Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214404.roa
File: AS214404.roa (raw, json)
Hash identifier: w6ABKNDprDIKFKfA+HJGnt5CIgtHefVh4NqfTbj9SYg=
Subject key identifier: 58:1F:D3:04:F1:2E:08:1C:0B:DB:EA:01:7A:11:20:B8:93:9F:26:DC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0FACF50951A81CC88D71F760C3F150697DE6518C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214404.roa
Signing time: Fri 26 Jun 2026 08:08:37 +0000
ROA not before: Fri 26 Jun 2026 08:03:37 +0000
ROA not after: Fri 25 Jun 2027 08:08:37 +0000
asID: 214404
IP address blocks: 2a0f:85c1:84c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ac:f5:09:51:a8:1c:c8:8d:71:f7:60:c3:f1:50:69:7d:e6:51:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:37 2026 GMT
Not After : Jun 25 08:08:37 2027 GMT
Subject: CN=581FD304F12E081C0BDBEA017A1120B8939F26DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:d3:ac:fb:91:38:b4:8c:18:c3:26:77:e4:
09:7c:31:37:51:b8:d1:9b:f3:7b:ea:6f:8e:b9:25:
63:9a:ba:46:fe:65:ff:ed:dc:c9:c5:04:5f:47:33:
22:c8:8a:b9:d7:a9:44:8a:e3:b0:a9:df:6d:f5:82:
62:39:45:e2:a1:e1:d9:c4:a6:b7:29:18:3e:32:2b:
30:fa:85:7d:23:4e:a1:f9:fb:a5:f7:d7:f9:6c:68:
73:c0:ec:95:5d:94:50:a3:f6:cd:e8:4c:49:97:7a:
19:9f:14:2e:3b:80:c6:39:43:4d:70:81:ed:a5:14:
ca:8e:80:07:b5:65:36:0c:41:af:c8:53:48:19:a1:
63:05:ff:66:47:eb:3c:85:e1:fc:cf:23:20:ab:89:
ce:e2:02:a9:f3:62:e5:f6:f8:9b:01:7e:5b:bc:1b:
d3:ab:6d:b2:4a:0d:bb:34:a5:fd:57:ce:01:d9:0d:
00:fa:6c:fc:59:0c:a1:6c:07:81:ce:97:77:ef:c2:
00:ae:17:47:e9:74:2d:a8:50:8d:90:d1:2e:6b:e2:
c3:58:cb:72:e7:03:dc:9c:35:03:0b:f5:84:fd:3b:
ae:10:50:61:c7:76:be:ec:92:03:55:9b:87:0a:30:
ff:6f:be:47:d3:80:3b:b9:99:1a:e0:52:d0:1c:be:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:D3:04:F1:2E:08:1C:0B:DB:EA:01:7A:11:20:B8:93:9F:26:DC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:84c::/48
Signature Algorithm: sha256WithRSAEncryption
44:54:9e:59:80:af:2b:a2:c4:09:6c:45:b1:be:ad:11:a8:f4:
32:07:97:cd:40:56:eb:f3:fb:00:a8:8d:b6:da:8c:dc:1f:56:
a8:e6:86:2b:70:87:e7:74:bd:c2:1c:f0:a6:dd:52:6c:2a:5a:
28:2b:a7:24:8f:a7:f3:0e:94:1c:5e:b7:4a:1f:82:81:df:9f:
e8:a9:13:87:0b:fb:c0:3f:fc:a9:a2:50:d5:be:bd:c8:c9:4d:
81:c9:bb:c4:46:a2:6a:07:e4:e1:85:a5:f1:5a:74:a2:ca:14:
02:bb:20:89:35:21:a9:54:fe:2f:0d:2f:99:a5:12:ed:64:26:
74:99:e3:b9:0f:ed:eb:78:e2:3b:15:07:3d:3e:a5:8a:8b:6d:
30:c2:05:e1:2c:c9:4c:63:c1:2d:94:30:a9:72:af:55:4a:79:
5a:2c:ef:1e:1c:29:00:63:52:88:a9:07:ce:ce:ba:32:47:74:
8e:da:85:ba:43:36:a5:de:a8:93:de:f3:c2:d3:de:d1:3a:98:
bc:25:1e:75:d4:cb:f6:56:c7:58:22:cc:7e:4e:b6:9a:c4:c4:
ee:68:1f:ac:91:40:32:8e:51:98:05:25:86:d9:0b:c8:ff:2b:
c2:53:ed:74:2b:73:70:39:ce:48:d5:7e:6c:de:25:1f:44:39:
76:1f:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:16 2026 by rpki-client