Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214446.roa
File: AS214446.roa (raw, json)
Hash identifier: rGDRr8H/wRsex31+aqCTfQW7Rtp0eRs9s0NHLSI1Nfk=
Subject key identifier: F0:97:01:E9:99:2C:D4:0D:2A:19:18:0B:9C:8E:30:FD:18:83:D0:6F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2BC09F92E08DD855BB9CF3B647A79C39236F7B0B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214446.roa
Signing time: Tue 21 Jul 2026 05:08:55 +0000
ROA not before: Tue 21 Jul 2026 05:03:55 +0000
ROA not after: Tue 20 Jul 2027 05:08:55 +0000
asID: 214446
IP address blocks: 2a0f:85c1:847::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c0:9f:92:e0:8d:d8:55:bb:9c:f3:b6:47:a7:9c:39:23:6f:7b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 21 05:03:55 2026 GMT
Not After : Jul 20 05:08:55 2027 GMT
Subject: CN=F09701E9992CD40D2A19180B9C8E30FD1883D06F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:c2:73:59:b4:13:ea:b7:04:26:5b:d5:23:
4f:b6:f2:f1:ad:2f:67:c4:95:bc:f3:93:24:92:68:
3a:d0:a9:af:06:c1:3f:d2:d7:49:80:57:18:5b:d4:
bd:b8:36:e2:b1:dd:3e:7b:d9:f7:cf:ca:f7:58:84:
21:e3:4e:f7:e1:be:cf:66:ea:19:10:86:94:87:be:
5c:ce:2d:c8:20:c6:22:9e:cd:2c:8e:a3:57:56:a5:
09:f5:4c:8b:90:91:ac:5c:fc:ad:b1:11:80:f8:7f:
5d:cc:3e:c8:4c:50:b3:5f:85:00:bd:2f:dc:5d:6c:
d9:a6:87:4a:af:89:e1:1f:fa:06:64:87:6f:1b:da:
29:8e:2e:bb:f0:e0:fa:a8:7f:e8:ae:61:db:38:0e:
51:ce:ac:8b:63:30:87:75:0f:0e:45:7b:3d:d1:f2:
61:8e:89:fd:7f:93:f5:a9:75:a8:15:c4:99:f2:d1:
1b:89:01:36:1f:4b:7c:da:ef:99:7f:24:fc:1d:0d:
7a:3f:7e:fd:db:d6:7c:3f:84:6c:13:f7:84:22:d9:
7f:4e:f9:80:91:f4:a5:8c:c5:11:5d:27:15:16:fb:
97:f5:61:e0:aa:92:62:e9:8a:d0:fb:00:ac:96:11:
f4:4d:cd:7b:7d:5a:53:6d:92:2e:aa:86:fc:0a:c6:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:97:01:E9:99:2C:D4:0D:2A:19:18:0B:9C:8E:30:FD:18:83:D0:6F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:847::/48
Signature Algorithm: sha256WithRSAEncryption
71:f7:d3:cd:3a:67:92:67:41:43:45:52:5f:41:e6:d4:ca:fb:
7f:bb:2a:a0:c7:52:7f:70:60:0b:d6:26:fb:ed:62:04:09:08:
6c:00:47:ae:08:05:11:9f:08:38:e2:de:23:78:36:ee:2c:58:
72:b0:1e:c7:f2:20:07:26:d5:9f:f4:92:1d:7d:bb:04:87:87:
2f:64:71:0a:be:a7:f3:65:58:ca:86:f6:f4:52:32:5f:19:d5:
d8:e0:5f:14:cd:b5:3a:c3:c2:99:3f:a4:35:09:05:76:4c:82:
2d:c4:a3:48:b8:14:88:07:15:3d:50:5f:ae:a5:c4:92:06:21:
03:88:a7:36:95:30:21:be:89:b2:bb:d8:9e:7e:c1:e1:03:78:
56:d6:7c:d8:69:73:dc:6b:48:03:13:70:08:7f:8d:19:b9:16:
03:30:40:0c:57:dd:84:08:0e:79:4d:c3:19:6f:21:4a:d4:a5:
b2:0a:cc:73:0f:f5:be:f5:5a:5e:2c:b5:8f:33:d2:4b:15:61:
f3:ce:2b:47:b4:96:cc:1f:f8:c7:5c:61:e2:9c:a3:27:37:d9:
3f:cc:46:83:c2:46:83:be:e9:8b:c2:c3:a8:6f:b8:24:ff:47:
2a:ad:33:ea:45:93:ea:ff:fb:f2:cb:87:ea:dd:04:3c:46:e6:
cd:31:92:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUK8CfkuCN2FW7nPO2R6ecOSNvewswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA3MjEwNTAzNTVaFw0yNzA3MjAwNTA4NTVaMDMxMTAvBgNV
BAMTKEYwOTcwMUU5OTkyQ0Q0MEQyQTE5MTgwQjlDOEUzMEZEMTg4M0QwNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLsJzWbQT6rcEJlvVI0+28vGt
L2fElbzzkySSaDrQqa8GwT/S10mAVxhb1L24NuKx3T572ffPyvdYhCHjTvfhvs9m
6hkQhpSHvlzOLcggxiKezSyOo1dWpQn1TIuQkaxc/K2xEYD4f13MPshMULNfhQC9
L9xdbNmmh0qvieEf+gZkh28b2imOLrvw4Pqof+iuYds4DlHOrItjMId1Dw5Fez3R
8mGOif1/k/WpdagVxJny0RuJATYfS3za75l/JPwdDXo/fv3b1nw/hGwT94Qi2X9O
+YCR9KWMxRFdJxUW+5f1YeCqkmLpitD7AKyWEfRNzXt9WlNtki6qhvwKxmShAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU8JcB6Zks1A0qGRgLnI4w/RiD0G8wHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NDQ2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQhHMA0GCSqGSIb3DQEBCwUAA4IBAQBx99PNOmeSZ0FDRVJfQebUyvt/uyqgx1J/
cGAL1ib77WIECQhsAEeuCAURnwg44t4jeDbuLFhysB7H8iAHJtWf9JIdfbsEh4cv
ZHEKvqfzZVjKhvb0UjJfGdXY4F8UzbU6w8KZP6Q1CQV2TIItxKNIuBSIBxU9UF+u
pcSSBiEDiKc2lTAhvomyu9iefsHhA3hW1nzYaXPca0gDE3AIf40ZuRYDMEAMV92E
CA55TcMZbyFK1KWyCsxzD/W+9VpeLLWPM9JLFWHzzitHtJbMH/jHXGHinKMnN9k/
zEaDwkaDvumLwsOob7gk/0cqrTPqRZPq//vyy4fq3QQ8RubNMZJQ
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:04 2026 by rpki-client