Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214394.roa
File: AS214394.roa (raw, json)
Hash identifier: hQNdZANoKf7ugARpTXsklOiTL18l+pF/S5Z7wt+ZWwI=
Subject key identifier: 63:EA:5D:B1:E5:A6:49:26:01:87:8C:75:80:4C:32:65:05:63:08:D1
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6A8EB8302DBB4563843D2029FBF9C2CE118AEFD5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214394.roa
Signing time: Tue 21 Jul 2026 05:08:54 +0000
ROA not before: Tue 21 Jul 2026 05:03:54 +0000
ROA not after: Tue 20 Jul 2027 05:08:54 +0000
asID: 214394
IP address blocks: 2a0f:85c1:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:8e:b8:30:2d:bb:45:63:84:3d:20:29:fb:f9:c2:ce:11:8a:ef:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:54 2026 GMT
Not After : Jul 20 05:08:54 2027 GMT
Subject: CN=63EA5DB1E5A6492601878C75804C3265056308D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:15:7d:31:8d:70:78:57:93:b3:34:a6:e4:
66:14:c5:ef:5b:45:71:a4:21:a9:ec:1a:bc:fc:50:
cb:3a:e2:35:4e:08:95:d9:19:d1:9e:2c:ba:94:c3:
23:9f:cd:69:8e:0d:89:cc:91:ae:dd:e6:ba:d9:c1:
d4:4d:60:bc:8c:14:0c:a8:09:3d:d1:da:ef:78:05:
0b:fc:28:ef:00:60:5f:83:75:07:9f:42:07:a1:a3:
c0:52:56:dd:3b:03:93:68:21:b5:8f:67:2a:1e:e4:
9e:23:43:92:1d:a8:61:75:71:5b:66:3c:04:2a:4d:
92:42:9b:d3:ed:7b:a8:61:40:a5:cf:80:2a:9d:09:
91:f9:fe:2c:7b:ec:21:db:b5:33:4d:e8:62:bc:da:
0a:4c:02:37:89:a0:ac:5b:cd:6a:a4:6f:9b:db:36:
31:48:d8:fd:7a:4a:72:cc:94:20:b2:9e:45:08:95:
4f:e7:98:8c:19:dd:c3:6d:81:42:b5:1f:f7:e1:3e:
70:b1:49:eb:6e:4b:98:d5:46:41:23:89:30:06:f6:
80:61:b7:1e:12:ca:23:2b:6e:df:cd:e9:44:be:cd:
0b:49:34:9b:94:6a:2c:6b:6c:7c:e1:1e:3c:76:5d:
d1:67:d5:25:b8:48:e7:c3:28:31:5e:3f:be:37:da:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EA:5D:B1:E5:A6:49:26:01:87:8C:75:80:4C:32:65:05:63:08:D1
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:880::/48
Signature Algorithm: sha256WithRSAEncryption
0c:a3:57:d1:1b:23:94:f4:1f:cd:ef:d2:c2:48:c1:c5:13:b9:
a7:83:e8:71:e8:83:1a:2a:67:fc:41:15:4a:10:6e:3e:96:18:
9e:03:13:3c:58:52:49:0b:f6:4c:67:82:4d:9d:13:40:5c:cd:
54:03:00:bd:02:02:69:84:2a:f6:0b:a1:b1:53:dd:57:56:97:
1d:6c:36:47:ed:d3:d8:30:3e:d6:1d:15:18:d2:46:6c:42:0e:
8b:72:ff:33:be:3f:19:4e:00:1a:c9:6a:d7:d3:7b:ab:c1:09:
33:51:5b:2d:0b:14:3a:10:0f:7c:6e:80:3e:af:54:6a:e9:57:
44:33:db:e4:b4:b1:71:65:a3:d0:fc:d1:0e:a6:47:2d:54:44:
d7:b7:c2:28:68:87:6e:d3:96:0b:52:bc:94:8a:78:71:7b:7b:
b8:49:88:33:32:ca:9a:64:c5:bb:e5:eb:86:35:97:b6:b5:b6:
40:77:df:3d:8c:0d:1e:44:33:af:82:dd:d5:1d:9c:14:5f:02:
cc:fe:1d:24:14:11:34:57:4c:6f:a0:e8:9d:63:29:47:79:80:
28:be:dc:2b:98:91:88:1e:d7:76:4e:dd:18:0e:57:c4:1c:48:
96:c4:4b:d4:dc:df:7a:a1:e0:48:73:d3:e3:2c:6f:91:c8:2d:
71:e3:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:15 2026 by rpki-client