Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214377.roa
File: AS214377.roa (raw, json)
Hash identifier: C/a6f4/0+OVpvBadBAVd6Ozi3gOz76nlcBNNfwMjnPs=
Subject key identifier: 7D:EA:26:CF:E1:D0:AE:19:E2:59:93:3C:3C:D2:95:95:B9:C5:07:55
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2FC45AA2ADD27E4DD24EE8DE794464E20522133F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214377.roa
Signing time: Fri 26 Jun 2026 08:08:38 +0000
ROA not before: Fri 26 Jun 2026 08:03:38 +0000
ROA not after: Fri 25 Jun 2027 08:08:38 +0000
asID: 214377
IP address blocks: 2a0f:85c1:844::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c4:5a:a2:ad:d2:7e:4d:d2:4e:e8:de:79:44:64:e2:05:22:13:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:38 2026 GMT
Not After : Jun 25 08:08:38 2027 GMT
Subject: CN=7DEA26CFE1D0AE19E259933C3CD29595B9C50755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:e3:12:df:d6:2d:96:d7:f1:e2:e0:dc:16:
c7:c4:0a:cb:18:17:73:1f:af:18:24:b4:88:e7:6a:
a0:47:19:92:3d:54:33:08:fb:0e:c3:a4:f4:6b:33:
77:fe:55:ff:c7:1c:f2:1d:a9:ff:4b:34:3a:d9:2e:
e0:e6:a8:db:9a:03:f7:9f:1f:91:88:f8:a6:4c:89:
c9:42:60:c9:3e:0b:09:cb:bd:35:ee:ff:39:51:85:
41:b5:25:fb:4c:eb:1c:ef:ef:96:29:ae:b1:b6:a2:
44:69:24:ca:3b:7c:48:c7:03:78:af:90:79:b1:a5:
21:d5:c1:46:2c:93:b3:13:27:d4:bf:c7:8a:72:46:
cb:8a:c8:86:99:e6:28:82:d5:c3:c9:32:79:f6:44:
dc:7d:5f:fe:ee:19:ab:f8:e5:e8:91:0d:b9:0d:af:
01:7b:b9:05:51:d9:86:9a:d5:56:71:2a:68:3d:52:
d2:dd:44:ba:71:45:79:0f:06:d6:fe:bb:13:26:91:
ca:19:f2:d4:da:87:29:3f:a0:94:f1:b1:47:e9:e0:
83:0c:8b:2c:78:80:6b:6b:33:09:94:65:d5:bb:a8:
89:99:d9:fd:b1:a4:be:cf:86:0e:8e:61:ce:c6:f1:
4a:02:45:a5:a2:db:b0:fb:83:aa:4c:15:88:25:20:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EA:26:CF:E1:D0:AE:19:E2:59:93:3C:3C:D2:95:95:B9:C5:07:55
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214377.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:844::/48
Signature Algorithm: sha256WithRSAEncryption
b1:d7:44:cd:56:e8:62:bc:4b:62:6a:5a:23:3e:9a:5a:12:64:
63:d7:88:22:8a:4b:b1:e4:d8:c5:b7:10:36:9e:e6:c1:24:ed:
9d:3b:0c:89:f4:cd:a7:94:dd:ed:f7:f5:a3:2d:4e:6c:79:5d:
57:b1:96:54:e4:86:0e:d5:9a:52:ae:91:8d:71:41:b1:de:ed:
68:02:3b:16:c2:ac:1d:ca:17:2c:78:1c:41:f0:7f:d0:ca:00:
18:6e:39:79:42:f8:8d:ac:f9:49:46:41:63:91:62:34:7f:ad:
13:ac:44:a6:db:31:a8:7c:e0:17:a9:f4:28:bc:69:67:b8:75:
c0:3d:d5:3a:14:b4:42:b5:36:5a:63:19:00:4b:3a:95:ca:09:
9f:17:e0:ad:00:8d:81:c0:74:51:09:7e:36:e1:9d:b2:28:ee:
38:fa:ce:63:17:ba:19:73:9e:54:72:7f:94:55:73:df:86:5e:
bd:2f:4f:47:31:25:c8:57:36:fb:bf:a2:81:94:0c:28:ab:d1:
92:80:a4:30:4e:f3:04:36:1c:43:db:b3:ce:5c:c2:db:08:a6:
dd:13:47:05:2d:d9:d5:69:34:3e:62:58:29:0b:5d:99:f3:5b:
e5:84:e6:cd:e5:3e:da:c5:92:f0:f6:16:23:51:ad:4f:85:29:
00:43:d7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:06 2026 by rpki-client