf:50:
44:98:a0:db:5a:f7:1e:e0:cb:0b:bf:b1:7e:fc:be:be:d6:fc:
0f:b9:c5:b9:a9:b6:4e:3d:ec:86:52:ed:81:a4:ab:3e:f9:c0:
07:f8:0f:2e:1b:a2:88:8c:9a:b5:b3:c9:bd:d2:9d:74:ce:3d:
88:22:2a:7f:81:4a:01:17:f2:17:7c:de:bf:5f:5b:09:e6:11:
d8:55:1f:30:98:ad:c3:cc:7a:82:d1:7c:99:91:5d:2a:77:0f:
54:8b:a3:15:26:fc:4f:79:4b:42:cc:1e:9f:fb:80:87:15:21:
51:86:bc:69:6c:29:56:b5:4f:72:dc:24:1f:1a:98:b1:81:75:
68:2f:c9:be:45:33:3d:38:43:17:34:82:38:2d:a4:79:84:52:
43:a7:da:19:66:87:ce:62:11:6a:8c:00:31:8c:dd:5b:6f:8a:
65:81:0a:c5:28:4a:91:89:6d:46:36:0e:f2:3d:77:9d:97:20:
3d:fd:b5:23:9e:d6:e2:9b:05:1e:73:16:72:a0:26:28:05:1a:
0d:3e:28:7d:f7:2c:2b:5f:6e:f4:9d:10:3c:c8:1e:c0:d6:08:
7e:61:88:1f:0b:93:90:6c:6e:ec:67:8c:be:c5:d3:2a:14:f8:
5f:30:c4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:05 2026 by rpki-client