Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214420.roa
File: AS214420.roa (raw, json)
Hash identifier: P5t1jkouXSFb1xjoT4JKx8rlyAgRNJU9OA5KalNkOG0=
Subject key identifier: 5C:02:BB:48:6C:1A:DA:3F:EE:5F:12:03:D4:C3:32:1D:21:79:52:5B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 260E8303CE872F233001CCD087BAEAB7116CCAA8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214420.roa
Signing time: Thu 09 Jul 2026 11:08:50 +0000
ROA not before: Thu 09 Jul 2026 11:03:50 +0000
ROA not after: Thu 08 Jul 2027 11:08:50 +0000
asID: 214420
IP address blocks: 2a0f:85c1:ccd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:0e:83:03:ce:87:2f:23:30:01:cc:d0:87:ba:ea:b7:11:6c:ca:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:50 2026 GMT
Not After : Jul 8 11:08:50 2027 GMT
Subject: CN=5C02BB486C1ADA3FEE5F1203D4C3321D2179525B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:f7:99:39:b7:21:ae:25:16:8a:9b:57:69:
4e:3d:25:bc:de:d5:04:f0:96:0e:ed:d1:54:63:0d:
62:15:7b:d5:36:dd:57:69:cd:61:32:3a:b5:93:17:
b8:c9:0c:a6:47:c6:ad:0c:ab:5a:bd:87:bd:e7:5d:
0e:1f:42:08:a0:f0:e5:2d:12:4b:d8:23:d2:56:9c:
c6:40:c0:79:f1:53:9f:7a:04:e2:1f:c6:8b:a9:bc:
49:f3:68:3b:02:4d:68:6e:5c:9a:09:df:12:99:d3:
e7:a8:5e:cb:e9:5f:24:a7:11:9c:a8:38:52:93:c9:
75:c1:18:3e:c1:80:db:e5:09:95:14:fa:92:4d:a3:
1b:7c:47:f6:6a:09:48:09:97:2e:72:c8:4f:81:78:
86:eb:42:a5:ff:01:00:ee:a2:21:22:33:0c:43:12:
a4:8f:e7:c3:1c:f0:e9:d4:8f:e7:50:e2:3f:85:a3:
b2:51:00:9b:9b:f3:44:93:80:fd:d1:e6:c7:98:92:
c6:5a:51:a7:df:85:35:a7:3d:81:f2:eb:38:71:8e:
78:03:34:ee:8e:2e:ef:df:59:98:05:5f:99:8f:4c:
9d:51:6e:dd:0d:45:4d:ff:5c:8e:71:05:86:0d:87:
9f:8d:aa:ba:70:79:b6:a6:d9:17:0c:be:78:11:7b:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:BB:48:6C:1A:DA:3F:EE:5F:12:03:D4:C3:32:1D:21:79:52:5B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ccd::/48
Signature Algorithm: sha256WithRSAEncryption
ca:18:5e:b7:7f:42:00:d8:47:ac:1c:46:ce:69:b6:b5:fa:db:
3e:f5:79:a1:22:4f:04:0c:ac:5b:47:fb:6f:90:82:7a:7f:7e:
60:d1:8a:7b:db:af:b3:30:78:52:09:3f:59:66:d0:4f:20:65:
3c:fc:42:a5:3d:61:81:1a:3e:41:30:61:ce:73:84:86:d4:d3:
c7:4b:eb:49:0a:b2:c3:3e:13:03:ae:28:52:6f:a0:6b:dd:4b:
16:2e:eb:c5:5b:57:4a:09:19:a7:62:57:da:b0:8a:31:b9:13:
40:e6:97:e8:3b:c8:36:14:cf:2b:ad:0b:a0:42:33:7b:25:42:
b1:4d:4d:9f:ae:1e:0c:f4:09:30:1f:d7:8a:b7:64:e1:20:4c:
96:4a:52:31:58:56:cf:6f:d1:de:4b:86:63:dd:88:79:f9:4a:
70:d8:ca:37:d0:25:21:5f:ca:c8:b2:07:ea:34:d2:42:a1:9e:
dc:14:5b:a6:d2:0c:a9:91:74:31:b4:77:fc:23:c2:ac:61:00:
dc:da:58:fe:71:60:d0:d9:60:51:7c:a3:49:ac:4b:e5:c4:98:
fb:4c:3b:44:90:6e:2f:0f:66:45:68:c1:2c:a7:0d:e9:2e:d5:
4f:c0:1e:12:cf:42:2d:58:31:94:12:09:33:99:41:fc:78:4b:
6d:0b:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:01 2026 by rpki-client